Divide-before-multiply pattern
Uniswap (v2 + v3)'s assessment for RD-F-016 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
V3: Custom fixed-point math (FullMath, FixedPoint96, SqrtPriceMath, TickMath) uses 256-bit intermediates to avoid precision loss. ABDK mathematical audit (159 issues) found no divide-before-multiply high severity. V2: Constant-product formula uses simple arithmetic with no complex division ordering. 5-6 year exploit-free record. No tool run available — confidence medium.
Detail #
The ABDK audit was specifically focused on mathematical correctness of the V3 fixed-point math libraries. No divide-before-multiply class finding was reported at high or critical severity across 159 issues reviewed. V2's constant-product formula (x*y=k) involves straightforward arithmetic without complex ordering concerns. The 5-6 year exploit-free record across both versions provides corroborating evidence that no exploitable precision errors exist in deployed code.
Sources #
- AuditABDK Uniswap V3 core audit — no divide-before-multiply high severityABDK V3 core audit — mathematical reviewretrieved 2026-05-12
Methodology #
Determine whether Slither's `divide-before-multiply` detector fires on the deployed verified source.
See the full factor methodology and distribution across all protocols →