Partial-drain test transactions
Uniswap (v2 + v3)'s assessment for RD-F-091 — scored not_assessed on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
V2+V3 combined: V2 and V3 core contracts are immutable — no protocol-level admin-key drain is structurally possible. Neither version has a 5-year protocol-level exploit history. Signal deferred per T-09 methodology (v1 deferred set). Static dry run cannot establish a drain-precursor baseline without live mempool monitoring.
Detail #
V2 fully immutable (feeToSetter = address(0)); V3 core fully immutable (no proxy, no owner). The signal targets pre-strike partial drain test transactions that precede a larger drain event. For an immutable AMM with no admin key, no such sequence is possible at the protocol level. LP-level individual withdrawals are normal operations. Zero protocol-level exploit history for V2 (72 months) or V3 (60 months). Not_assessed per methodology: deferred signal requiring live mempool monitoring.
Sources #
- Curator noteT-09 Real-Time Signals v1 ScopeInternal reference: risk-dashboard/research/outputs/09-realtime-signals.md (RT signal spec)retrieved 2026-05-12
Methodology #
Detect one or more small-value outflows prior to a larger drain that match a known pre-strike pattern (low-value same-function calls from new wallet).
See the full factor methodology and distribution across all protocols →