Uniswap Universal Router audit

ABDK Consulting17 Nov 2022Code version: not recorded (see the report)

ABDK Consulting reviewed Uniswap (Uniswap Universal Router audit) on 17 Nov 2022: 101 findings, 3 critical; 26 marked fixed, 75 acknowledged.

3 critical findings, fixed

Open the report Open Uniswap’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings101

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	3
High	0	2	8
Medium	0	1	2
Low	0	72	13

CriticalFlaw in V3SwapRouter.solFixed

The report gives no description here.

CriticalFlaw in V3SwapRouter.solFixed

The report gives no description here.

CriticalOverflow/Underflow in Permit2Payments.solFixed

The report gives no description here.

HighOverflow/Underflow in V2SwapRouter.solFixed

The report gives no description here.

HighSuboptimal in BytesLib.solFixed

The report gives no description here.

HighSuboptimal in Dispatcher.solFixed

The report gives no description here.

HighSuboptimal in Dispatcher.solFixed

The report gives no description here.

HighSuboptimal in V3SwapRouter.solFixed

The report gives no description here.

HighUnclear behavior in Payments.solFixed

The report gives no description here.

HighUnclear behavior in Payments.solFixed

The report gives no description here.

Show 10 more

HighUnclear behavior in V2SwapRouter.solFixed

The report gives no description here.

MediumOverflow/Underflow in V3Path.solFixed

The report gives no description here.

MediumProcedural in RouterCallbacks.solFixed

The report gives no description here.

LowBad datatype in Constants.solFixed

The report gives no description here.

LowBad datatype in Router.solFixed

The report gives no description here.

LowBad datatype in Router.solFixed

The report gives no description here.

LowBad datatype in Router.solFixed

The report gives no description here.

LowProcedural in BytesLib.solFixed

The report gives no description here.

LowProcedural in V2SwapRouter.solFixed

The report gives no description here.

LowProcedural in V2SwapRouter.solFixed

The report gives no description here.

Show 6 more

LowSuboptimal in Router.solFixed

The report gives no description here.

LowSuboptimal in V2SwapRouter.solFixed

The report gives no description here.

LowSuboptimal in V3Path.solFixed

The report gives no description here.

LowSuboptimal in V3Path.solFixed

The report gives no description here.

LowUnclear behavior in Dispatcher.solFixed

The report gives no description here.

LowUnclear behavior in Dispatcher.solFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Uniswap’s security record

Uniswap

Audits16 audits by 5 firmsLast audit Aug 2026, by Cantina.

Critical findingsNo open critical findingsAcross the 16 reports, 7 critical findings were reported. Each is marked fixed by the firm that reported it.

IncidentIncident 17 Apr 2020Source: De.Fi incident database.

Open Uniswap’s security record

Security firm

ABDK Consulting

31 projects reviewed · 64 reports · latest Jan 2026

See ABDK Consulting’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.