Some DeFi Pools Are Rigged to Fake a Good Price, Enso Finds
A new piece of research says some DeFi liquidity pools are built to lie to the software that routes a user’s trade. Enso, an onchain development firm, published research on Thursday describing what it calls “toxic pools,...
Archive context
Older archive item. Useful for background and entity history, but not a fresh market-moving signal.
A new piece of research says some DeFi liquidity pools are built to lie to the software that routes a user’s trade.
Enso, an onchain development firm, published research on Thursday describing what it calls “toxic pools,” malicious pools that show an accurate, attractive price when a wallet or trading app simulates a swap, then deliver a materially worse result once the transaction is mined.
How the trick worksMost wallets and aggregators decide which route offers the best price by simulating a trade before sending it. A toxic pool is engineered to game that step: it returns a strong quote during the simulation, so routing systems pick it, then behaves differently on-chain. Unlike ordinary slippage or MEV, the deception targets the quote itself, Enso said.
“The industry has spent years optimizing price discovery,” said Milos Costantini, Enso’s co-founder and chief product officer, in a statement accompanying the report he co-authored. “Our findings suggest the next challenge is verifying execution integrity. If transaction simulations can be manipulated while real execution tells a different story, we need better ways to verify what users actually receive.”
What the data showsEnso documented two cases. A manipulated Curve pool on Ethereum processed more than 129,000 swaps at worse-than-quoted rates, which Enso estimated overstated quotes by roughly $225,000 and burned close to $30,000 in gas on failed transactions. A separate Uniswap v4 hook on Polygon failed 99.1% of the time, repeatedly luring routers before reverting. Enso put the attacker’s realized profit across both pools at about $34,600.
Both pools have since gone quiet, with the Polygon one disabled in May and the Curve pool active through late June. But Enso said the same operator deployed other contracts, suggesting the technique can be repeated, and it found the Ethereum pool alternated between honest and manipulated behavior, so a single check would not catch it.
A vendor with a fixThe disclosure comes as Enso expands Enso Shield, a product it sells to detect exactly this kind of manipulation. The company, which says it has helped settle more than $15 billion onchain, framed the finding as an industry-wide problem and called for independent validation, noting it worked with contacts at Curve and Oku.
Unchained has previously covered how MEV bots quietly extract value from ordinary DeFi trades.
Related Listen: DEX in the City: Why the Market Structure Bill May Not Be Good for DeFi
{"@context":"http:\/\/schema.org\/","@id":"https:\/\/unchainedcrypto.com\/some-defi-pools-are-rigged-to-fake-a-good-price-enso-finds\/#arve-youtube-edq9dr4fhyk","@type":"VideoObject","embedURL":"https:\/\/www.youtube-nocookie.com\/embed\/edQ9DR4FHYk?feature=oembed&iv_load_policy=3&modestbranding=1&rel=0&autohide=1&playsinline=1&autoplay=0"}
The post Some DeFi Pools Are Rigged to Fake a Good Price, Enso Finds appeared first on Unchained.
Why this matters
Ethereum is showing up inside the DeFi theme, so this story is worth tracking for follow-through rather than treating it as a one-off headline.
Original source
Read on UnchainedRelated market context
Crypto Fear Index Drops to 30 After Binance Hack as Ethereum ETFs See $1B in Outflows
The developments highlight growing caution across cryptocurrency markets, although available data do not establish that the Binanc...
What to Do If Your Crypto Card Is Lost, Stolen, or Hacked
You reach for your wallet and the card is gone. Or worse, your phone buzzes with a payment you did not make. With a normal bank ca...
DMG Says Client Assets Are Secure and Highlights Layered Transaction Controls
TL;DR DMG said on October 31 that it and its affiliates were unaffected by the Binance incident. The company described restricted...
Tom Lee calls Ethereum’s 4% post-hack fall bullish
Tom Lee believes crypto's muted reaction to Binance's $6.3 billion hack is another sign that a bull market is underway. The BitMin...
Devcon Opens in Mumbai This Week With Ethereum Builders Facing a Delivery Test
TL;DR Devcon is scheduled for November 3–6 in Mumbai. The official programme spans technical and application topics. Conference pr...
Brazil’s Mercado Bitcoin Freezes Deposits and Withdrawals Due to Ongoing Security Incident, Losses Estimated Near $40 Million
Bitcoin Magazine Brazil’s Mercado Bitcoin Freezes Deposits and Withdrawals Due to Ongoing Security Incident, Losses Estimated Near...