Attacker uses approval trap, drains $7.5M from Ethereum MEV bot Jaredfromsubway.eth

Exploit drains ~$7.5M from MEV bot jaredfromsubway.eth. Blockaid ties it to a transaction approval trap on Ethereum.

Blockaid says the attacker abused a vulnerability in the bot’s router contract, tricking it into approving and executing losing trades. The loss totals about $7.5 million, per Blockaid’s on-chain review Blockaid analysis on X.

The attacker used custom smart contracts to force unprofitable sandwich transactions, draining the bot’s balance. Blockaid first flagged the activity via its monitoring channels exploit alert on X.

Jaredfromsubway.eth is one of the most active, gas-heavy arbitrage bots on Ethereum. Blockaid notes sophisticated bots remain exposed to protocol-level smart contract traps commentary on X.

Key points:
- ~$7.5M loss from jaredfromsubway.eth confirmed by Blockaid source.
- Attack vector: approval trap in the router contract details.
- Method: custom contracts inducing losing sandwich trades on-chain thread.