Upstream vulnerability disclosure (last 90d)
Uniswap (v2 + v3)'s assessment for RD-F-128 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No upstream exists. V2 and V3 ARE the canonical originals that others fork. Factor not applicable.
Detail #
V2 has been forked by SushiSwap, PancakeSwap, and many others. Those forks may have inherited V2 vulnerabilities — but that is not relevant to this assessment of V2 itself.
Sources #
- Curator noteProfile §5 — both V2 and V3 confirmed as original protocolsProfile §5 + meta.json cat_8_pre_mark: all_not_applicable_both_versionsretrieved 2026-05-12
Methodology #
Determine whether the upstream has a public vulnerability disclosure in the last 90 days that affects this fork's deployed code.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol uniswap factor RD-F-128 score not_applicable collected_at 2026-05-12 10:36:11