Uniswap v4 permissioned pools security review
Cantina reviewed Uniswap (Uniswap v4 permissioned pools security review) on 20 Aug 2026: 14 findings, 0 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings14
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 0 | 13 |
MediumGeneric BURN_6909 steals approved claimsFixed
The report gives no description here.
LowMapping a missing permissionsAdapterFactory to UnsupportedProtocol bricks ERC20 v4 swapsFixed
The report gives no description here.
LowPermissioned payment actions bypass swap-only controlsFixed
The report gives no description here.
LowPermissioned position transfers drop the LP recipient allowlistFixed
The report gives no description here.
LowPermissionedPositionManager mints ordinary pools into frozen NFTsFixed
The report gives no description here.
LowPermissionedPositionManager only enforces the hook allowlist when mintingFixed
The report gives no description here.
LowPermissionFlags.hasFlag can incorrectly return true valueFixed
The report gives no description here.
LowPermissionsAdapter does not follow the ERC165 standard for checking interface compatibilityFixed
The report gives no description here.
LowPermissionsAdapter should use SafeERC20 for underlying transfersFixed
The report gives no description here.
LowPermissionsAdapter.depositForVerification should use SafeERC20 for token transfersFixed
The report gives no description here.
Show 4 more
LowPoolManager self-take unwraps raw underlyingFixed
The report gives no description here.
LowRevoked holders can reauthorize liquidity increasesFixed
The report gives no description here.
LowUnauthorized UNSUBSCRIBE Removes SubscribersFixed
The report gives no description here.
LowWithdrawClaim emits unresolved sentinel recipientFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Uniswap’s security record
UniswapSecurity firm
Cantina37 projects reviewed · 175 reports · latest Oct 2026
See Cantina’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us