Audit count
Uniswap (v2 + v3)'s assessment for RD-F-004 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
V2: dapp.org.uk (1 firm, formal verification). V3 core: Trail of Bits + ABDK (2 firms). V3 periphery: ABDK (v3-periphery), OZ + Spearbit + ABDK (UniversalRouter), ABDK + Chainsecurity (Permit2). System-wide: 5 distinct firms. Combined >=2 distinct firms with Tier-1 representation. Green.
Detail #
Trail of Bits, ABDK Consulting, OpenZeppelin, Spearbit, and Chainsecurity are the five distinct firms with confirmed engagements across the V2/V3 codebase stack. dapp.org.uk is treated as a distinct firm (Trail-of-Bits-adjacent methodology, formal verification capability). Core V2 specifically: 1 firm (dapp.org.uk). Core V3 specifically: 2 firms (ToB + ABDK). Full periphery stack: 5 firms total.
Sources #
- GitHubUniversalRouter audit directory listingUniversalRouter audit directory (ABDK, OZ, Spearbit)retrieved 2026-05-12
- Permit2 audits — ABDK + Chainsecurity confirmedPermit2 audits directory (ABDK + Chainsecurity)retrieved 2026-05-12
- v3-core audits — Trail of Bits and ABDK subdirectoriesv3-core audits dir (ToB + ABDK)retrieved 2026-05-12
Methodology #
Count the number of distinct audit firms whose reports cover any portion of the currently-deployed bytecode.
See the full factor methodology and distribution across all protocols →