For several months, someone was quietly building a trap — not for a regular trader, but for the most feared predator on Ethereum.
jaredfromsubway.eth had run an aggressive operation for years: responsible for roughly 70% of all sandwich attacks on the network, it extracted around $60 million annually from ordinary users' swaps. At one point, the bot fronted $1.14 million just to squeeze a few dollars from a small transaction made by Ethereum co-founder Vitalik Buterin. The math was cold, automated, and relentless.
This week it all unraveled. The attacker spent several weeks deploying 66 counterfeit token contracts that mimicked WETH, USDC, and USDT, each paired with fake liquidity pools presenting apparently profitable targets. The bot did exactly what it was built to do: recognized opportunity, automatically authorized the attacker's contracts to manage its funds, and waited. The wait ended with a $7.5 million drain. Some of that money has already been routed through Tornado Cash.
No contract flaw was exploited. No private key was stolen. The attack surface was the bot's own logic — its automated hunger for trades, firing faster than any human could audit. Sixty-six fake tokens, weeks of patience, and a handful of approvals was all it took to empty the wallet of Ethereum's most prolific sandwicher.
What this reveals about MEV infrastructure is uncomfortable: as bots grow larger and more predictable, they become targets themselves. The same automated appetite that made jaredfromsubway.eth dominant left it wide open to a well-timed counter-trap. The predator became prey without a single line of its code being touched.
