JaredFromSubway Bot Exploit

Overview

The attacker took advantage of permission revocations in the bot's transactions, keeping spenders armed to drain funds.

The MEV sandwich bot JaredFromSubway lost $7.5M after an attacker exploited smart contract permissions using fake tokens, leading to a bounty offer and threat of legal action.

Sources & Timeline

1. NewDecrypt95%

   The attacker took advantage of permission revocations in the bot's transactions, keeping spenders armed to drain funds.

   Jun 22, 2026, 6:12 PMRead on Bytewit →