The recent attack on the MEV robot Jaredfromsubway.eth, which is known as the ETA, uses automatic trade logic to lose more than $7.5 million. According to the security company Blockaid, the incident was not a non-traditional contractual loophole, nor was it a common fishing attack, but rather an attacker lured a robot to open a token authorization to a malicious auxiliary contract by falsifying a token and a mobility pool.

The attack lasted weeks.

According to Blockaid, the attackers deployed dozens of forged token contracts and false mobility pools over several weeks. These objects are packaged as seemingly profitable trading opportunities and are partly modelled on common assets such as WETH, USDC and USDT.

Once these “opportunities” have been identified by the robots of Jaredframsubway.eth, they automatically create an authorization to use the funds on their behalf. These authorizations will be used immediately in the transaction process in early testing; however, in subsequent design, the attackers have constructed a path in which the authorization remains valid.

Open authorization used to transfer assets

Once the authorization continues, the attackers are given the authority to mobilize funds on an ongoing basis. Subsequently, it used these open-ended authorizations to transfer from the contracts controlled by Jaredframsubway.eth to WETH, USDC and USDT, with a cumulative amount of over $7.5 million.

The chain data consulted by CoinDesk indicate that some of the stolen funds were transferred to Tornado Cash. The report does not mention whether the funds have been frozen or recovered.

  • Related assets: WETH, USDC, USDT
  • Scale of loss: over $7.5 million
  • Some of the funds went to: Tornado Cash

MEV The robot was hit by automated logic.

Jaredframsubway.eth is one of the most famous layers of robotic attack in the Taifeng. The so-called mesh attack means that the robot buys it before the user trades and sells it quickly after the user has made the deal at a lower price and earns the difference. Such losses may not be significant for individual transactions, but may have hidden costs for users over the long term.

According to the data cited, between November 2024 and October 2025, there were between 60,000 and 90,000 series of attacks per month in the Ether factory, resulting in annualized losses to traders of approximately $6 million. About 70 per cent of these are related to Jaredframsubway.eth.

CoinDesk has also previously reported that this robot has even operated a layering operation on a small amount of conversion by Vitalik Buterin, a co-founder of the Taifeng. At the time, it had invested approximately $11.4 million in the run-off transaction, which had resulted in only about $4. This also reflects the high degree of automation of the system, which allows large-scale scanning of plugged transactions in the memory pool.

The incident did not change the damage to the user as such, but revealed another level of risk: When trading systems rely on machine speed, model recognition and profit signals to automatically release authorization, the mechanism itself may also be used in reverse.