Uniswap v4 permissioned pools audit
Audit · firm’s term: audit
OpenZeppelin reviewed Uniswap (Uniswap v4 permissioned pools audit) on 11 May 2026: 14 findings, 0 critical; 10 marked fixed, 4 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings14
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 4 |
| Low | 0 | 4 | 6 |
Marked Note by the firm. Not counted as findings.
NotePermissionless Adapter Verification Does Not Prove Token ControlAcknowledged
The report gives no description here.
NoteUnused ALL_ALLOWED Permission Flag in PermissionFlagsAcknowledged
The report gives no description here.
NoteCOMMAND_FLAG_ALLOW_REVERT Is Ineffective for COMMAND_V4_SWAP in PermissionedV4RouterFixed
The report gives no description here.
NoteInverted NatSpec for DeltaNotPositive/DeltaNotNegative in DeltaResolverFixed
The report gives no description here.
NotePermission Flag Evaluation Semantics Diverge Between HelpersFixed
The report gives no description here.
NotePermissionsAdapter Constructor Reverts For Tokens That Do Not Implement Optional ERC20 MetadataFixed
The report gives no description here.
NoteRedundant Conditional in PermissionsAdapter._updateFixed
The report gives no description here.
NoteTypos in the Events and Errors in the IPermissionsAdapterFactory InterfaceFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Uniswap’s security record
UniswapSecurity firm
OpenZeppelin67 projects reviewed · 184 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us