Jaredfromsubway’s MEV bot on the Ethereum blockchain was compromised, and attackers siphoned off assets valued at more than $15 million, according to on‑chain analytics, while Blockaid’s alert cites an initial loss of $7.5 million.
Attack Overview
Blockaid’s vulnerability detection system flagged the breach as a manipulation of the bot’s automated MEV execution routine rather than a conventional phishing scheme. The alert indicated that the exploit rerouted the bot to validate tokens for contracts owned by the perpetrators, granting them immediate spending authority.
Technical Mechanics
Hackers introduced counterfeit wrapper tokens—fWETH, fUSDC, fUSDT—and paired them with a fabricated fCAP token to construct deceptive liquidity pools. The MEV bot interpreted these arrangements as profitable arbitrage routes, automatically approving the attackers’ auxiliary contracts, which were then drained of the authorized assets.
Market Impact
Investors watching the crypto market now view the incident as a reminder of the risks inherent in automated trading bots, especially those operating on volatile blockchain platforms. The sudden loss of multi‑million‑dollar positions could pressure the price of Ethereum and related assets, prompting tighter security measures across the ecosystem.