The most prolific MEV bot on Ethereum just got gutted. Jaredfromsubway.eth, responsible for an estimated 70% of sandwich attacks on the network between November 2024 and October 2025, lost $7.5 million after an attacker tricked the bot into approving fake trading routes. The drained funds included WETH, USDC, and USDT. Security firm Blockaid confirmed the exploit, which turned the bot's own approval mechanism against it.

ETH trades at $1,729.52, up a negligible 0.22% over 24 hours. Market cap sits at $208.8 billion on $8.8 billion in daily volume. The broader market remains locked in a pattern of cautious sideways movement while macro risks and institutional outflows dominate the narrative.

The Predator Becomes Prey

Sandwich attacks are a form of MEV extraction where a bot front-runs and back-runs a user's swap, profiting from the price impact in between. Jaredfromsubway.eth had been the single largest operator in this category on Ethereum for roughly a year. The irony of the exploit is hard to miss: a bot that made millions by manipulating others' transactions was itself manipulated through a social engineering-style attack on its approval logic.

The $7.5 million loss won't reshape Ethereum's MEV landscape overnight, but it does illustrate that even sophisticated on-chain actors carry risk in their own infrastructure. The exploit also comes as AI-powered security tools are becoming cheaper and more accessible, raising the bar for what counts as adequate due diligence before deploying code, whether that code is a DeFi protocol or an MEV bot.

Bitcoin ETF Outflows Hit Record Territory

US-listed spot Bitcoin ETFs recorded $6.4 billion in net outflows over the past 30 days, the largest such drawdown since the products launched in January 2024. The outflows coincide with a 17% decline in Bitcoin's price over the same period. Bitcoin held near $64,000 over the weekend after recovering from Friday's sell-off, but the broader trend remains under pressure.

The outflows reflect more than just price-chasing. Geopolitical risk is back in focus as Iran ordered the closure of the Strait of Hormuz, complicating US-Iran ceasefire talks in Switzerland. Oil markets and risk assets both reacted, and crypto was no exception. Bitcoin's crypto market dominance continues to hold above a key support level, a signal that capital is consolidating into BTC rather than rotating into altcoins. The long-anticipated altseason may be further away than many hoped.

Strategy's preferred stock STRC, meanwhile, slipped below par value, slowing the company's Bitcoin acquisition pace and renewing debate about whether Michael Saylor's leveraged BTC strategy remains viable. A sequence of bond buybacks, shrinking cash reserves, and the bear market in Bitcoin all contributed to the decline.

Schwab and Cboe Push Into Prediction Markets

Charles Schwab is working with Cboe to launch binary options contracts tied to the S&P 500, according to the Wall Street Journal. The "yes-or-no" contracts represent Schwab's first move into prediction-market-style products, a category where Kalshi and Polymarket already hold significant market share.

The entry of a traditional brokerage of Schwab's scale validates the prediction market format that crypto-native platforms pioneered. It also raises competitive questions. Polymarket's on-chain model offers transparency and permissionless access. Kalshi operates under CFTC regulation. Schwab brings distribution to millions of retail accounts. The three models will now compete directly for the same category of speculative capital.

DeFi and Infrastructure

Secret Network's Axelar bridge was drained of $4.67 million through an infinite-mint exploit that went undetected for seven days. Roughly $770,000 of the stolen funds remains in the attacker's Axelar wallet. Secret Network said Axelar declined its request to freeze the assets, highlighting ongoing tensions around bridge security and the limits of cross-chain coordination.

Andre Cronje and two other board members resigned from Sonic Labs, the company formerly known as Fantom. Sonic's S token trades 97% below its peak. The departures were framed as amicable, with all three said to "remain invested in Sonic's success," though the gap between that statement and the token's price chart is considerable.

The European Commission opened public comment on MiCA 2.0 revisions, with the crypto industry pushing for adjustments to stablecoin and DeFi provisions. Meanwhile, the Philippine SEC signaled readiness to embrace RWA tokenization, with Commissioner Rogelio Quevedo arguing that tokenized assets could give Filipino investors legitimate alternatives to scam-prone markets.

Japan's Pension Experiment

A Japanese corporate pension fund covering roughly 1,200 small and medium-sized businesses plans to allocate approximately 1% of its assets to crypto, according to Nikkei. The allocation is small by design, a toe-in-the-water approach consistent with how institutional capital typically enters unfamiliar asset classes. If executed, it would mark one of the first direct crypto allocations by a pension fund in Asia's second-largest economy.

Magic City Update

The Philippines' move toward RWA tokenization has a direct line to Miami. Homebase, the Miami-based platform focused on real estate tokenization, has been building in this exact category, making fractional ownership of property accessible through blockchain infrastructure. As regulators in Manila and Brussels simultaneously signal openness to tokenized assets, Miami sits at the intersection of the trend: a city with a deep real estate market, an active builder community, and regulatory positioning through Florida's crypto-friendly legislative framework.

Miami's summer cadence tends to shift from conference season toward heads-down building. The Jaredfromsubway.eth exploit is the kind of event that resonates in local Ethereum circles, where MEV research and smart contract security remain active areas of focus. Several Miami-based security firms and auditing shops have expanded their AI-assisted tooling in recent months, part of the broader trend toward automated vulnerability detection that researchers say is reshaping industry standards for code deployment.

For builders shipping on Ethereum L2s out of Miami, the Axelar bridge exploit serves as another data point in favor of conservative bridge design and aggressive monitoring. Arbitrum and Polygon, both networks with significant Miami-based development activity, have so far avoided similar bridge-level compromises, though no cross-chain architecture is immune.