What problem does it solve?
Uniswap v4 hooks introduce critical security risks including NoOp rug pulls, missing caller verification, and delta accounting errors that can lead to complete user fund loss. Developers building custom v4 hooks lack a centralized, security-first reference to avoid these costly pitfalls during development and deployment.
Core Features & Use Cases
- Comprehensive Threat & Permission Guidance: Full risk matrix for all 14 v4 hook permissions, threat model breakdown, and access control pattern templates to prevent unauthorized hook manipulation.
- Critical Vulnerability Mitigation: Detailed detection and remediation guides for high-severity issues like NoOp attacks, reentrancy via external calls, unbounded loop DoS, and liquidity lock vulnerabilities.
- Pre-Deployment & Audit Resources: Complete security checklists, gas budget guidelines, risk scoring system, and references to audited production hooks to streamline audit preparation and compliance.
Use case: A DeFi developer building a custom v4 hook for a concentrated liquidity pool can use this skill to audit their implementation for critical vulnerabilities, follow secure coding patterns, and generate a professional audit-ready checklist.
Quick Start
Use the v4-security-foundations skill to review your custom Uniswap v4 hook code for security risks and generate a pre-deployment audit checklist.