{"id":431595,"date":"2026-06-23T00:23:35","date_gmt":"2026-06-22T18:53:35","guid":{"rendered":"https:\/\/dripp.zone\/news\/ethereum-mev-bot-jaredfromsubway-threatens-legal-action-after-7-5-million-loss-crypto-news\/"},"modified":"2026-06-23T01:43:05","modified_gmt":"2026-06-22T20:13:05","slug":"ethereum-mev-bot-jaredfromsubway-threatens-legal-action-after-7-5-million-loss-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/ethereum-mev-bot-jaredfromsubway-threatens-legal-action-after-7-5-million-loss-crypto-news\/","title":{"rendered":"Ethereum MEV Bot JaredFromSubway Threatens Legal Action After $7.5 Million Loss &#8211; Crypto News"},"content":{"rendered":"<div style=\"position:relative;overflow:visible;font-size:1.2em;line-height:1.58\">\n<div class=\"pt-8 pb-10 border-t border-b border-decryptGridline \">\n<h4 class=\"sc-b2a202e4-4 bNRGqr gg-dark:text-white\" color=\"#333\">In brief<\/h4>\n<ul>\n<li class=\"font-meta-serif-pro font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">Jaredfromsubway, a well-known trading bot, fell victim to a series of transactions that left its logic exposed to malicious behavior. <\/li>\n<li class=\"font-meta-serif-pro font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">The trading bot has developed a reputation for so-called sandwich attacks, but it was abused by fake tokens and fraudulent smart contracts.<\/li>\n<li class=\"font-meta-serif-pro font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">Jaredfromsubway\u2019s operator offered the attacker a bounty, yet a portion of the stolen funds had been transferred to Tornado Cash.<\/li>\n<\/ul>\n<\/div>\n<p><iframe title=\"Spotify Embed: The Decrypt News roundup with TylerD - June 22nd\" style=\"border-radius:12px\" width=\"100%\" height=\"152\" frameborder=\"0\" allowfullscreen=\"\" allow=\"autoplay; clipboard-write; encrypted-media; fullscreen; picture-in-picture\" loading=\"lazy\" src=\"https:\/\/open.spotify.com\/embed\/episode\/3xwC98qJuZP885JTr4X6yD?utm_source=oembed\"><\/iframe><\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\"><span style=\"font-weight:400\">A well-known trading bot took a notable hit this weekend after it fell victim to a series of transactions that left its logic exposed to malicious behavior.<\/span><\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\"><span style=\"font-weight:400\">The $7.5 million attack, which took place on Saturday, marked a sudden setback for \u201cjaredfromsubway\u201d and the formula it has used to quietly notch profits on <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/decrypt.co\/resources\/what-is-ethereum-quickly-explained-four-minute-guide\" target=\"_blank\" class=\"sc-adb616fe-0 bJsyml\"><span style=\"font-weight:400\">Ethereum<\/span><\/a><span style=\"font-weight:400\"> for years.<\/span><\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\"><span style=\"font-weight:400\">The trading bot has been credited with perfecting the so-called sandwich attack. The strategy is widely viewed as a form of market manipulation on decentralized exchanges, involving trades that are placed around pending transactions and hurt price execution.<\/span><\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">Essentially, an attacker presented jaredfromsubway with misleading opportunities that later allowed the bad actor to drain legitimate funds, according to security firm Blockaid. The scheme boiled down to fake tokens and fraudulent smart contracts, Blockaid added in an X <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/blockaid_\/status\/2068433948447736163?s=20\" target=\"_blank\" rel=\"nofollow external noopener\" class=\"sc-adb616fe-0 bJsyml\"><span style=\"font-weight:400\">post<\/span><\/a><span style=\"font-weight:400\">.<\/span><\/p>\n<p><iframe loading=\"lazy\" style=\"border:0\" src=\"https:\/\/myriad.markets\/embed\/market\/ethereum-next-move-pump-to-3k-or-dump-to-1-5k-2165c555-6846-4387-84ab-9f11d08820b9\" width=\"100%\" height=\"415px\"><span style=\"display:inline-block;width:0px;overflow:hidden;line-height:0\" data-mce-type=\"bookmark\" class=\"mce_SELRES_start\">\ufeff<\/span><\/iframe><\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">Jaredfromsubway is designed to continuously scan for profitable trades, and in order to act on them, it occasionally needs to provide entities with permission to move funds on its behalf.<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\"><span style=\"font-weight:400\">Some transactions that jaredfromsubway engaged in revoked those powers as soon as they were completed, while the ones that were crafted later by the attacker didn\u2019t. \u201cThat left attacker-controlled spenders armed,\u201d Blockaid explained.<\/span><\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\"><span style=\"font-weight:400\">Although the crypto industry has developed several services to prevent sandwich attacks, entities like jaredfromsubway are viewed, in some ways, as unavoidable. However, Saturday\u2019s attack showed that the trading bot\u2019s logic is far from infallible.<\/span><\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\"><span style=\"font-weight:400\">The trading bot\u2019s operator appeared to recognize this. In an on-chain <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/etherscan.io\/idm?addresses=0xae2fc483527b8ef99eb5d9b44875f005ba1fae13%2C0x5af38735b215b00aa7c9f93fed7ee415cecb36e1&#038;type=1&#038;__cf_chl_tk=L7MusaLM5xdQj.1WPOgaTU2iFODKHA8wfjVIKcz_pSk-1782140140-1.0.1.1-BFYv0.PywoPdZrO6xD6SEvU6NcWf0Coet3PrifLYk0o\" target=\"_blank\" class=\"sc-adb616fe-0 bJsyml\"><span style=\"font-weight:400\">message<\/span><\/a><span style=\"font-weight:400\">, they offered a \u201c50% white hat bounty\u201d for the return of 2,150 Ethereum, currently valued at roughly $3.7 million, within the next 48 hours. Otherwise, the individual behind the bot threatened to pursue legal remedies and involve law enforcement.<\/span><\/p>\n<div class=\"relative w-full\">\n<blockquote class=\"twitter-tweet mx-auto\">\n<p lang=\"en\" dir=\"ltr\">You can&#8217;t make this up \ud83d\udc80<\/p>\n<p>The wallet that owns metamask.eth had something to say to JaredFromSubway regarding his recent onchain bounty request.<\/p>\n<p>There&#8217;s virtually no chance the person or group behind the exploit takes the bounty, and there&#8217;s also no chance Jared pursues legal\u2026 <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/t.co\/bSDkGZJ4Ik\" data-wpel-link=\"internal\">https:\/\/t.co\/bSDkGZJ4Ik<\/a> <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/t.co\/3Xhx0YKH2T\" data-wpel-link=\"internal\">pic.twitter.com\/3Xhx0YKH2T<\/a><\/p>\n<p>\u2014 zubic (@zubic_eth) <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/zubic_eth\/status\/2069100450729644275?ref_src=twsrc%5Etfw\" data-wpel-link=\"external\" rel=\"nofollow external noopener\">June 22, 2026<\/a><\/p>\n<\/blockquote>\n<\/div>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\"><span style=\"font-weight:400\">\u201cFinally, someone punished the infamous sandwich attacker,\u201d an onlooker <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/akaleviack\/status\/2069103175739506999?s=20\" target=\"_blank\" rel=\"nofollow external noopener\" class=\"sc-adb616fe-0 bJsyml\"><span style=\"font-weight:400\">remarked<\/span><\/a><span style=\"font-weight:400\"> on X. \u201cPeople don&#8217;t die without experiencing what they&#8217;ve inflicted on others.\u201d<\/span><\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\"><span style=\"font-weight:400\">Sandwich attacks fall under the umbrella of <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/decrypt.co\/resources\/what-is-maximal-extractable-value-mev-what-blockchain-miners-need-to-know\" target=\"_blank\" class=\"sc-adb616fe-0 bJsyml\"><span style=\"font-weight:400\">Maximal Extractable Value<\/span><\/a><span style=\"font-weight:400\"> (MEV). Coined in 2019, the term refers to validators and other participants who are able to generate profits by reordering transactions before they are finalized.<\/span><\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\"><span style=\"font-weight:400\">Following the exploit on Saturday, the attacker appeared to begin covering their tracks.<\/span><\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\"><span style=\"font-weight:400\">Security firm PeckShield noted in an X post that\u2014after stealing wrapped Ethereum and stablecoins\u2014a portion of the funds was <\/span><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/PeckShieldAlert\/status\/2068457314416545978?s=20\" target=\"_blank\" rel=\"nofollow external noopener\" class=\"sc-adb616fe-0 bJsyml\"><span style=\"font-weight:400\">swapped and partially deposited<\/span><\/a><span style=\"font-weight:400\"> in Tornado Cash, a common resource for attackers trying to obscure the flow of ill-gotten gains.<\/span><\/p>\n<div class=\"my-4 border-b border-decryptGridline\">\n<div class=\"text-start p-8 md:py-12 md:px-12 max-w-prose relative\"><span class=\"border-t-4 border-l-4 w-4 h-4 md:border-t-[6px] md:border-l-[6px] md:w-6 md:h-6 border-decryptPurple dark:border-decryptNeon gg-dark:border-cc-pink-2 absolute top-4 left-4 md:top-6 md:left-6\"\/><span class=\"border-t-4 border-l-4 w-4 h-4 md:border-t-[6px] md:border-l-[6px] md:w-6 md:h-6 border-decryptPurple dark:border-decryptNeon gg-dark:border-cc-pink-2 absolute rotate-180 bottom-4 right-4 md:bottom-6 md:right-6\"\/><\/p>\n<h3 class=\"font-akzidenz-grotesk font-bold text-xl md:text-3xl md:text-center gg-dark:text-white\">Daily Debrief<!-- --> Newsletter<\/h3>\n<p>Start every day with the top news stories right now, plus original features, a podcast, videos and more.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In brief Jaredfromsubway, a well-known trading bot, fell victim to a series of transactions that left its logic exposed to malicious behavior. The trading bot has developed a reputation for so-called sandwich attacks, but it was abused by fake tokens and fraudulent smart contracts. Jaredfromsubway\u2019s operator offered the attacker a bounty, yet a portion of [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":431599,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[230,225,221,227,226,228,229,60,223,224,222],"class_list":["post-431595","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency","tag-brave","tag-coinbase","tag-crypto","tag-decentralised","tag-decentralized","tag-decentralized-exchange","tag-erc-20","tag-featured","tag-meme-coin","tag-robinhood","tag-solana"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/431595","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=431595"}],"version-history":[{"count":1,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/431595\/revisions"}],"predecessor-version":[{"id":431600,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/431595\/revisions\/431600"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/431599"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=431595"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=431595"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=431595"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}