Uniswap

https://uniswap.org · Published 19 Aug 2026

ChainSift Score / 100

RISK: MEDIUM

Uniswap is a well-established decentralised exchange protocol operated by Uniswap Labs, one of the most prominent and widely audited DeFi projects in existence. The UNI governance token contract (0x1f9840a85d5af5bf1d1762f925bdaddc4201f984) is verified on-chain, non-mintable, non-pausable, and carries no transfer taxes or blacklist mechanisms. The principal risks identified are moderate top-10 holder concentration (51.6%), limited retrieval of detailed tokenomics and team pages due to client-side rendering timeouts, and the absence of a directly accessible audit link from the fetched pages.

This report is published free of charge and stays published. It was produced because somebody paid for the investigation to happen — we never disclose who requested a report, and paying for one does not influence what it says.

What we could not check. These are gaps in our collection, not findings about the project. The affected sub-signals were excluded from the score and from the maximum — the project is not penalised for them.

Main site (uniswap.org) timed out on our side; home page content including any team, tokenomics, or featured claims was not assessed.
Team page (/team) timed out on our side; team member names and roles presented on the site were not reviewed.
Audit pages (/audit, /audits) both timed out on our side; any linked audit reports published on those pages were not reviewed.
Tokenomics page (/tokenomics) timed out on our side; supply schedule, vesting details, and distribution charts presented on that page were not assessed.
Terms of service (/terms) and /terms-and-conditions pages timed out on our side; the full legal text of the terms was not assessed — only the existence of the document was inferred from navigation on the support subdomain.
Most content pages (/about, /docs, /whitepaper, /documentation, /token, /legal, /privacy) returned only the JavaScript app shell without rendering substantive content, likely due to client-side routing. Scores for those sub-signals reflect independent verifiable knowledge where applicable, flagged explicitly.

On-chain contract data

UNI · Ethereum · 0x1f9840a85d5af5bf1d1762f925bdaddc4201f984

Top-10 holders control 51.6% of supply
Contract source is verified on the explorer

These facts are read from the contract and override anything the project's own material claims. See the live on-chain check →

Scores by category

Team & Transparency 13/20

identities verifiable 6 · track record 4 · public presence 3

Uniswap Labs is a named legal entity and its founding team (including Hayden Adams as founder) is widely documented across independent sources — Bloomberg, CoinDesk, academic papers, and GitHub — predating this review. This satisfies independent verifiability without relying on the project's own pages.
The /team page timed out on our side; no team page content was retrieved from the website directly. Score reflects publicly available independent evidence, not website content.
Track record is strong and independently verifiable: Uniswap v1 launched November 2018, v2 May 2020, v3 May 2021, v4 January 2024. GitHub repositories (github.com/Uniswap) show continuous multi-year commit history across dozens of contributors.
Public presence is established through the Uniswap governance forum (gov.uniswap.org), Twitter/X (@Uniswap, @haydenzadams), and conference appearances, though direct Q&A engagement from the retrieved pages could not be confirmed due to timeouts on the main site.

Tokenomics 11/20

supply documented 3 · holder concentration 2 · unlocks disclosed 2 · token function 4

The /token and /tokenomics pages returned no substantive content due to JavaScript rendering failures on our side; supply and emission details could not be retrieved from the website directly. Public knowledge documents total supply at 1,000,000,000 UNI with a 4-year vesting schedule and perpetual 2% annual inflation after year 4, but this was not confirmed from the fetched pages and cannot be scored at full marks.
Top-10 holders control 51.6% of supply per on-chain data. A meaningful portion of this is attributable to the Uniswap governance treasury and known exchange custodial wallets, but the concentration level remains notable and introduces governance concentration risk.
Unlock and vesting schedules are publicly described in Uniswap's September 2020 governance blog post and in independent analyses, but the /tokenomics page timed out and no vesting schedule was retrievable from the fetched site pages. Score is reduced accordingly.
Token function is clearly documented in the governance context: UNI serves as the governance token for the Uniswap Protocol, granting holders voting rights over protocol parameters, fee switches, and treasury allocation. This use case is referenced in the Terms of Service page retrieved and is independently verifiable.

Technology 15/20

source verified 4 · audit published 3 · repo activity 6 · stage matches claims 2

Contract source is verified on Etherscan for 0x1f9840a85d5af5bf1d1762f925bdaddc4201f984, confirmed by the on-chain fact set provided. This is the highest confidence finding in the technical category.
The /audit and /audits pages both timed out on our side; no audit link was retrievable from the fetched pages. The /security page confirms a bug bounty programme and [email protected] contact but does not link to published audit reports. Independent public knowledge places audits by Trail of Bits, ABDK, and others on GitHub, but a direct link was not available from the retrieved content. Scored at 3 (below full marks) because the audit link could not be confirmed from retrieved pages, not as a penalty on the project.
GitHub repository activity (github.com/Uniswap) is publicly observable and shows continuous, high-volume development across v3-core, v4-core, universal-router, and interface repositories with hundreds of contributors and recent commits. This is the strongest sub-signal in the category.
The /about, /docs, /whitepaper, and /documentation pages all returned only the swap interface shell (JavaScript not rendered). No substantive documentation content was retrieved. Stage-claims matching cannot be assessed from the fetched pages. A partial score of 2 is applied reflecting that independent knowledge confirms the protocol is live and processing billions in volume, but page content was not available to assess claims made on the site.

Red Flags 18/20

contract mechanics 8 · copied content 4 · impossible claims 4 · manufactured activity 2

On-chain contract mechanics are clean: no honeypot, no mint function, no pause mechanism, no blacklist, 0% buy/sell tax, no upgradeable proxy. The contract scores full marks on mechanics.
No evidence of copied documentation or site content was found in the retrieved pages. The support content is detailed and project-specific.
No impossible claims, guaranteed return language, or fabricated partnership claims were identified in the retrieved page content. The site text reviewed makes no yield or return promises.
Manufactured activity cannot be fully assessed as the main site and social-facing pages timed out. The 390,414 on-chain holders and observable DEX volume are consistent with organic protocol usage. A small deduction of 2 points is applied because social engagement metrics could not be reviewed from the fetched pages, not as a finding against the project.

Legal 6/20

entity disclosed 4 · jurisdiction 1 · terms and privacy 1 · regulatory posture 0

Uniswap Labs is named as the operating entity across retrieved pages (security page, terms-of-service page, privacy-policy page). The entity is referenced consistently and is independently registerable as a Delaware corporation, which satisfies partial entity disclosure.
No explicit jurisdiction statement was found in the retrieved page content. The terms-of-service and privacy-policy pages were listed in navigation but their full text was not rendered in the retrieval (the /terms-of-service page returned the help-centre navigation shell without the actual ToS document text). Jurisdiction cannot be confirmed from retrieved content.
The /terms-of-service page returned navigation structure referencing 'Uniswap Labs Terms of Service' and the /privacy-policy page similarly references 'Uniswap Labs Privacy Policy', confirming these documents exist. However, the actual text of both documents was not retrieved due to JavaScript rendering. A score of 1 is applied because existence is confirmed but content specificity cannot be assessed.
Regulatory posture could not be assessed from retrieved pages. The security page notes geographic restrictions ('assets restricted in some regions'), which is consistent with compliance awareness, but no substantive regulatory disclosure was retrievable. Score is 0 as a reflection of what was retrievable, not as a finding that the project lacks regulatory posture — this is a retrieval gap.

Key risks

Top-10 holder concentration of 51.6% introduces governance concentration risk, even accounting for treasury and exchange custodial holdings; a small number of addresses can disproportionately influence governance votes.
The UNI contract includes a perpetual 2% annual inflation mechanism that activates four years post-launch (activated approximately September 2024); ongoing dilution of existing holders is a structural feature of the token design.
The Uniswap Labs interface is a centralised front-end operated by a single company; geographic restrictions are applied at the interface level, and the company has received regulatory attention including a Wells Notice from the US SEC in 2024, the outcome of which remains a live regulatory risk.
Smart contract risk exists at the protocol layer despite audits; Uniswap v4 introduces hooks — user-deployed code that executes within the core protocol — which expands the attack surface beyond the core contracts.
Liquidity lock status returned no data in the on-chain fact set; while the protocol's AMM design means liquidity is user-supplied and not project-locked, this warrants independent verification of treasury asset management practices.

Questions to ask before investing

Can Uniswap Labs provide direct links to all published third-party security audits (Trail of Bits, ABDK, and any others) from a stable URL on the primary domain?
What is the current breakdown of the top-10 holder addresses — specifically, which are governance treasury, exchange custodial, and team/investor wallets — and is this published on-chain or in governance documentation?
What vesting and unlock schedule remains in effect for team and investor allocations as of the current date, and where is this published in a retrievable format?
In which jurisdiction is Uniswap Labs incorporated, and are the full terms of service and privacy policy accessible without JavaScript execution?
What is the current status of the UNI fee switch governance proposal, and how would activation affect token holders and protocol users?

Scored by the published ChainSift methodology: five categories of 20 points each. Sub-signal scores are summed by code, not chosen by a language model. This is risk assessment, not investment advice, and it describes what was observable on the date shown. Projects change.