The Ethereum trading bot known as Jaredfromsubway.eth lost about $7.5 million after interacting with attacker-controlled contracts, according to Blockaid’s June 20, 2026 assessment reported by Cointelegraph.
Blockaid described an attack on the bot’s automated trading decisions. Counterfeit tokens and pools appeared to offer arbitrage opportunities, inducing the bot to grant approvals that exposed real assets.
Related reporting: New York Judge Delays Hearing On Aave’s Request To Unfreeze $71M In ETH
How a trading opportunity became an authorization risk
The reported mechanism matters because a bot can make a technically valid transaction while making an unsafe decision about whom to trust. A token’s familiar name does not authenticate its contract address, and apparent profit does not establish that a requested approval is safe.
Blockaid’s public incident post is the underlying attribution. The loss amount is a security firm’s assessment, rather than an independently audited final recovery total.
What MEV means
Maximal extractable value concerns opportunities arising from transaction ordering. This incident illustrates a separate exposure: the permissions granted by automated systems interacting with untrusted contracts. Our MEV guide explains the terminology.
Editor’s note: The loss and attack mechanism are attributed to the security assessment. Unverified quotations, attack counts and unrelated claims have been removed.