Uniswap Universal Router audit

ABDK Consulting17 Nov 2022Code version: not recorded (see the report)

ABDK Consulting reviewed Uniswap (Uniswap Universal Router audit) on 17 Nov 2022: 101 findings, 3 critical; 26 marked fixed, 75 acknowledged.

3 critical findings, fixed

Open the report Open Uniswap’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings101

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	3
High	0	2	8
Medium	0	1	2
Low	0	72	13

HighFlaw in Payments.solAcknowledged

The report gives no description here.

HighOverflow/Underflow in V3Path.solAcknowledged

The report gives no description here.

MediumFlaw in RewardsCollector.solAcknowledged

The report gives no description here.

LowBad datatype in Constants.solAcknowledged

The report gives no description here.

LowBad datatype in Dispatcher.solAcknowledged

The report gives no description here.

LowBad datatype in Dispatcher.solAcknowledged

The report gives no description here.

LowBad datatype in Dispatcher.solAcknowledged

The report gives no description here.

LowBad datatype in IRewardsCollector.solAcknowledged

The report gives no description here.

LowBad datatype in IRewardsCollector.solAcknowledged

The report gives no description here.

LowBad datatype in Payments.solAcknowledged

The report gives no description here.

Show 10 more

LowBad datatype in Payments.solAcknowledged

The report gives no description here.

LowBad datatype in Payments.solAcknowledged

The report gives no description here.

LowBad datatype in Payments.solAcknowledged

The report gives no description here.

LowBad datatype in Permit2Payments.solAcknowledged

The report gives no description here.

LowBad datatype in Permit2Payments.solAcknowledged

The report gives no description here.

LowBad datatype in Permit2Payments.solAcknowledged

The report gives no description here.

LowBad datatype in RewardsCollector.solAcknowledged

The report gives no description here.

LowBad datatype in RewardsCollector.solAcknowledged

The report gives no description here.

LowBad datatype in RewardsCollector.solAcknowledged

The report gives no description here.

LowBad datatype in Router.solAcknowledged

The report gives no description here.

Show 10 more

LowBad datatype in Router.solAcknowledged

The report gives no description here.

LowBad datatype in UniswapPoolHelper.solAcknowledged

The report gives no description here.

LowBad datatype in UniswapPoolHelper.solAcknowledged

The report gives no description here.

LowBad datatype in UniswapPoolHelper.solAcknowledged

The report gives no description here.

LowBad datatype in UniswapV2Library.solAcknowledged

The report gives no description here.

LowBad datatype in UniswapV2Library.solAcknowledged

The report gives no description here.

LowBad datatype in UniswapV2Library.solAcknowledged

The report gives no description here.

LowBad datatype in UniswapV2Library.solAcknowledged

The report gives no description here.

LowBad datatype in UniswapV2Library.solAcknowledged

The report gives no description here.

LowBad datatype in UniswapV2Library.solAcknowledged

The report gives no description here.

Show 10 more

LowBad datatype in UniswapV2Library.solAcknowledged

The report gives no description here.

LowBad datatype in V2SwapRouter.solAcknowledged

The report gives no description here.

LowBad datatype in V2SwapRouter.solAcknowledged

The report gives no description here.

LowBad datatype in V2SwapRouter.solAcknowledged

The report gives no description here.

LowBad datatype in V3Path.solAcknowledged

The report gives no description here.

LowBad datatype in V3SwapRouter.solAcknowledged

The report gives no description here.

LowBad datatype in V3SwapRouter.solAcknowledged

The report gives no description here.

LowBad datatype in V3SwapRouter.solAcknowledged

The report gives no description here.

LowBad naming in UniswapV2Library.solAcknowledged

The report gives no description here.

LowDocumentation in IWETH9.solAcknowledged

The report gives no description here.

Show 10 more

LowDocumentation in Router.solAcknowledged

The report gives no description here.

LowDocumentation in V3SwapRouter.solAcknowledged

The report gives no description here.

LowOverflow/Underflow in V3SwapRouter.solAcknowledged

The report gives no description here.

LowProcedural in BytesLib.solAcknowledged

The report gives no description here.

LowProcedural in Dispatcher.solAcknowledged

The report gives no description here.

LowProcedural in ICryptoPunksMarket.solAcknowledged

The report gives no description here.

LowProcedural in Payments.solAcknowledged

The report gives no description here.

LowProcedural in RewardsCollector.solAcknowledged

The report gives no description here.

LowProcedural in UniswapPoolHelper.solAcknowledged

The report gives no description here.

LowProcedural in UniswapV2Library.solAcknowledged

The report gives no description here.

Show 10 more

LowProcedural in V2SwapRouter.solAcknowledged

The report gives no description here.

LowProcedural in V3Path.solAcknowledged

The report gives no description here.

LowProcedural in V3SwapRouter.solAcknowledged

The report gives no description here.

LowReadability in V2SwapRouter.solAcknowledged

The report gives no description here.

LowReadability in V2SwapRouter.solAcknowledged

The report gives no description here.

LowSuboptimal in BytesLib.solAcknowledged

The report gives no description here.

LowSuboptimal in BytesLib.solAcknowledged

The report gives no description here.

LowSuboptimal in BytesLib.solAcknowledged

The report gives no description here.

LowSuboptimal in BytesLib.solAcknowledged

The report gives no description here.

LowSuboptimal in Commands.solAcknowledged

The report gives no description here.

Show 10 more

LowSuboptimal in Commands.solAcknowledged

The report gives no description here.

LowSuboptimal in Constants.solAcknowledged

The report gives no description here.

LowSuboptimal in Dispatcher.solAcknowledged

The report gives no description here.

LowSuboptimal in IRouter.solAcknowledged

The report gives no description here.

LowSuboptimal in Payments.solAcknowledged

The report gives no description here.

LowSuboptimal in Router.solAcknowledged

The report gives no description here.

LowSuboptimal in UniswapPoolHelper.solAcknowledged

The report gives no description here.

LowSuboptimal in V3Path.solAcknowledged

The report gives no description here.

LowSuboptimal in V3SwapRouter.solAcknowledged

The report gives no description here.

LowUnclear behavior in IRewardsCollector.solAcknowledged

The report gives no description here.

Show 5 more

LowUnclear behavior in Payments.solAcknowledged

The report gives no description here.

LowUnclear behavior in UniswapV2Library.solAcknowledged

The report gives no description here.

LowUnclear behavior in V2SwapRouter.solAcknowledged

The report gives no description here.

LowUnclear behavior in V3SwapRouter.solAcknowledged

The report gives no description here.

LowUnclear behavior in V3SwapRouter.solAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Uniswap’s security record

Uniswap

Audits16 audits by 5 firmsLast audit Aug 2026, by Cantina.

Critical findingsNo open critical findingsAcross the 16 reports, 7 critical findings were reported. Each is marked fixed by the firm that reported it.

IncidentIncident 17 Apr 2020Source: De.Fi incident database.

Open Uniswap’s security record

Security firm

ABDK Consulting

31 projects reviewed · 64 reports · latest Jan 2026

See ABDK Consulting’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.