The Sandwich Bot Got Sandwiched: jaredfromsubway Drained for $7.5M in a Honeypot Built Just for It

For two years, the bot known as jaredfromsubway.eth was the predator everyone on Ethereum learned to fear. On June 21 it became the prey, drained for roughly $7.5 million after an attacker spent weeks building a trap engineered around the bot's own greed.

What Happened

jaredfromsubway.eth is the best-known "sandwich" bot on Ethereum — an automated machine that scans the mempool for pending trades, slips its own orders in front of and behind them, and pockets the price difference. That tactic is one of the uglier forms of MEV, or maximal extractable value, and this bot has been extracting it at scale since 2023.

The attacker didn't break the bot's code. They weaponized its decision-making. Over several weeks they deployed 66 counterfeit token contracts designed to imitate Wrapped ETH, USDC and USDT, then paired them with fake liquidity pools that looked, to an automated scanner, like easy profit. The bot took the bait. In chasing those phantom trades it approved token spending to attacker-controlled helper contracts — a single approval alone signed over more than 92 WETH. A final contract then used those open allowances to sweep the bot's real funds.

Security firms Blockaid and PeckShield pegged the on-chain haul at about $7.5 million in WETH, USDC and USDT. Blockaid CTO Raz Niv called it a "counter-MEV honeypot attack" — a trap that turned the bot's profit-seeking logic into the very thing that emptied it.

The $15 Million Claim and the Bounty

The story got noisier after the fact. An X account using the bot's name claimed a $15 million loss and dangled a $1 million bounty for the return of the funds. On-chain analysts aren't buying the figure — the verifiable drain is closer to $7.5 million — and there's evidence the account is a likely impersonator rather than the real operator. Either way, the bounty offer hasn't pulled the money back.

Why It Matters

Sandwich bots are among the most resented actors in DeFi because their profits come straight out of ordinary traders' slippage. Watching the most prolific one get hoisted by its own automation is, for a lot of people, the closest thing to karma the mempool has ever served up. But there's a real lesson underneath the schadenfreude: as counter-MEV tactics get more sophisticated, the bots feeding on retail trades are no longer the apex predators they assumed they were. The hunters now have to watch for traps too.

It also underscores how fragile blanket token approvals remain — the same lazy permissioning that wrecks everyday users is exactly what cost this bot millions. The machine that lived by exploiting Ethereum's plumbing just died by it.

☕₿