The Fall of the Sandwich King

The King of the Sandwich Shop

Imagine you are at the deli counter, ready to buy a sandwich, but before you can even place your order, a guy standing behind you slips a note to the clerk. He pays a little extra to jump the line, buys the last of the ingredients, and drives the price up just enough so that when you finally get to the front, you are paying a premium for the exact same lunch. That is a sandwich attack. In the world of Ethereum, this isn't about lunch; it's about front-running your trade to skim a profit off the top, and one player has turned this into a massive, automated business. Between November 2024 and October 2025, a single entity known as Jaredfromsubway.eth was responsible for roughly 70% of these attacks on the network. At their peak, these tactics hit the network with 60,000 to 90,000 attacks every single month. According to estimates from Cointelegraph Research, this relentless activity drains roughly $60 million from traders every year.

When the Hunter Becomes the Hunted

It is the ultimate irony for a shark to find itself on the menu. JaredFromSubway, a bot that made a living by sandwiching other people’s trades to skim off the top, finally got a taste of its own medicine when it was drained of more than $7.5 million. The exploit, which hit on a Saturday, saw the bot lose over 1,500 ETH along with millions in USDC and USDT, all of which the attacker quickly consolidated into a massive haul of 4,427 ETH. Think of it like a professional card shark who spends all night marking decks, only to sit down at a table where someone else has already swapped in a rigged deck of their own. The bot was caught in a counter-MEV honeypot, a trap designed specifically to bait aggressive automated traders into making a fatal mistake. This wasn't just any victim, either; this was the same bot that had successfully sandwich-attacked Ethereum co-founder Vitalik Buterin just a month prior while he was swapping a position in DigitalBits. After months of running the table on everyone else, the hunter finally learned exactly how it feels to be the one getting played.

The Anatomy of the Trap

Think of this bot like a high-speed vacuum cleaner designed to suck up loose change off the sidewalk, but someone just laid down a patch of superglue covered in fake coins. The bot, known as JaredFromSubway, was built to hunt for profit opportunities on the Ethereum network, but it got played by a counter-MEV honeypot attack. Instead of a standard hack or a bug in the code, the attacker set up a trap that tricked the bot’s automated execution system into granting token approvals. It wasn't a phishing scheme; it was a clever manipulation of how the bot automatically detects and approves trades. Once the bot took the bait, the attacker used those granted permissions to drain roughly $7.5 million in WETH, USDC, and USDT directly from the wallet.

Sorting Through the Fog

The attacker didn't just stumble into this payday; they spent weeks methodically deploying 66 fake token contracts to set the stage. It was a long game of patience that finally culminated on a Saturday in 2025. When you see a heist this clean, remember that the real damage is often done in the quiet weeks of preparation before the first move is ever made.

References

  1. Infamous MEV Bot Jaredfromsubway.eth Drained of $7.5M in Counter-MEV Honeypot Attack
  2. Jaredfromsubway.eth Bot Drained for $7.5M in Counter-MEV Exploit
  3. [Ethereum's Well-Known MEV Bot JaredFromSubway Exploited, Suffers $7.5 Million Loss

Blockchain security firm Blockaid reported that Ethereum MEV bot JaredFromSubway lost approximately $7.5 million after attacker-controlled contracts tricked its automated execution system into](https://x.com/WuBlockchain/status/2068481993361522804) 4. [The MEV bot jaredfromsubway was exploited for $7.7M!

Including: 1,583.5 $ETH($2.75M) 2.87M $USDC 2.09M $USDT

The attacker has already swapped all the funds for 4,427 $ETH($7.7M).

So far, 1,000 $ETH has been deposited into #TornadoCash for laundering.](https://x.com/lookonchain/status/2068527251440963941) 5. JaredFromSubway Attacker Moves 1,000 ETH to Tornado Cash After $7.5 Million Theft