3.7M @CoinDesk JUST IN: Ethereum's most notorious sandwich bot, jaredfromsubway.eth, has been drained of $7.5M +
An attacker spent weeks deploying fake tokens and liquidity pools to trick the bot into approving transfers, then draining its $WETH, $USDC and $USDT. https://t.co/ierYCAnwWS
112
34
18.7K
18.6K @0x_Abdul 18.6K @0x_Abdul i was expecting this to be another simple approval drain, but the fake token route is what makes the jaredfromsubway exploit interesting
it built a route full of fake fWETH and fCAP, minted them and moved them through the pairs
then it made the bot approve real WETH from the canonical WETH contract to the fake wrapper addresses
thats a very specific attack on MEV bot assumptions .. almost like someone knew (or tested it before)
MEV bots are trained to care about whether a route is profitable, whether the math works, and whether the tx can land before someone else copies it
but this is a new type of MEV risk that i haven't seen before
110
17
28.7K
33.7K @BadwiCrypto 🚨 Theft of $15 million from the famous MEV robot JaredFromSubway on the Ethereum network 👀
📊 Attackers were able to lure the robot using fake tokens such as fWETH, fUSDC, and fUSDT, along with counterfeit liquidity pools that appeared to offer attractive profit opportunities.
⚠️ This tricked the robot and granted it permissions to contracts controlled by the attackers.
💰 In the end, the attackers managed to withdraw approximately $15 million of the robot's funds.
🌐 The incident highlights the risks facing automated systems, as they can be exploited through carefully crafted fake data or trading opportunities.
👀 Even the most famous crypto robots are not immune to mistakes and exploits.
15
0
1.4K
