Uniswap v4 permissioned pools audit

OpenZeppelin11 May 2026Code version: not recorded (see the report)

Audit · firm’s term: audit

OpenZeppelin reviewed Uniswap (Uniswap v4 permissioned pools audit) on 11 May 2026: 14 findings, 0 critical; 10 marked fixed, 4 acknowledged.

No open critical findings

Open the report Open Uniswap’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings14

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	4
Low	0	4	6

MediumMint Recipient Is Not Permission-CheckedFixed

The report gives no description here.

MediumPermissionedPositionManager Does Not Remap CONTRACT_BALANCE for Permissioned Adapter CurrenciesFixed

The report gives no description here.

MediumPositions Can Be Opened Before Adapter Verification And Later Realize Permissioned-Token ExposureFixed

The report gives no description here.

MediumUser Permission Checks Can Be Bypassed When Permissioned Pools Use Non-Enforcing HooksFixed

The report gives no description here.

LowHook Allowlist Revocation Is Not Enforced on Liquidity IncreasesFixed

The report gives no description here.

LowPermissionedPositionManager Uses the Same ERC-721 Name and Symbol as PositionManagerFixed

The report gives no description here.

LowPermissionsAdapter Burns Wrapped Units Before Confirming Underlying Transfer SuccessFixed

The report gives no description here.

LowPosition Transfer Recipient Is Not Permission-CheckedFixed

The report gives no description here.

LowSWEEP of Adapter Currency Can Leave Underlying Tokens in PositionManagerFixed

The report gives no description here.

LowUnilateral Admin Transfer Authority in PermissionedPositionManager.transferFromFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Uniswap’s security record

Uniswap

Audits16 audits by 5 firmsLast audit Aug 2026, by Cantina.

Critical findingsNo open critical findingsAcross the 16 reports, 7 critical findings were reported. Each is marked fixed by the firm that reported it.

IncidentIncident 17 Apr 2020Source: De.Fi incident database.

Open Uniswap’s security record

Security firm

OpenZeppelin

67 projects reviewed · 184 reports · latest Aug 2026

See OpenZeppelin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.