DeFi Alert: How 'Toxic Pools' Are Trick-Quoting Ethereum and Polygon Users

A sophisticated new threat has emerged within the decentralized finance landscape, identified by the infrastructure firm Enso. These 'toxic pools' represent a novel class of malicious liquidity pools that manipulate transaction simulations rather than performing direct fund thefts, specifically targeting users on the Ethereum and Polygon networks.

By employing a 'Jekyll and Hyde' tactic, these malicious actors exploit the very infrastructure traders rely on to verify their moves. This shift from traditional smart contract exploits to simulation manipulation poses a significant risk to DeFi security, highlighting a critical vulnerability in how users interact with decentralized exchanges and transaction simulators.

Using a 'Jekyll and Hyde' tactic, these pools present a benign appearance during the simulation phase—the step where users check if a trade is safe—only to execute malicious actions once the transaction is actually broadcast to the blockchain. This sophisticated method is currently targeting core infrastructure users on major networks, including Ethereum and Polygon.