WETH (WETH)

Basically the attacker created a bunch of “fake wrapper” that mint-wrapped real tokens like WETH/USDC/USDT.

Jared was boiled like a frog. Juicy arbitrages on real pools with the fake wrappers. Jared started small to test the waters, made money, things looked safe, then scaled up https://t.co/eIYn9o4aYH

This is actually insane 🤯

JaredFromSubway's MEV bot (the one that's been printing money for ages) just got cooked for $7.5 million in one of the sneakiest exploits I've seen.

This wasn't a contract hack. It wasn't phishing.

The bot basically approved its own robbery because it thought it was about to feast on a juicy MEV opportunity.

What happened:
> Attacker deploys fake wrapper tokens (fWETH, fUSDC, fUSDT) along with fake liquidity pools designed to look profitable
> The bot spots the "opportunity" and does what it's programmed to do, approving attacker-controlled helper contracts as spenders
> During early tests, those approvals get used immediately, so nothing appears suspicious
> In later transactions, the bot grants approvals that are never consumed or revoked, leaving the attacker with unlimited spending power
> Once enough approvals are collected, the attacker executes the final drain
> WETH, USDC, and USDT are pulled directly from the bot contract via transferFrom and sent to the attacker's