MEV Bot Exploiter Loses $505K Trying to Time the Ethereum Market
Key Takeaways
- •The exploiter of the jaredfromsubway.eth MEV bot lost approximately $505,000, or 264 ETH, after selling stolen ETH at a lower price and repurchasing fewer tokens at a higher average cost.
- •The original hack on June 20–21 extracted roughly $7.7 million by using fake liquidity pools and fraudulent tokens to deceive the automated sandwich-attack bot.
- •The attacker routed millions of dollars through Tornado Cash, a privacy mixer sanctioned by the U.S. Treasury in August 2022, adding significant legal risk to any cash-out attempts.
- •The MEV bot team offered a 50% bounty with a 48-hour deadline for the return of remaining funds, but the hacker has neither responded nor returned any stolen assets.
- •jaredfromsubway.eth is one of Ethereum's most active and profitable MEV bots, known for executing sandwich attacks that profit by front-running and back-running target transactions.
MEV Bot Exploiter Loses $505K Trying to Time the Ethereum Market
The unknown attacker behind June's exploit of the Ethereum maximal extractable value (MEV) bot jaredfromsubway.eth has continued attempting to time the market with their stolen ETH, resulting in significant losses on their illicit gains.
jaredfromsubway.eth is one of the most active and profitable MEV bots operating on Ethereum, known primarily for executing sandwich attacks—a strategy in which a bot front-runs and back-runs a target transaction to profit from the resulting price movement. The bot's prominence in the MEV ecosystem made it a high-value target, and its June exploit sent ripples through the DeFi community, where concerns about bot vulnerabilities and smart-contract security remain a persistent focus.
According to on-chain data from Lookonchain, the exploiter initially sold 2,327 ETH at approximately $1,695 per token shortly after the hack, generating $3.94 million. However, the attacker reversed course and repurchased 2,063 ETH at an average price of $1,912 per token, spending roughly the same $3.94 million but receiving 264 fewer tokens.
This round-trip trade resulted in a realized loss of 264 ETH, equivalent to approximately $505,000.
The Jaredfromsubway exploiter is terrible at trading. A month ago, the exploiter stole $7.7M and swapped it for $ETH. The exploiter later sold 2,327 $ETH ($3.94M) at $1,695, then bought back 2,063 $ETH ($3.94M) at $1,912 10 hours ago. He lost 264 $ETH ($505K).… pic.twitter.com/JRpFrOIkWG
— Lookonchain (@lookonchain) August 7, 2026
The original exploit occurred on June 20–21, when the perpetrator deceived the automated sandwich bot using fake liquidity pools and fraudulent tokens, ultimately extracting approximately $7.7 million. Immediately following the attack, the hacker began routing millions of dollars through Tornado Cash, the Ethereum privacy mixer that was sanctioned by the U.S. Treasury's Office of Foreign Assets Control (OFAC) in August 2022, adding a layer of legal risk to any attempt to launder or cash out the stolen funds.
In response, the team behind the MEV bot issued an ultimatum: a 50% bounty for the return of the remaining funds, with a 48-hour deadline. They threatened to pursue "all available legal and law-enforcement remedies" if the offer was ignored.
The hacker never officially responded, nor have they returned any portion of the stolen funds. The recent unprofitable ETH repurchase stands as the latest indication that the attacker has no intention of complying with the bounty offer—while also underscoring the difficulty even sophisticated on-chain actors face when attempting to trade volatile crypto assets.