UniswapX audit

ABDK ConsultingCode version: not recorded (see the report)

ABDK Consulting reviewed Uniswap (UniswapX audit) on 17 Jul 2023: 94 findings, 0 critical; 40 marked fixed, 54 acknowledged.

No open critical findings
Open the reportOpen Uniswap’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings94

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High077
Medium032
Low04431
HighSuboptimal in DutchDecayLib.solAcknowledged

The report gives no description here.

HighSuboptimal in DutchLimitOrderLib.solAcknowledged

The report gives no description here.

HighSuboptimal in IPSFees.solAcknowledged

The report gives no description here.

HighSuboptimal in IPSFees.solAcknowledged

The report gives no description here.

HighSuboptimal in LimitOrderLib.solAcknowledged

The report gives no description here.

HighSuboptimal in ProtocolFees.solAcknowledged

The report gives no description here.

HighUnclear behavior in UniswapV3Executor.solAcknowledged

The report gives no description here.

MediumSuboptimal in ExpectedBalanceLib.solAcknowledged

The report gives no description here.

MediumSuboptimal in Permit2Lib.solAcknowledged

The report gives no description here.

MediumSuboptimal in ProtocolFees.solAcknowledged

The report gives no description here.

Show 10 more
LowBad datatype in BaseReactor.solAcknowledged

The report gives no description here.

LowBad datatype in BaseReactor.solAcknowledged

The report gives no description here.

LowBad datatype in CurrencyLibrary.solAcknowledged

The report gives no description here.

LowBad datatype in CurrencyLibrary.solAcknowledged

The report gives no description here.

LowBad datatype in DutchLimitOrderLib.solAcknowledged

The report gives no description here.

LowBad datatype in DutchLimitOrderReactor.solAcknowledged

The report gives no description here.

LowBad datatype in ExclusiveDutchLimitOrderReactor.solAcknowledged

The report gives no description here.

LowBad datatype in ExpectedBalanceLib.solAcknowledged

The report gives no description here.

LowBad datatype in IPSFees.solAcknowledged

The report gives no description here.

LowBad datatype in ISwapRouter02.solAcknowledged

The report gives no description here.

Show 10 more
LowBad datatype in ISwapRouter02.solAcknowledged

The report gives no description here.

LowBad datatype in LimitOrderReactor.solAcknowledged

The report gives no description here.

LowBad datatype in ReactorStructs.solAcknowledged

The report gives no description here.

LowBad datatype in UniswapV3Executor.solAcknowledged

The report gives no description here.

LowBad datatype in UniswapV3Executor.solAcknowledged

The report gives no description here.

LowBad naming in ReactorStructs.solAcknowledged

The report gives no description here.

LowProcedural in BaseReactor.solAcknowledged

The report gives no description here.

LowProcedural in CurrencyLibrary.solAcknowledged

The report gives no description here.

LowProcedural in CurrencyLibrary.solAcknowledged

The report gives no description here.

LowProcedural in DutchDecayLib.solAcknowledged

The report gives no description here.

Show 10 more
LowProcedural in DutchLimitOrderLib.solAcknowledged

The report gives no description here.

LowProcedural in DutchLimitOrderLib.solAcknowledged

The report gives no description here.

LowProcedural in ExclusiveDutchLimitOrderLib.solAcknowledged

The report gives no description here.

LowProcedural in ExclusiveDutchLimitOrderReactor.solAcknowledged

The report gives no description here.

LowProcedural in ExclusivityOverrideLib.solAcknowledged

The report gives no description here.

LowProcedural in ExpectedBalanceLib.solAcknowledged

The report gives no description here.

LowProcedural in IPSFees.solAcknowledged

The report gives no description here.

LowProcedural in IReactorCallback.solAcknowledged

The report gives no description here.

LowProcedural in ISwapRouter02.solAcknowledged

The report gives no description here.

LowProcedural in IValidationCallback.solAcknowledged

The report gives no description here.

Show 10 more
LowProcedural in LimitOrderLib.solAcknowledged

The report gives no description here.

LowProcedural in LimitOrderReactor.solAcknowledged

The report gives no description here.

LowProcedural in Permit2Lib.solAcknowledged

The report gives no description here.

LowProcedural in ProtocolFees.solAcknowledged

The report gives no description here.

LowProcedural in ReactorEvents.solAcknowledged

The report gives no description here.

LowProcedural in ReactorStructs.solAcknowledged

The report gives no description here.

LowProcedural in ResolvedOrderLib.solAcknowledged

The report gives no description here.

LowProcedural in SwapRouter02Executor.solAcknowledged

The report gives no description here.

LowProcedural in UniswapV3Executor.solAcknowledged

The report gives no description here.

LowSuboptimal in DutchLimitOrderLib.solAcknowledged

The report gives no description here.

Show 4 more
LowSuboptimal in ExclusiveDutchLimitOrderLib.solAcknowledged

The report gives no description here.

LowSuboptimal in IPSFees.solAcknowledged

The report gives no description here.

LowSuboptimal in IPSFees.solAcknowledged

The report gives no description here.

LowUnclear behavior in IPSFees.solAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Uniswap’s security record

Uniswap
Audits16 audits by 5 firmsLast audit Aug 2026, by Cantina.
Critical findingsNo open critical findingsAcross the 16 reports, 7 critical findings were reported. Each is marked fixed by the firm that reported it.
IncidentIncident 17 Apr 2020Source: De.Fi incident database.
Open Uniswap’s security record

Security firm

ABDK Consulting

31 projects reviewed · 64 reports · latest Jan 2026

See ABDK Consulting’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us