Enso discloses malicious liquidity pool attack, Curve pool generates approximately $225,000 in inflated quotes
2026-07-17 06:33
Odaily News DeFi infrastructure company Enso disclosed in a report on July 16 a type of malicious liquidity pool called "toxic pools," which return false optimal quotes to wallets and DEX aggregators by manipulating transaction simulations, and change the logic when actually executed on-chain.
Enso stated that the relevant malicious contracts can identify read-only simulation environments and return optimized prices. Once the transaction is broadcast on-chain, it is executed at a worse price or leads to transaction failure. One manipulated Curve pool processed over 129,000 swaps, generating approximately $225,000 in inflated quotes, while more than 37,000 transactions were reverted, consuming nearly $30,000 in gas fees.
On Polygon, a malicious Uniswap v4 hook attracted routing systems with false exchange rates, subsequently triggering a 99.1% transaction failure rate. Enso stated that it has updated its execution protection product, Enso Shield, to detect false quotes in Ethereum and Polygon environments.
Enso stated that the relevant malicious contracts can identify read-only simulation environments and return optimized prices. Once the transaction is broadcast on-chain, it is executed at a worse price or leads to transaction failure. One manipulated Curve pool processed over 129,000 swaps, generating approximately $225,000 in inflated quotes, while more than 37,000 transactions were reverted, consuming nearly $30,000 in gas fees.
On Polygon, a malicious Uniswap v4 hook attracted routing systems with false exchange rates, subsequently triggering a 99.1% transaction failure rate. Enso stated that it has updated its execution protection product, Enso Shield, to detect false quotes in Ethereum and Polygon environments.
บทความแนะนำ
