Here are punchy, under-12-word options: – DeFi Threat Unveiled: Malicious Pools Trick Ethereum and Polygon – Bitcoin News: Malicious Liquidity Pools Trick Ethereum and Polygon – DeFi Threat Exposed: Malicious Pools Trick Ethereum and Polygon – Malicious DeFi Pools Trick Ethereum and Polygon – DeFi’s New Threat: Pools Trick Ethereum and Polygon

Enso Warns of ‘Toxic Pools’ That Manipulate Swap Simulations on Ethereum and Polygon

Decentralized finance infrastructure firm Enso has identified a new class of malicious liquidity pools, dubbed “toxic pools,” that exploit off-chain transaction simulations to mislead routing and quoting systems. The tactic can result in failed swaps, unexpected slippage, and losses for users on networks including Ethereum and Polygon.

What Enso Found

Enso reported that certain liquidity pools are engineered to pass read-only, off-chain simulations with favorable results, only to behave differently when transactions are executed on-chain. Unlike direct theft or contract drain exploits, these pools target the infrastructure that traders, wallets, and aggregators rely on to estimate prices and route orders.

The firm described the approach as a “Jekyll and Hyde” tactic: pools appear benign during simulation but deliver adverse execution conditions in live transactions. This can cause users to accept misleading quotes, incur outsized slippage, or see transactions revert after paying gas fees.

How the Attack Works

  • Off-chain simulation manipulation: The pool returns favorable outputs during read-only calls used by aggregators and wallets to preview a swap.
  • Divergent on-chain behavior: When the actual transaction is broadcast, the pool enforces different logic, such as worse pricing, hidden transfer mechanics, or reverts, undermining the quoted result.
  • Infrastructure blind spots: Because many routing systems depend on simulations for pathfinding and quotes, discrepancies may not be detected before users sign and submit transactions.

Why It Matters

Liquidity pools are core to automated market makers (AMMs) and decentralized exchanges (DEXs), where traders swap tokens without centralized intermediaries. Aggregators and wallets typically simulate transactions to provide price quotes and identify optimal routes. Toxic pools exploit this trust, threatening execution quality and user safety even without an outright contract exploit.

Enso’s findings indicate the risk extends across multiple ecosystems, including Ethereum and Polygon, where simulation-based routing is widespread.

Potential Mitigations

  • Stricter simulation checks: Compare read-only outputs to on-chain behavior where feasible, and flag pools with inconsistent results.
  • Pool vetting and allowlists: Prioritize established pool contracts and consider allowlists for routing, especially for long-tail assets.
  • Stronger slippage and failure handling: Encourage conservative slippage settings and clearer warnings for high-risk routes.
  • Monitoring and alerts: Track revert patterns, abnormal pricing, and code changes to identify pools with “Jekyll and Hyde” characteristics.

Enso’s warning underscores growing sophistication in DeFi threats and the need for infrastructure providers to update safeguards against simulation-aware adversaries.

×