# Bot的所有文章

在 HTX 新聞中心流覽與「Bot」相關的最新資訊與深度分析。潘蓋市場趨勢、專案動態、技術進展及監管政策，提供權威的加密行業洞察。

FSB Declares Pavel Durov Internationally Wanted in Terrorism Facilitation Case

The founder of the messaging app Telegram, Pavel Durov, has been declared internationally wanted by Russia's FSB security service. He is accused of facilitating terrorist activity. According to the FSB, numerous Telegram channels, chats, and bots are used by Ukrainian intelligence services, terrorists, and extremists to prepare sabotage and mass killings in Russia, and the platform has allegedly failed to remove them. The agency specifically highlighted a recruitment channel called "Dayvynchik." As part of a broader investigation, Russian authorities reportedly detained 46 individuals between the ages of 12 and 22 across several regions. They are alleged to have committed crimes on behalf of Ukrainian intelligence, including attacks on law enforcement and acting as money couriers. Based on this investigation, criminal charges were filed, leading to the accusations against Durov. The FSB also noted that the "Dayvynchik" bot had been banned since late 2025 for containing illegal content, but its materials reportedly remain accessible. This case extends ongoing Russian criticisms of Telegram's moderation policies. Durov has not yet commented on the charges.

cryptonews.ru07/29 09:05

FSB Declares Pavel Durov Internationally Wanted in Terrorism Facilitation Case

cryptonews.ru07/29 09:05

Top-Tier MEV Bot Loses $7.5 Million: Is 'Approval' the Most Overlooked Fatal Risk On-Chain?

The article discusses a sophisticated attack on a prominent Ethereum MEV (Miner Extractable Value) bot, Jaredfromsubway.eth, resulting in a loss exceeding $7.5 million. Unlike typical exploits involving key leaks or smart contract bugs, this attack was a carefully orchestrated "reverse hunt." The attacker spent weeks deploying fake tokens and liquidity pools that mimicked legitimate assets like WETH and USDC. These pools were designed to appear as profitable arbitrage opportunities, tricking the automated bot's trading logic. During its normal operation, the bot was induced to grant ERC-20 token approvals to the malicious contracts. Once sufficient permissions were accumulated, the attacker drained the bot's funds by calling these pre-approved allowances. This incident highlights the often-underestimated risks associated with token approvals in Web3. The article explains that approvals are a fundamental mechanism, allowing smart contracts (like DEXs) to move a user's tokens on their behalf. However, risks arise from practices like granting infinite approvals, the persistence of approvals even after disconnecting from a dApp, and the potential for a once-trusted contract to become compromised later. The piece concludes with advice for managing approval risks: users should adopt the principle of least privilege (approving only the needed amount), use separate wallets for storage versus interactions, and regularly audit and revoke unnecessary approvals using tools like Revoke.cash. It also emphasizes the role of wallets like imToken in providing proactive defenses, such as risk warnings and clear, readable transaction signing interfaces, to help users make informed decisions. Ultimately, wallet security must extend beyond private key protection to include active management of token approvals.

marsbit06/24 05:28

Top-Tier MEV Bot Loses $7.5 Million: Is 'Approval' the Most Overlooked Fatal Risk On-Chain?

marsbit06/24 05:28

Infamous MEV Bot JaredFromSubway Drained For $7.5 Million

The notorious Ethereum MEV bot "JaredFromSubway" has been drained of approximately $7.5 million after attackers tricked its automated system. Security firm Blockaid reported that the bot was deceived into approving malicious trading routes by attacker-controlled contracts. These approvals were then used to siphon WETH, USDC, and USDT from the bot's contract. The incident is ironic as MEV bots are designed to exploit minute market advantages, but in this case, its own automation became the vulnerability. The attack specifically targeted the bot's trading logic, not the Ethereum protocol or a broader DeFi application. It underscores a critical risk in automated trading: the pursuit of speed can create fragility, making systems susceptible to carefully crafted traps. While the financial loss is significant, the broader impact is reputational for MEV infrastructure. It serves as a warning that automated systems granting token approvals require stringent safeguards, simulation, and route verification. The event is considered a targeted exploit on a trading bot, not a network-wide security issue.

bitcoinist06/22 15:31

Infamous MEV Bot JaredFromSubway Drained For $7.5 Million

bitcoinist06/22 15:31

Loss Exceeds $7.5 Million: Analysis of the Honeypot Attack Targeting MEV Bot and Tracking of Stolen Funds

On June 21, Jaredfromsubway.eth, one of Ethereum's most active MEV bots, suffered a sophisticated honeypot attack, losing over $7.5 million in crypto assets. Attackers deployed a complex contract system, including a coordinator, trigger, and fake token/pair contracts, to exploit the bot's arbitrage logic. The core attack trick involved baiting the bot with transactions: small trades appeared normal and consumed token approvals, while larger trades preserved these approvals by using fake swaps. This left the bot with large, unused approvals for assets like USDC, USDT, and WETH. The attacker then drained these approvals in a final step. The stolen funds—$2.87M USDC, $2.04M USDT, and 1,474 WETH—were consolidated and partially laundered through Tornado Cash. This incident highlights that MEV bots must not rely solely on simulated profits for security. Extra caution is required with unfamiliar contracts or custom wrappers in arbitrage paths, and post-transaction allowance checks are strongly recommended.

marsbit06/22 08:30

Loss Exceeds $7.5 Million: Analysis of the Honeypot Attack Targeting MEV Bot and Tracking of Stolen Funds

marsbit06/22 08:30

The Hunter Becomes the Hunted: The Most Profitable MEV Bot Gets Hacked

A well-known and highly profitable Ethereum MEV Bot, Jaredfromsubway.eth, suffered a sophisticated on-chain attack this Saturday, losing over $7.5 million. Analysis by Blockaid and others reveals this was not a conventional phishing or smart contract exploit, but a targeted "counter-MEV honeypot attack." The attacker meticulously laid a trap over several weeks, deploying 66 fake token contracts and liquidity pools disguised as major assets like WETH and USDC. These pools created the illusion of arbitrage opportunities. The MEV Bot's automated system detected these signals, executed trades, and in the process, granted approval permissions to attacker-controlled contracts. These approvals were not revoked, creating a persistent vulnerability. The attacker then exploited this in a single transaction, draining the bot's ETH, USDC, and USDT holdings. Jaredfromsubway.eth is notorious as one of Ethereum's most active and profitable MEV Bots, primarily known for executing "sandwich attacks" to profit from transaction slippage. Estimates suggest it has earned tens of millions in MEV revenue. The incident highlights escalating crypto security threats, demonstrating that even top-tier automated "predators" are vulnerable to novel, logic-based attacks designed to exploit their own operational rules. Following the hack, an unverified X account impersonating Jaredfromsubway.eth emerged, falsely offering a bounty for the return of funds, prompting developer warnings for users to stay vigilant.

marsbit06/21 09:22

Hunter Becomes the Hunted: The Most Profitable MEV Bot Gets Hacked

The prominent Ethereum MEV bot address Jaredfromsubway.eth suffered a targeted on-chain attack, losing over $7.5 million. The incident was identified as a "counter-MEV honeypot attack," where the attacker deployed numerous fake token contracts and liquidity pools over several weeks, mimicking mainstream assets like WETH and USDC to create seemingly profitable arbitrage opportunities. The MEV bot, designed to automatically detect and execute such trades, interacted with the malicious setup. During the process, it granted approvals to attacker-controlled contracts, which were not promptly revoked. The attacker later exploited these persistent permissions in a single transaction, draining the bot's holdings of ETH, USDC, and USDT. Jaredfromsubway.eth is known as one of Ethereum's most active and profitable MEV bots, primarily executing "sandwich attacks" to extract value from user transactions. Its operations have been linked to a majority of such attacks on the network. This event highlights the evolving security threats in crypto, demonstrating that even sophisticated, rule-exploiting systems can become targets of carefully designed behavioral traps. Following the theft, an impersonator account on X falsely claimed to offer a bounty for the return of the funds, prompting warnings from developers.

Odaily星球日报06/21 09:15

Hunter Becomes the Hunted: The Most Profitable MEV Bot Gets Hacked

Odaily星球日报06/21 09:15

When Depth Becomes an Illusion: Polymarket Faces 'Order Attack' Stress Test

A sophisticated "order attack" is exploiting a critical vulnerability in Polymarket's hybrid off-chain matching/on-chain settlement system. For less than $0.10 in gas fees on Polygon, an attacker can initiate a trade and then, in the brief window before on-chain execution, drain their wallet via a high-gas transfer. This causes the initial trade to fail on-chain due to insufficient funds. However, Polymarket's off-chain system responds by forcibly removing all the legitimate market maker orders that were matched with the failed transaction. This attack has two primary profit methods. First, attackers clear the order book of competitors, create a liquidity vacuum, and then place their own orders with artificially wide spreads to monopolize trading. Second, they "hunt" automated trading bots: after a trade is matched off-chain, a bot hedges its new position, but the attacker then forces the original trade to fail on-chain. This leaves the bot with an unhedged, risky position, which the attacker exploits for profit. One identified attacker address, created in February 2026, reportedly profited over $16,000 in a single day by targeting just 7 markets. The attack severely undermines market maker confidence, threatens the platform's liquidity, and exposes a fundamental design flaw. While the community has developed monitoring tools, Polymarket team has not yet issued an official fix.

比推02/26 04:52

When Depth Becomes an Illusion: Polymarket Faces 'Order Attack' Stress Test

比推02/26 04:52

High-Frequency Trading, $100K Annual Income: The Most 'Boring' Profit Myth on Polymarket

A user known as planktonXD (0x4ffe49ba2a4cae123536a8af4fda48faeb609f71) has generated over $106,000 in profit on Polymarket within a year by executing more than 61,000 predictions—averaging around 170 trades per day. This high-frequency, automated strategy focuses on exploiting small, certain opportunities rather than betting on high-risk, high-reward outcomes. The approach is characterized by market-making and micro-arbitrage: placing orders on both sides of the order book to capture spreads or profiting from mispriced options in low-liquidity markets. The largest single win was only $2,527, illustrating a disciplined, risk-managed method that avoids large drawdowns. The bot operates across diverse categories—sports, weather, crypto prices, politics—constantly scanning for pricing inefficiencies. Notable examples include buying heavily undervalued options in niche markets, such as esports matches or extreme crypto price movements, where probability is mispriced due to emotional trading or thin order books. For instance, a $16 bet on SOL falling to $130 (priced at 0.7¢, implying <1% chance) returned $1,574 during a volatile period. Key takeaways: The strategy highlights the power of compounding small gains, the necessity of automation and API tools, and the superiority of high-probability opportunities over high-risk bets. In prediction markets, the most advanced approach isn’t forecasting—it’s managing probability and liquidity.

marsbit02/11 13:06

High-Frequency Trading, $100K Annual Income: The Most 'Boring' Profit Myth on Polymarket

marsbit02/11 13:06

Making a Profit of $100,000 from 'Mosquito Meat' with 170 High-Frequency Trades per Day?

A quantitative trading bot, planktonXD, generated over $106,000 in profit on Polymarket within a year by executing more than 61,000 predictions—averaging 170 trades per day. Instead of betting on high-risk "black swan" events, it employed a high-frequency market-making and arbitrage strategy, focusing on small, consistent gains with minimal drawdowns. The bot capitalized on mispriced odds in low-liquidity markets—such as regional esports matches and crypto price predictions—by placing tiny bets on highly improbable outcomes that were statistically undervalued. For example, it achieved returns as high as 23,750% on a VALORANT match and 9,285% on a SOL price prediction by buying nearly worthless shares that surged during market panics or emotional mispricings. Key takeaways include the power of compounding small gains, the necessity of automated tools and API access, and the importance of probability management over high-risk bets. The strategy highlights that success in prediction markets lies not in forecasting outcomes, but in exploiting liquidity gaps and probabilistic edges.

比推02/11 12:36

Making a Profit of $100,000 from 'Mosquito Meat' with 170 High-Frequency Trades per Day?

比推02/11 12:36

Essential for Polymarket Developers: 18 Core Open-Source Libraries Proven in Practice

Essential Open-Source Tools for Polymarket Developers: 18 Core Libraries This article compiles a curated list of 18 essential, battle-tested open-source libraries for developers building on Polymarket. The selection is based on GitHub stars (community validation), recent activity, fork count, and reliability scores. Key tools include: - **Polymarket Official AI Trading Agent**: For building automated trading strategies. - **Copy Trading Bots**: Multiple bots to automatically replicate top traders' strategies. - **Arbitrage Bots**: Tools to identify and execute risk-free arbitrage opportunities across markets. - **Automated Market Makers**: Bots for providing liquidity and earning fees. - **Official Client SDKs**: Python, TypeScript/JavaScript, and Rust clients for interacting with Polymarket's Central Limit Order Book (CLOB). - **Data & Analytics Tools**: For real-time market intelligence, historical data retrieval, and building analytical dashboards. - **Multi-Platform API**: A unified API for trading across multiple prediction markets. - **Core Smart Contracts**: The official Conditional Token Framework (CTF) contracts. The list is a subset of a larger, sortable database featuring over 1,500 repositories, categorized by reliability, type, programming language, and activity status.

Odaily星球日报01/27 07:38

Essential for Polymarket Developers: 18 Core Open-Source Libraries Proven in Practice