Uniswap Labs Announces $15.5M Bug Bounty

Uniswap Labs has launched a $15.5 million bug bounty to secure its new protocol, Uniswap v4—the largest bounty in DeFi history.

Uniswap v4 transforms the protocol into a full developer platform, introducing “hooks” that let developers customize how pools, swaps, fees, and LP positions interact.

Hooks in Uniswap v4 will enable new market structures and expand the platform’s asset offerings, serving more users efficiently.

The upgrade also promises cost savings, cutting pool creation costs by 99.99% and reducing multi-hop swap fees for traders.

Built collaboratively, the v4 codebase includes contributions from over 90 developers and hundreds of community pull requests.

Uniswap Labs prioritizes security, as shown by nine audits from top firms like OpenZeppelin and Spearbit and a $2.35M security competition involving 500+ researchers, with no critical flaws found.

The $15.5M bug bounty adds another layer of protection before Uniswap v4’s launch.

Uniswap Labs is proactively inviting ethical hackers and developers to review the Uniswap v4 core contracts to quickly identify and fix any vulnerabilities.

The bug bounty covers core contracts available on GitHub but excludes third-party contracts, issues already found in audits, and external apps using Uniswap. Periphery contracts will soon be added to the program.

Bug hunters must report findings via the v4 Bug Bounty Page on Cantina within 24 hours, maintaining confidentiality until issues are resolved.

Detailed reports with reproduction steps and impact analysis improve chances of earning rewards. Contributors can also choose public recognition.

The $15.5M bug bounty is now live, inviting developers and researchers to review the v4 codebase.

For details and submissions, visit the v4 Bug Bounty Page on Cantina. This highlights Uniswap’s focus on security and innovation in DeFi.