JaredfromSubway.eth, the MEV bot responsible for roughly 70% of sandwich attacks on Ethereum, lost more than $7.5 million after an attacker spent weeks building a honeypot designed to exploit the bot's own automated logic against it.
There's a certain brutal poetry to what happened to JaredfromSubway.eth on June 20, 2026. The address had extracted value from ordinary Ethereum traders for years, front-running and back-running their swaps through sandwich attacks so reliably that it accounted for nearly 70% of all such activity on the network between late 2024 and late 2025. Then someone decided to sandwich the sandwicher, and it worked.
The attacker didn't find a bug in a smart contract or compromise a private key. They studied the bot's decision logic and fed it exactly what it wanted to see. Over several weeks, they deployed 66 fake token contracts built to mimic the interfaces of WETH, USDC, and USDT, paired each with a sham liquidity pool, and structured the routes so the bot's automated opportunity-detection system would read them as live MEV targets. The pools emitted real Swap and Sync events. From the bot's perspective, there was money on the table. It did what it was programmed to do: it granted spending approvals to attacker-controlled helper contracts, one after another, across all 66 positions.
Then the attacker called every backdoor simultaneously in a single transaction and swept the real WETH, USDC, and USDT from the bot's treasury. Blockchain security firm Blockaid, whose CTO Raz Niv described the attack as a
Also read: Bitcoin's mildest bear market on record is quietly rewriting the rules for crypto • Solana now processes 95% of the world's tokenized stock trades but its token price tells a different story • Regulators are finally building the AI they need to police the markets they oversee
