defirisk.co
rubric v1.7.0

Partial-drain test transactions

Uniswap (v2 + v3)'s assessment for RD-F-091 — scored not_assessed on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

V2+V3 combined: V2 and V3 core contracts are immutable — no protocol-level admin-key drain is structurally possible. Neither version has a 5-year protocol-level exploit history. Signal deferred per T-09 methodology (v1 deferred set). Static dry run cannot establish a drain-precursor baseline without live mempool monitoring.

Detail #

V2 fully immutable (feeToSetter = address(0)); V3 core fully immutable (no proxy, no owner). The signal targets pre-strike partial drain test transactions that precede a larger drain event. For an immutable AMM with no admin key, no such sequence is possible at the protocol level. LP-level individual withdrawals are normal operations. Zero protocol-level exploit history for V2 (72 months) or V3 (60 months). Not_assessed per methodology: deferred signal requiring live mempool monitoring.

Sources #

  • Curator note
    T-09 Real-Time Signals v1 ScopeInternal reference: risk-dashboard/research/outputs/09-realtime-signals.md (RT signal spec)retrieved 2026-05-12

Methodology #

Detect one or more small-value outflows prior to a larger drain that match a known pre-strike pattern (low-value same-function calls from new wallet).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol uniswap factor RD-F-091 score not_assessed collected_at 2026-05-12 10:36:11