Uniswap V4 introduces powerful but risky innovation with its hook system. While the core Uniswap team and protocol are well-funded and battle-tested, the permissionless hook ecosystem creates an entirely new attack surface that has already been exploited twice. The singleton architecture trades gas savings for systemic concentration risk. The UNI fee switch (live July 2026) significantly improves the value accrual story — actual burn revenue changes the token economics. Best suited for DeFi-savvy users who carefully evaluate the hooks on pools they interact with.
Risk Breakdown
Top Risks
Permissionless hooks execute arbitrary code on every swap, enabling novel attack vectors with 36% of analyzed hooks found potentially vulnerable
Custom accounting hooks take full custody of pool assets, meaning a single hook bug can drain entire pool liquidity
Two hook ecosystem exploits — Cork Protocol ($11M, May 2025) and Bunni V2 ($8.4M, Sep 2025) — confirm that permissionless hooks are a reliable source of losses for protocols built on V4, with combined ecosystem losses exceeding $19M
Frequently Asked Questions
Is Uniswap V4 safe to use?
What are the main risks of using Uniswap V4?
What is Uniswap V4's risk score breakdown?
How does Uniswap V4 compare to other DEX protocols?
Has Uniswap V4 ever been hacked or exploited?
Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.