Jaredfromsubway.eth MEV sandwich bot drained in approval trap, losses reported up to $15M

A MEV sandwich bot tied to the Ethereum address Jaredfromsubway.eth was reportedly exploited, with losses described as exceeding $15 million in one report. Multiple outlets also characterized the incident as involving a sandwich-attack bot that was tricked into approving trades under a malicious setup ^{[1] [2]}.

Other reporting puts the theft at $7.5 million, describing a “counter-MEV” style approval trap in which an attacker baited the bot with a fake trade route. Blockaid said the attacker induced Jaredfromsubway.eth to approve routes that were then used to drain WETH, USDC and USDT, while additional coverage similarly described the approval-based drain based on on-chain records ^{[3] [4] [5]}.

The incident has been framed by observers as highlighting security weaknesses in MEV bot operations and the broader need for stronger protections around automated DeFi trading logic ^[1].

The reported exploitation underscores how MEV bots can be targeted through malicious trade inputs and approval flows, leading to substantial token drains on Ethereum ^{[3] [4] [5]}.