Uniswap TWAP Auction audit
ABDK Consulting reviewed Uniswap (Uniswap TWAP Auction audit) on 14 Nov 2025: 81 findings, 0 critical; 22 marked fixed, 59 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings81
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 12 | 6 |
| Low | 0 | 47 | 14 |
HighSetting clearing price to the minimum clearing price could make the calculated demand above clearing price incorrect.Fixed
The report gives no description here.
HighThere is no check to ensure the provided block number is higher than the last checkpointed block.Fixed
The report gives no description here.
MediumIndexing block number parameters seems odd, as indexes only support strict equality.Fixed
The report gives no description here.
MediumSuboptimal in ValidationHookLib.solFixed
The report gives no description here.
MediumThe semantics of the “prevTickPrice” argument is unclear.Fixed
The report gives no description here.
MediumThese functions contain too much business logic for a single storage contract.Fixed
The report gives no description here.
MediumThis function uses a mixture of number formats and constantly converts between them.Fixed
The report gives no description here.
MediumThis limit appears quite low.Fixed
The report gives no description here.
LowProcedural in BidLib.solFixed
The report gives no description here.
LowProcedural in TokenCurrencyStorage.solFixed
The report gives no description here.
Show 10 more
LowProcedural in TokenCurrencyStorage.solFixed
The report gives no description here.
LowReadability in Auction.solFixed
The report gives no description here.
LowSuboptimal in CheckpointLib.solFixed
The report gives no description here.
LowSuboptimal in ConstantsLib.solFixed
The report gives no description here.
LowSuboptimal in IAuctionStepStorage.solFixed
The report gives no description here.
LowSuboptimal in IBidStorage.solFixed
The report gives no description here.
LowSuboptimal in ITokenCurrencyStorage.solFixed
The report gives no description here.
LowThe number format for this argument is unclear.Fixed
The report gives no description here.
LowThe value “_requiredCurrencyRaised * FixedPoint96.Q96 is calculated twice.Fixed
The report gives no description here.
LowThese diagrams are confusing.Fixed
The report gives no description here.
Show 2 more
LowThis note is confusing.Fixed
The report gives no description here.
LowUsage of “divUint256” here is misleading, as the result is actually not a X7 value.Fixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Uniswap’s security record
UniswapSecurity firm
ABDK Consulting31 projects reviewed · 64 reports · latest Jan 2026
See ABDK Consulting’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us