Upstream patch not merged

SUNSwap (sun.io)'s assessment for RD-F-127 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No specific published security patches from Uniswap for V2/V3/V4 core AMM found unmerged in sunswap. Uniswap V2 core has no disclosed critical vulnerabilities. KyberSwap Elastic vulnerability was a KyberSwap-specific divergence, not an upstream Uniswap V3 bug. No specific unpatched upstream vulnerability confirmed.

Sources #

Audit
Uniswap V3 Core Trail of Bits AuditUniswap V3 Trail of Bits audit March 2021 — no critical bugs foundretrieved 2026-05-17
GitHub
Uniswap V4 core repositoryUniswap v4-core security tab — no active advisoriesretrieved 2026-05-17

Methodology #

Determine whether the upstream fork source has published a known-vulnerability patch that has not been merged into this fork's deployed code.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sunswap factor RD-F-127 score green collected_at 2026-05-17 14:37:31