v4-security-foundations

Audit Uniswap v4 hooks for vulnerabilities and generate pre-deployment checklists.

4|2|Updated Apr 13, 2026
One-click install
npx skills add https://github.com/Iziedking/hawkeye --skill v4-security-foundations-iziedking
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: v4-security-foundations
Source: https://github.com/Iziedking/hawkeye/tree/main/.agents/skills/v4-security-foundations
Command: npx skills add https://github.com/Iziedking/hawkeye --skill v4-security-foundations-iziedking

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Uniswap v4 hooks introduce critical security risks including NoOp rug pulls, missing caller verification, and delta accounting errors that can lead to complete user fund loss. Developers building custom v4 hooks lack a centralized, security-first reference to avoid these costly pitfalls during development and deployment.

Core Features & Use Cases

  • Comprehensive Threat & Permission Guidance: Full risk matrix for all 14 v4 hook permissions, threat model breakdown, and access control pattern templates to prevent unauthorized hook manipulation.
  • Critical Vulnerability Mitigation: Detailed detection and remediation guides for high-severity issues like NoOp attacks, reentrancy via external calls, unbounded loop DoS, and liquidity lock vulnerabilities.
  • Pre-Deployment & Audit Resources: Complete security checklists, gas budget guidelines, risk scoring system, and references to audited production hooks to streamline audit preparation and compliance. Use case: A DeFi developer building a custom v4 hook for a concentrated liquidity pool can use this skill to audit their implementation for critical vulnerabilities, follow secure coding patterns, and generate a professional audit-ready checklist.

Quick Start

Use the v4-security-foundations skill to review your custom Uniswap v4 hook code for security risks and generate a pre-deployment audit checklist.

Frequently Asked Questions about v4-security-foundations

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent NoOp rug pulls and fund drain vulnerabilities in Uniswap v4 hooks?

To prevent NoOp rug pulls and fund drain vulnerabilities in Uniswap v4 hooks, implement strict caller verification and proper delta accounting. This skill provides threat modeling, access control templates, and vulnerability mitigation guides to secure custom hook implementations against unauthorized fund manipulation.

How do I audit a custom Uniswap v4 hook for security risks before deployment?

You can audit a custom Uniswap v4 hook by applying a pre-deployment security checklist covering all 14 hook permissions. This skill provides risk scoring, gas budget guidelines, and audited production hook references to streamline audit preparation and ensure compliance with v4 security best practices.

What are the security risks of Uniswap v4 hook permissions?

Uniswap v4 hook permissions introduce security risks such as reentrancy via external calls, unbounded loop DoS, and liquidity lock vulnerabilities. This skill provides a full risk matrix for all 14 hook permissions to help developers assess and mitigate these specific threat models.

How do I implement access control patterns for Uniswap v4 hook development?

Implement access control patterns for Uniswap v4 hook development by applying permission risk assessment templates that prevent unauthorized hook manipulation. This skill offers secure coding patterns and threat model breakdowns to enforce caller verification and protect concentrated liquidity pools.

Can I use this skill to secure a concentrated liquidity pool hook in DeFi development?

Yes, you can use this skill to secure a concentrated liquidity pool hook in DeFi development. It enables developers to review custom v4 hook implementations for critical vulnerabilities, follow secure coding patterns, and generate an audit-ready checklist for Uniswap v4 compliance.