JaredFromSubway MEV bot attacked, resulting in a loss of 7.5 million dollars
According to on-chain analysts, the well-known Ethereum MEV bot JaredFromSubway was attacked, resulting in a loss of approximately $7.5 million. The attacker constructed a false MEV arbitrage path, inducing the bot to automatically generate token approvals, and under the condition that the approvals were not revoked, used the open authorization to transfer WETH, USDC, and USDT from the bot's contract, with the funds ultimately flowing to the attacker's wallet address. Analysis indicates that this attack was not a traditional phishing or smart contract vulnerability, but a targeted exploitation of the bot's automation execution mechanism.
