Hot-patch deploys without timelock (last 30 days)
Uniswap (v2 + v3)'s assessment for RD-F-138 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
V2: not possible (immutable). V3: zero hot-patches in last 30 days. No V3 core contract modified. All governance actions route through the 2-day Timelock. No direct deployment outside governance process detected. Combined: green.
Detail #
V2 Factory: immutable — no deployment or modification possible. V3 Factory (0x1F98431), Pools, GovernorBravoDelegator: no deploy/upgrade transactions detected on Ethereum mainnet in last 30 days. All V3 governance changes require GovernorBravo proposal → vote → Timelock queuing → 2-day delay → execution. No emergency bypass path exists.
Sources #
- EtherscanUniswapV3Factory EtherscanNo deploy/upgrade transactions on core V3 contracts in last 30dretrieved 2026-04-29
Methodology #
Count upgrades executed in the last 30 days without going through the declared timelock path.
See the full factor methodology and distribution across all protocols →