Security Rating Level: 4
Evaluation Date: Mar 31st, 2021
1. History & Team (Weight 20%; Score 75)
1.1 Project age (8%; 100)
Launched on mainnet from 2018 November, alive for 29 months.
1.2 Past exploits (8%; 50)
Was attacked once
1.3 Team anonymity (2%; 100)
Team are public
1.4 Team experience in programming (2%; 50)
Lead engineer started software proramming from 2016
2. Exposure (Weight 25%; Score 94.95)
2.1 Historical TVL (17.5%; 98.5)
Average market share in the past 4Q: 10.4%, 14.2%, 11.6%, 9.6%
Data collected from Uniswap | Stats, Charts and Guide | DeFi Pulse
2.2 Industry segment (5%; 90)
Uniwap is an exchange
2.3 Infrastructure (2.5%; 80)
No oracle needed for price feed
3. Audit (Weight 35%; Score 78)
Audit report available on: Uniswap V2 Audit Report
3.1 Transparency and scope (14%; 100)
Full scope audit done, and report is public
3.2 Audit firm trust score (10.5%; 30)
Audited by DApp.org, Tier 3 audit firm
3.3 Audit findings (10.5%; 80)
No critical issues found in audit
3.4 Other credits (up to additive 5.25%; 5)
Formal verification done
4. Code quality (Weight 15%; Score 80)
Repository on github: GitHub - Uniswap/v2-core: 🎛 Core smart contracts of Uniswap V2
4.1 Documentation
Top level documentation is detailed and clear.Minimal comments in explaining how the code connects to the oriented functions.
4.2 Test
Full test suite exists but code coverage not visible
5. Developer community (Weight 5%; Score 69)
5.1 Bug bounty program (3.5%; 60)
Exists. Reward up to $40,000
5.2 Issues raised on Github (1.5%; 90)
13 issues raised on github repository
The N-SCOSS for Compound is 81.4875, level 4