defirisk.co
rubric v1.7.0

Admin has mint() with unlimited max

Uniswap (v2 + v3)'s assessment for RD-F-042 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

V2: no mintable token under admin control. V3: UNI token mint capped at 2%/year with 365-day minimum gap (mintCap=2, minimumTimeBetweenMints=31,536,000s). No V3 pool or factory contract has a protocol-token mint function. Combined: green.

Detail #

UNI token (0x1f9840a8): mintCap=2 (2% per year), minimumTimeBetweenMints=31536000 seconds (365 days), mint() requires now >= mintingAllowedAfter. The mint function is owner-controlled (originally Uniswap Labs, now governance-controlled via Timelock). A 4-year mint lockup was initially in place (mintingAllowedAfter = block.timestamp + mintingAllowedMinimum at deploy). Even post-lockup, the 2%/year rate cap and 365-day minimum gap prevent unlimited minting. V3 Factory and Pool contracts have no mint function for protocol tokens.

Sources #

  • Etherscan
    UNI token contract sourceUNI token: mintCap=2, minimumTimeBetweenMints, mint() with require(now>=mintingAllowedAfter)retrieved 2026-04-29
  • Docs
    Uniswap Governance ProcessUniswap docs — 2-day timelock minimum delay documentedretrieved 2026-05-11

Methodology #

Determine whether an admin-callable `mint` on a protocol token has no supply cap or an unlimited maximum supply.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol uniswap factor RD-F-042 score green collected_at 2026-05-12 10:36:11