Malicious Uniswap v4 hooks are baiting DeFi traders with fake swap quotes

Liquidity aggregator 0x said on Sept. 14 that it had seen an alarming increase in malicious Uniswap v4 hooks over recent weeks, designed to quote one price and settle at another.In the most extreme trades it observed, users received as much as 50% less at execution than the amount displayed in the quote.An aggregator searches many pools, estimates their output, and typically favors the route promising the most tokens. A malicious pool can win the order by looking unusually attractive during that comparison.Uniswap v4 hooks show when the best quote becomes the attack surfaceIn its analysis of Uniswap v4 hooks, 0x said it examined 84,163 hooks across six chains using static analysis, dynamic analysis, and settled-trade observations. In the dataset, labeled as of Sept. 11, 0x classified 19.4% as safe, 54.2% as malicious, and 26.4% as likely malicious.The report separately said 0x had observed malicious routes deliver up to half less than quoted, a maximum shortfall rather than a typical outcome.One Base hook trading the ETH/NVDAc showed 6,516 fills, including 3,946 charged fills. Fees ranged from 0% to 18%, with an 18% median when charged, and the hook collected $143,037 in total fees...