The sandwich-attack bot operated by JaredfromSubway.eth extracted 117,007 ETH, worth about $295 million, between its first recorded extraction in March 2023 and Aug. 28. In June 2026, an unidentified attacker deployed 66 counterfeit token contracts resembling WETH, USDC and USDT, tricking the bot into approving token spending before draining at least $7.5 million in ETH and stablecoins; the proceeds were sent through Tornado Cash and have not been recovered. The incident highlights how sandwich bots exploit Ethereum's publicly visible mempool by placing trades before and after a target transaction, with the victim's slippage creating the bot's profit. MEV-Boost, used by more than 90% of Ethereum validators to outsource block construction, remains concentrated: relay.ultrasound.money, Titan Relay and bloXroute's regulated relay handled 34.0%, 28.5% and 25.0% of payloads, respectively, in a 24-hour snapshot, while Titan's builder assembled 50.3% of blocks. Monthly sandwich extraction declined from roughly $10 million in late 2024 to about $2.5 million in October 2025, a 75% drop, although peak annual trader losses were estimated at about $60 million. Ethereum's planned Glamsterdam upgrade includes enshrined proposer-builder separation, or ePBS, which would move the MEV-Boost auction into the protocol and remove relays as trusted intermediaries.