Uniswap Hooks Library Milestone 1 Audit

OpenZeppelinFiles named in the report

Audit · firm’s term: audit

OpenZeppelin reviewed Uniswap (Uniswap Hooks Library Milestone 1 Audit) on 24 Feb 2025: 13 findings, 1 critical; 11 marked fixed, 2 open.

1 critical finding, fixed
Open the reportOpen Uniswap’s security record

Report hosted on blog.openzeppelin.com.

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High002
Medium105
Low103
CriticalNon-Explicit Multiple-Pool Support Allows Overwriting Hook StateFixed

The report gives no description here.

HighHooks Do Not Support Native TokensFixed

The report gives no description here.

HighInsufficient Slippage CheckFixed

The report gives no description here.

MediumBaseDynamicFee Hook Can Be Poked ArbitrarilyFixed

The report gives no description here.

MediumDynamic After Swap Fees May Not Work as IntendedFixed

The report gives no description here.

MediumMisleading CommentsFixed

The report gives no description here.

MediumUnintuitive Return DeltaFixed

The report gives no description here.

MediumUnsafe Casting Due to Accrued FeesFixed

The report gives no description here.

LowBaseHook's unlockCallback Not NeededFixed

The report gives no description here.

LowInsufficient DocumentationFixed

The report gives no description here.

Show 1 more
LowRedundant virtual Function ModifierFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (1)

  • test/utils/CurrencySettler.sol

Part of Uniswap’s security record

Uniswap
Audits16 audits by 5 firmsLast audit Aug 2026, by Cantina.
Critical findingsNo open critical findingsAcross the 16 reports, 7 critical findings were reported. Each is marked fixed by the firm that reported it.
IncidentIncident 17 Apr 2020Source: De.Fi incident database.
Open Uniswap’s security record

Security firm

OpenZeppelin

67 projects reviewed · 184 reports · latest Aug 2026

See OpenZeppelin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us