Ethereum's biggest sandwich bot drained of $7.5 million in ironic exploit

An attacker drained over $7.5 million from jaredfromsubway.eth, Ethereum's most notorious MEV sandwich bot, by tricking its automated trading logic over several weeks using fake tokens and liquidity pools.

• The attacker lured the bot into approving malicious helper contracts by deploying fake tokens mimicking WETH, USDC and USDT over several weeks.
• Once approvals were left open, the attacker pulled WETH, USDC and USDT from the bot's contracts and routed some funds through Tornado Cash.
• Jaredfromsubway.eth has been responsible for roughly 70% of Ethereum sandwich attacks, which cost traders about $60 million per year.
• Security firm Blockaid said the exploit targeted the bot's decision-making system, not a traditional contract bug or phishing scam.

Coinporta summarises news for fast scanning. Full reporting belongs to the source.