---
title: "JaredFromSubway MEV bot hacked in $15 million crypto theft"
url: https://daily.dev/posts/jaredfromsubway-mev-bot-hacked-in-15-million-crypto-theft-2tghiyv7k
source_url: https://www.bleepingcomputer.com/news/security/jaredfromsubway-mev-bot-hacked-in-15-million-crypto-theft
type: article
source: "BleepingComputer"
published: 2026-06-22T21:54:26.110Z
updated: 2026-06-22T22:26:53.996Z
tags: ["ethereum", "smart-contracts", "defi"]
reading_time: 3
upvotes: 1
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# JaredFromSubway MEV bot hacked in $15 million crypto theft

**[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 1 upvotes · 0 comments

## Summary

The JaredFromSubway Ethereum MEV bot was drained of $15 million after an attacker deployed fake liquidity pools and tokens to manipulate the bot's opportunity-detection logic. The attacker ran harmless test transactions first to study the bot's behavior, then crafted routes that caused the bot to grant ERC-20 token approvals to attacker-controlled contracts without consuming them. Once sufficient approvals accumulated (up to 92.16 WETH), the attacker used transferFrom to withdraw WETH, USDC, and USDT. JaredFromSubway, known for aggressive sandwich attacks on regular traders, initially offered a $3M bounty for full return of funds, later raising it to $7.5M for 50% return, and is reportedly negotiating with a white-hat group.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.bleepingcomputer.com/news/security/jaredfromsubway-mev-bot-hacked-in-15-million-crypto-theft>

## Similar posts on daily.dev

- [The BetterBank DeFi protocol exploited for reward minting](https://daily.dev/posts/the-betterbank-defi-protocol-exploited-for-reward-minting-tqihtotbv) · Securelist · 2 upvotes · 0 comments
- [Devoured by Bots: How a Missing Parameter Enabled 100% MEV Leakage in a DeFi Zap Contract](https://daily.dev/posts/devoured-by-bots-how-a-missing-parameter-enabled-100-mev-leakage-in-a-defi-zap-contract-dpme1dmpm) · Coins Bench · 1 upvotes · 0 comments
- [Polymarket confirms hackers stole $3M from users after third-party vendor was compromised](https://daily.dev/posts/polymarket-confirms-hackers-stole-3m-from-users-after-third-party-vendor-was-compromised-xjgaqqwd9) · The Next Web · 0 upvotes · 0 comments
- [Polymarket customers lose $3 million in supply-chain attack](https://daily.dev/posts/polymarket-customers-lose-3-million-in-supply-chain-attack-udeprymjt) · BleepingComputer · 0 upvotes · 0 comments
- [The $9M yETH Exploit: How 16 Wei Became Infinite Tokens](https://daily.dev/posts/the-9m-yeth-exploit-how-16-wei-became-infinite-tokens-onm4biw7x) · Check Point Research · 3 upvotes · 0 comments

---

Tags: [#ethereum](https://daily.dev/tags/ethereum), [#smart-contracts](https://daily.dev/tags/smart-contracts), [#defi](https://daily.dev/tags/defi)

[View this post on daily.dev](https://daily.dev/posts/jaredfromsubway-mev-bot-hacked-in-15-million-crypto-theft-2tghiyv7k)
