The exploiter responsible for draining Jaredfromsubway.eth sold 2,167 ETH for $4.05 million at $1,872 per token. The sale came roughly 10 hours after the same entity acquired 2,063 ETH for $3.94 million at $1,912.
The trade extends a pattern of poor execution. About a month ago, the entity sold 2,327 ETH for $3.94 million at $1,695, then bought back 2,063 ETH for $3.94 million at $1,912—a round-trip that cost 264 ETH, or roughly $505,000 at the time.
Jaredfromsubway.eth was one of Ethereum's most prolific MEV bots, specializing in sandwich attacks that effectively taxed on-chain traders by manipulating transaction ordering within blocks. The bot was linked to approximately 70 percent of sandwich attacks on Ethereum between November 2024 and Oct. 2025.
The exploit that drained it did not involve a smart contract bug or a stolen private key. Crypto security platform Blockaid said its exploit detection system flagged the incident, which used dozens of fake ERC-20 tokens—some mimicking WETH, USDC and USDT—paired with sham liquidity pools designed to appear as profitable opportunities to the bot's automated execution logic. The setup tricked the bot into granting token approvals, which the attacker then used to drain roughly $7.5 million in crypto.
The bot's indiscriminate targeting had drawn attention before: it executed a sandwich attack on a trade made by Ethereum co-founder Vitalik Buterin.
ETH was trading at $1,886 at time of publication, down 1.7 percent over 24 hours. The exploiter's latest sale at $1,872 came in below both the current market price and their most recent entry.
