Uniswap
4 deployments · $3.2B aggregate TVL · Dexs
Deployments
Each deployment is rated independently. Pick one to see its rating, risk analysis, and stage.
Control Exit Autonomy Open Access Verifiable
- Tier wood At least one model submission, no quorum yet
- Verifiability tentative Open source + 14 audits
- Control unknown Not yet assessed
- Ability to exit unknown Not yet assessed
- Autonomy unknown No Phase-0 autonomy signal
- Open Access unknown Not yet assessed
Control criteria
About
Uniswap V3 is a decentralized exchange protocol that allows users to swap ERC-20 tokens and provide concentrated liquidity within custom price ranges. Liquidity providers deposit token pairs into discrete pools identified by fee tier, receiving NFT position receipts (NonfungiblePositionManager) representing their range-bound liquidity. The protocol's distinctive mechanism is concentrated liquidity, which enables LPs to allocate capital to specific price intervals, increasing capital efficiency compared to uniform distribution. Core contracts (factory, pools) are immutable; only the NFT position descriptor peripheral contract uses a transparent upgradeable proxy.
Risk analysis
One card per dimension, sorted by severity. Only Verifiability and Autonomy carry automated signals in Phase 0. See methodology for scope.
Audit a dimension yourself · DEFI@home Contribute an LLM-run assessment — any model, any dimension. Three agreeing runs merge automatically into the public record.
DEFI@home is a distributed audit network modeled on SETI@home: instead of CPU cycles, it crowdsources LLM reasoning. Paste a slice prompt into Claude, ChatGPT, Gemini, or any browsing-capable model, and submit the JSON output as a pull request. The quorum bot merges it once ≥3 independent runs (from different models) reach the same grade — no single model, and no single contributor, can move the needle alone. How it works →
- Address discovery 26 addresses on file
· 1 run Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v3 - protocol.name: Uniswap V3 - protocol.chains: Ethereum, Base, Arbitrum, Binance, Polygon, X Layer, Optimism, Plasma, xDai, Celo, Avalanche, RSK, Monad, Nibiru, 0G, World Chain, XDC, Unichain, zkSync Era, Boba, Filecoin, Etherlink, Mantle, Goat, BOB, Lens, Telos, Sonic, Redbelly, Hemi, Scroll, Linea, Sei, Blast, Taiko, Lisk, Polygon zkEVM, Moonbeam, Corn, Manta, LightLink, Tempo, Saga - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2", "role": "ProxyAdmin for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xEe6A57eC80ea46401049E92587E52f5Ec1c24785", "role": "TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A", "role": "Owner of UniswapV3Factory" }, { "chain": "Ethereum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Ethereum", "address": "0xE592427A0AEce92De3Edee1F18E0157C05861564", "role": "router" }, { "chain": "Ethereum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "router" }, { "chain": "Ethereum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" }, { "chain": "Ethereum", "address": "0x1F98415757620B543A52E61c46B32eB19261F984", "role": "other" }, { "chain": "Ethereum", "address": "0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696", "role": "other" }, { "chain": "Ethereum", "address": "0xbfd8137f7d1516D3ea5cA83523914859ec47F573", "role": "other" }, { "chain": "Ethereum", "address": "0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6", "role": "other" }, { "chain": "Ethereum", "address": "0x42B24A95702b9986e82d421cC3568932790A48Ec", "role": "other" }, { "chain": "Ethereum", "address": "0x91ae842A5Ffd8d12023116943e72A606179294f3", "role": "other" }, { "chain": "Ethereum", "address": "0xA5644E29708357803b5A882D272c41cC0dF92B34", "role": "other" }, { "chain": "Ethereum", "address": "0x61fFE014bA17989E743c5F6cB21bF9697530B21e", "role": "other" }, { "chain": "Ethereum", "address": "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45", "role": "router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "other" }, { "chain": "Base", "address": "0x33128a8fC17869897dcE68Ed026d694621f6FDfD", "role": "factory" }, { "chain": "Base", "address": "0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1", "role": "pool" }, { "chain": "Base", "address": "0x6fF5693b99212Da76ad316178A184AB56D299b43", "role": "router" }, { "chain": "Base", "address": "0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1", "role": "other" }, { "chain": "Arbitrum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Arbitrum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "router" }, { "chain": "Arbitrum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2 (ProxyAdmin for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xEe6A57eC80ea46401049E92587E52f5Ec1c24785 (TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A (Owner of UniswapV3Factory) - https://defipunkd.com/address/1/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/1/0xE592427A0AEce92De3Edee1F18E0157C05861564 (router) - https://defipunkd.com/address/1/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (router) - https://defipunkd.com/address/1/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) - https://defipunkd.com/address/1/0x1F98415757620B543A52E61c46B32eB19261F984 (other) - https://defipunkd.com/address/1/0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696 (other) - https://defipunkd.com/address/1/0xbfd8137f7d1516D3ea5cA83523914859ec47F573 (other) - https://defipunkd.com/address/1/0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6 (other) - https://defipunkd.com/address/1/0x42B24A95702b9986e82d421cC3568932790A48Ec (other) - https://defipunkd.com/address/1/0x91ae842A5Ffd8d12023116943e72A606179294f3 (other) - https://defipunkd.com/address/1/0xA5644E29708357803b5A882D272c41cC0dF92B34 (other) - https://defipunkd.com/address/1/0x61fFE014bA17989E743c5F6cB21bF9697530B21e (other) - https://defipunkd.com/address/1/0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 (router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (other) - https://defipunkd.com/address/8453/0x33128a8fC17869897dcE68Ed026d694621f6FDfD (factory) - https://defipunkd.com/address/8453/0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1 (pool) - https://defipunkd.com/address/8453/0x6fF5693b99212Da76ad316178A184AB56D299b43 (router) - https://defipunkd.com/address/8453/0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1 (other) - https://defipunkd.com/address/42161/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/42161/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (router) - https://defipunkd.com/address/42161/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: DISCOVERY You are a cataloguer, not a judge. Your job is to surface every contract address that could plausibly belong to this protocol's control or fund-holding surface, each backed by a citation. `grade` is ALWAYS `"unknown"` for discovery submissions — there is no green/orange/red rubric here. The five evaluation slices that run after you (control, ability-to-exit, autonomy, open-access, verifiability) consume your output via the addressBook ratchet — every address you record becomes a pre-built surfacer URL on the next run; every address you miss costs them a tool call. Width beats depth. A `role: "other"` entry with one cited URL beats omitting it. Downstream slices will discard out-of-scope entries; they cannot rediscover what you fail to enumerate without paying the same cost again. (Step 0 capability probe lives in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every D-code below must appear in evidence[] OR unknowns[]) - **D1. Block-explorer name-tag search per chain.** For each chain in `protocol.chains`, search the canonical block explorer for the protocol's name tag — `https://etherscan.io/searchHandler?term=<query>` and the per-chain explorers (basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network). When direct fetch is blocked, use `site:<explorer> <protocol_name>` via search grounding. Record every address that surfaces with the protocol's tag, plus neighbouring "Token Contract" / "Multisig" / "Timelock" labels. - **D2. Official deployments doc.** From `protocol.website` and the docs site, locate the canonical "Deployed contracts" / "Addresses" / "Contracts" / "Deployments" page (often at `/docs/deployments`, `/docs/addresses`, `/dashboard/contracts`). Cite the URL, record every address listed with its named role, and set `protocol_metadata.deployed_contracts_doc` to this URL. - **D3. Audit PDFs.** From `protocol.audit_links` (and any audits surfaced by D2), open each. Most reports include a "Scope" / "Contracts in scope" address table in the first 5 pages. Extract every in-scope address with its labelled role. If the audit predates the current deployment, record the addresses anyway with role suffixed `(audit-era)` so downstream slices know to re-verify. - **D4. GitHub deployment artifacts.** From `protocol.github`, walk the repo at a pinned commit SHA looking for: Foundry `broadcast/<script>/<chainId>/run-latest.json` (`transactions[].contractAddress` per chainId); hardhat-deploy `deployments/<network>/<Contract>.json` (`address` field); manual indexes (`deployments.json`, `addresses.json`, `contracts.json`, `networks.json`); markdown indexes (`docs/deployments.md`, `README.md` tables). Cite the file URL with the commit SHA; pin SHAs (`?ref=<sha>`) so the citation is content-addressed. - **D5. Multi-chain enumeration.** If `protocol.chains.length > 1`, repeat D1–D4 per chain. Cross-chain deployments of the same logical contract get SEPARATE `admin_addresses[]` entries — one per chain. The chain field is part of the identity; do not collapse. If a chain has zero results, record `"D5: chain <name>: zero addresses surfaced from <sources tried>"` in unknowns[]. - **D6. Factory-discovered children.** For factory addresses surfaced in D1–D4, fetch the enumeration view via the read API (`/api/contract/read?...&method=allPools` / `getPool` / `getMarket` / `getVault`) and record each child with role like `"pool (from factory <0xFactory>)"`. **Cap at 50 children per factory.** Protocols with thousands of pools (Uniswap, Sushi) need dedicated ingestion — record the factory + the cap notice in unknowns[]. - **D7. Role taxonomy.** Every `admin_addresses[]` entry's `role` uses this controlled vocabulary (free-text suffixes OK for disambiguation, e.g. `"multisig (treasury)"`, but the leading token must match): `owner | admin | proxy_admin | governor | timelock | guardian | multisig | treasury | oracle | factory | router | token | pool | vault | other` Tentative classifications are encouraged. `actor_class` ∈ `eoa | multisig | timelock | governance | unknown` — use `unknown` when you found the address but didn't read its bytecode. - **D8. Ratchet output integrity.** Every address in `admin_addresses[]` must trace to ≥1 fetched URL in evidence[]. Snippet-only sightings go in unknowns[] with a `D8` code, NOT in admin_addresses[]. ### Discovery rationale framing - `rationale.findings`: one entry per D-code, terse, factual. Per-address detail belongs in evidence[] and admin_addresses[], not here. Example: `"D1: 8 addresses surfaced from etherscan.io name-tag search for 'Aave V3'"`. - `rationale.steelman`: ALWAYS null. - `rationale.verdict`: one short line summarizing what corpora were walked and how many addresses were catalogued. - `headline`: factual and quantitative — `"24 contracts catalogued across Ethereum, Arbitrum, and Base; 6 governance/admin and 18 protocol contracts."`. - `short_headline`: under 60 chars — `"24 contracts across 3 chains"`. ### What discovery is NOT - Not a verdict slice. `grade` must be `"unknown"`. - Not exhaustive enumeration of leaf assets — record the factory + cap and move on (see D6). - Not classification of trust assumptions — whether a multisig threshold is safe / timelock delay is sufficient / proxy admin is an EOA is the control slice's job. - Not address-book reconciliation: when addressBook is non-empty, EXTEND it (find addresses prior runs missed) rather than re-cite the same addresses; re-cite only when you have new evidence for a refined role. ### protocol_metadata side-effects While walking the corpora, populate every `protocol_metadata` field you can support with citations: `github`, `docs_url`, `audits` (one per D3 audit walked), `governance_forum`, `bug_bounty_url`, `security_contact`, `deployed_contracts_doc` (URL from D2), `upgradeability` (best-effort), and `about` (2–4 sentences sourced from docs/website, not memory). Discovery is the natural home for these — evaluation slices should not have to rediscover them. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "discovery", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Verifiability
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v3 - protocol.name: Uniswap V3 - protocol.chains: Ethereum, Base, Arbitrum, Binance, Polygon, X Layer, Optimism, Plasma, xDai, Celo, Avalanche, RSK, Monad, Nibiru, 0G, World Chain, XDC, Unichain, zkSync Era, Boba, Filecoin, Etherlink, Mantle, Goat, BOB, Lens, Telos, Sonic, Redbelly, Hemi, Scroll, Linea, Sei, Blast, Taiko, Lisk, Polygon zkEVM, Moonbeam, Corn, Manta, LightLink, Tempo, Saga - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2", "role": "ProxyAdmin for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xEe6A57eC80ea46401049E92587E52f5Ec1c24785", "role": "TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A", "role": "Owner of UniswapV3Factory" }, { "chain": "Ethereum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Ethereum", "address": "0xE592427A0AEce92De3Edee1F18E0157C05861564", "role": "router" }, { "chain": "Ethereum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "router" }, { "chain": "Ethereum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" }, { "chain": "Ethereum", "address": "0x1F98415757620B543A52E61c46B32eB19261F984", "role": "other" }, { "chain": "Ethereum", "address": "0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696", "role": "other" }, { "chain": "Ethereum", "address": "0xbfd8137f7d1516D3ea5cA83523914859ec47F573", "role": "other" }, { "chain": "Ethereum", "address": "0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6", "role": "other" }, { "chain": "Ethereum", "address": "0x42B24A95702b9986e82d421cC3568932790A48Ec", "role": "other" }, { "chain": "Ethereum", "address": "0x91ae842A5Ffd8d12023116943e72A606179294f3", "role": "other" }, { "chain": "Ethereum", "address": "0xA5644E29708357803b5A882D272c41cC0dF92B34", "role": "other" }, { "chain": "Ethereum", "address": "0x61fFE014bA17989E743c5F6cB21bF9697530B21e", "role": "other" }, { "chain": "Ethereum", "address": "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45", "role": "router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "other" }, { "chain": "Base", "address": "0x33128a8fC17869897dcE68Ed026d694621f6FDfD", "role": "factory" }, { "chain": "Base", "address": "0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1", "role": "pool" }, { "chain": "Base", "address": "0x6fF5693b99212Da76ad316178A184AB56D299b43", "role": "router" }, { "chain": "Base", "address": "0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1", "role": "other" }, { "chain": "Arbitrum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Arbitrum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "router" }, { "chain": "Arbitrum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2 (ProxyAdmin for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xEe6A57eC80ea46401049E92587E52f5Ec1c24785 (TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A (Owner of UniswapV3Factory) - https://defipunkd.com/address/1/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/1/0xE592427A0AEce92De3Edee1F18E0157C05861564 (router) - https://defipunkd.com/address/1/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (router) - https://defipunkd.com/address/1/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) - https://defipunkd.com/address/1/0x1F98415757620B543A52E61c46B32eB19261F984 (other) - https://defipunkd.com/address/1/0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696 (other) - https://defipunkd.com/address/1/0xbfd8137f7d1516D3ea5cA83523914859ec47F573 (other) - https://defipunkd.com/address/1/0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6 (other) - https://defipunkd.com/address/1/0x42B24A95702b9986e82d421cC3568932790A48Ec (other) - https://defipunkd.com/address/1/0x91ae842A5Ffd8d12023116943e72A606179294f3 (other) - https://defipunkd.com/address/1/0xA5644E29708357803b5A882D272c41cC0dF92B34 (other) - https://defipunkd.com/address/1/0x61fFE014bA17989E743c5F6cB21bF9697530B21e (other) - https://defipunkd.com/address/1/0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 (router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (other) - https://defipunkd.com/address/8453/0x33128a8fC17869897dcE68Ed026d694621f6FDfD (factory) - https://defipunkd.com/address/8453/0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1 (pool) - https://defipunkd.com/address/8453/0x6fF5693b99212Da76ad316178A184AB56D299b43 (router) - https://defipunkd.com/address/8453/0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1 (other) - https://defipunkd.com/address/42161/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/42161/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (router) - https://defipunkd.com/address/42161/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: VERIFIABILITY Evaluate whether an outsider can independently confirm what the deployed code does. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - V1. For each address you assess: is the bytecode verified on the chain's block explorer? Record the "Contract Source Code Verified" indicator. https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... returns this as a top-level "verified" boolean plus "abiSource" ("etherscan" / "sourcify") and an inline ABI — useful when the explorer page is rate-limited. If the contract is a proxy, verify BOTH the proxy contract AND the current implementation contract. The same /api/contract/abi response auto-resolves proxies and includes a "proxy.implementation" address when present, so one call covers V1 + V6 in one shot. An explorer "Similar Match" on a well-known proxy pattern (Aragon AppProxyUpgradeable, ERC1967Proxy, OssifiableProxy, OZ TransparentUpgradeableProxy) is expected for that pattern and does NOT count as a verification gap on its own — what matters is that the implementation is independently verified. - V2. Source-to-repo correspondence: for each verified contract, attempt to find a matching commit in the linked GitHub repos. Record evidence[].commit on a match. Independent compile/bytecode-match is NOT required for green — a recognized public repo whose structure and file contents correspond to the explorer-visible source is sufficient. If you did not pin a commit SHA or run a bytecode diff, record that plainly in unknowns[] and proceed; it is a scope limit, not a downgrade signal. - V3. Audit coverage: for each URL in protocol.audit_links, open it and record: auditor name, audit date, the specific contracts / commit in scope. Flag audits that predate the current deployment by >6 months without a follow-up review. - V4. Auditor recognition: the following firms are broadly recognized in Solidity: Trail of Bits, Zellic, Spearbit, OpenZeppelin, ConsenSys Diligence, Certora (formal verification), Quantstamp, Halborn, Peckshield, Sigma Prime, ChainSecurity, Ackee Blockchain, MixBytes, Statemind. Unknown firms are orange-at-best for any green-grade claim. Name the firm explicitly in evidence[]. - V5. Post-audit drift: compare the most recent in-scope audit(s) against the currently-deployed source, weighted by what each contract does and by what the changes actually contain. SCOPE — drift only downgrades the grade when ALL of the following hold: (i) the drifting contract is fund-custody / settlement / accounting-critical (NOT a peripheral router, lens, quoter, or pure-view contract that holds no balances); (ii) the changes are material — new functions, modified access control, modified accounting, modified fund flow — and not refactors / struct relocations / import reorgs / build or CI fixes / formatting; (iii) no later audit, fix-audit, or differential audit from a recognized firm covers the changed files (audits often pin a pre-fix commit while a follow-up reviews the delta — match by file scope, not by commit-hash equality). When you cite drift as a downgrade reason, name the specific behavior change (function added, role granted, accounting formula altered) — "N commits ahead" or "+X/-Y LOC" alone is not evidence of material drift. If you have not sampled the diff content (e.g. via the GitHub compare view or the top commits in the window), record drift as an unknowns[] entry rather than auto-downgrading; commit-count and LOC are starting signals, not findings. - V6. Implementation vs proxy: a verified proxy with an unverified implementation is effectively unverified. State whether the implementation is verified separately. EVIDENCE DISCIPLINE (read before writing findings[]): - Do not assert a specific deploy-commit SHA, bytecode equivalence, or "identical to audited commit" unless you actually fetched the artifact that shows it (e.g., a deployed-addresses JSON you opened, an explorer page you read). Inferred or plausible matches belong in unknowns[], never in findings[] or evidence[]. - Evidence[] entries must correspond to pages/files you actually retrieved this run. A URL you did not open is not evidence. Then write the steel-man section per Hard Rule 11. Grade rules: - green = deployed bytecode verified on the explorer (proxy AND implementation if proxied; "Similar Match" on a standard proxy pattern is fine per V1), a public source repo exists whose contents correspond to the explorer-visible source, AND ≥1 audit from a recognized firm covering the currently-deployed contracts (≤6 months of drift OR drift was re-audited). A missing local compile-match is not a downgrade — record it in unknowns[] and still grade green if the other conditions hold. - orange = verified but with visible drift from the public repo, OR audit scope is stale relative to deployment, OR only minor / unknown-firm audits exist, OR only some of the main contracts are verified, OR proxy verified but implementation only partially verified. - red = unverified bytecode (or verified proxy with unverified implementation), OR no audit in protocol.audit_links, OR no public repo. - unknown = reserved for when the protocol's verifiability posture genuinely cannot be assessed (e.g., explorer and repo both inaccessible for this protocol). Do NOT use unknown merely because you, the analyst, could not run a particular check such as a bytecode diff — that goes in unknowns[] while the grade is still assigned from the evidence you do have. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "verifiability", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Control
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v3 - protocol.name: Uniswap V3 - protocol.chains: Ethereum, Base, Arbitrum, Binance, Polygon, X Layer, Optimism, Plasma, xDai, Celo, Avalanche, RSK, Monad, Nibiru, 0G, World Chain, XDC, Unichain, zkSync Era, Boba, Filecoin, Etherlink, Mantle, Goat, BOB, Lens, Telos, Sonic, Redbelly, Hemi, Scroll, Linea, Sei, Blast, Taiko, Lisk, Polygon zkEVM, Moonbeam, Corn, Manta, LightLink, Tempo, Saga - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2", "role": "ProxyAdmin for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xEe6A57eC80ea46401049E92587E52f5Ec1c24785", "role": "TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A", "role": "Owner of UniswapV3Factory" }, { "chain": "Ethereum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Ethereum", "address": "0xE592427A0AEce92De3Edee1F18E0157C05861564", "role": "router" }, { "chain": "Ethereum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "router" }, { "chain": "Ethereum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" }, { "chain": "Ethereum", "address": "0x1F98415757620B543A52E61c46B32eB19261F984", "role": "other" }, { "chain": "Ethereum", "address": "0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696", "role": "other" }, { "chain": "Ethereum", "address": "0xbfd8137f7d1516D3ea5cA83523914859ec47F573", "role": "other" }, { "chain": "Ethereum", "address": "0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6", "role": "other" }, { "chain": "Ethereum", "address": "0x42B24A95702b9986e82d421cC3568932790A48Ec", "role": "other" }, { "chain": "Ethereum", "address": "0x91ae842A5Ffd8d12023116943e72A606179294f3", "role": "other" }, { "chain": "Ethereum", "address": "0xA5644E29708357803b5A882D272c41cC0dF92B34", "role": "other" }, { "chain": "Ethereum", "address": "0x61fFE014bA17989E743c5F6cB21bF9697530B21e", "role": "other" }, { "chain": "Ethereum", "address": "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45", "role": "router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "other" }, { "chain": "Base", "address": "0x33128a8fC17869897dcE68Ed026d694621f6FDfD", "role": "factory" }, { "chain": "Base", "address": "0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1", "role": "pool" }, { "chain": "Base", "address": "0x6fF5693b99212Da76ad316178A184AB56D299b43", "role": "router" }, { "chain": "Base", "address": "0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1", "role": "other" }, { "chain": "Arbitrum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Arbitrum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "router" }, { "chain": "Arbitrum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2 (ProxyAdmin for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xEe6A57eC80ea46401049E92587E52f5Ec1c24785 (TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A (Owner of UniswapV3Factory) - https://defipunkd.com/address/1/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/1/0xE592427A0AEce92De3Edee1F18E0157C05861564 (router) - https://defipunkd.com/address/1/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (router) - https://defipunkd.com/address/1/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) - https://defipunkd.com/address/1/0x1F98415757620B543A52E61c46B32eB19261F984 (other) - https://defipunkd.com/address/1/0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696 (other) - https://defipunkd.com/address/1/0xbfd8137f7d1516D3ea5cA83523914859ec47F573 (other) - https://defipunkd.com/address/1/0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6 (other) - https://defipunkd.com/address/1/0x42B24A95702b9986e82d421cC3568932790A48Ec (other) - https://defipunkd.com/address/1/0x91ae842A5Ffd8d12023116943e72A606179294f3 (other) - https://defipunkd.com/address/1/0xA5644E29708357803b5A882D272c41cC0dF92B34 (other) - https://defipunkd.com/address/1/0x61fFE014bA17989E743c5F6cB21bF9697530B21e (other) - https://defipunkd.com/address/1/0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 (router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (other) - https://defipunkd.com/address/8453/0x33128a8fC17869897dcE68Ed026d694621f6FDfD (factory) - https://defipunkd.com/address/8453/0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1 (pool) - https://defipunkd.com/address/8453/0x6fF5693b99212Da76ad316178A184AB56D299b43 (router) - https://defipunkd.com/address/8453/0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1 (other) - https://defipunkd.com/address/42161/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/42161/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (router) - https://defipunkd.com/address/42161/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: CONTROL Evaluate who can change the protocol's rules, how fast, and how broadly. (Step 0 capability probe and the off-chain-only fallback live in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]) - **C1.** For each address you assess: who is the contract owner / admin / pendingAdmin / governor — read these via the block explorer's "Read Contract" tab OR `https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=owner` (BARE method names: `&method=owner`, `&method=admin`, `&method=pendingOwner`, `&method=governor`). For Safes use `/api/safe/owners?chainId=<id>&address=0x...`. When a protocol has multiple major versions deployed (v2/v3/v4), perform C1 reads on the NEWEST deployment separately — newer deployments often have weaker control surfaces than the legacy core. - **C2.** Upgrade mechanism: transparent proxy / UUPS / Beacon / Diamond / immutable. Identify the proxy admin address. Check upgradeability of GOVERNANCE contracts too — a Governor / Aragon Voting / OZ Governor is often itself a proxy whose admin is the Timelock. Asymmetry: when fund-holding cores are immutable AND governance has no admin path that reaches them, an upgradable Governor/Timelock is T3-only and must NOT drag the verdict below green on that basis alone (see grade rules and the "immutable cores" caveat). Only call upgradability "mixed" if you can name a concrete function on the upgradable surface that reaches T1 or T2 on user funds. - **C3.** EXECUTION PATH (enumerate every stage, in order, with delays in seconds). The operative path is usually a chain (voting → scheduler → timelock → executor; or governor → queue → execute; or Aragon Voting → DualGovernance → EmergencyProtectedTimelock → AdminExecutor). For each stage, record (a) the contract address, (b) the delay constant name + value in seconds, (c) the URL you read it from (block-explorer Read Contract OR `/api/contract/read?...&method=MIN_DELAY&block=<n>`). Do NOT stop at the first timelock-shaped contract — if its admin is itself called by another contract, keep walking. The grading delay is the SUM OF DELAYS ON THE UNCONTESTED FAST PATH (shortest time a proposal with no opposition can go from submission to executable). Dynamic / contested extensions (veto signaling, rage quit, escrow delay) are modifiers, not the basis — note them separately. - **C4.** Enumerate EVERY multisig with reachable control — main proxy admin, emergency activation, emergency execution, reseal / pause, gate-seal committees, tiebreaker, per-module admins. For each Safe, fetch threshold + owners + version via `/api/safe/owners?chainId=<id>&address=0x...` (response includes raw eth_call data, so the URL is citable evidence). Enumerate ops/council/incentives multisigs even when off the upgrade path — record their scope so a reader can see they are NOT on the upgrade path. For each: (a) address, (b) threshold / total signers, (c) signer identities classified as insider (team, paid auditors under ongoing engagement, mandated service providers) vs non-insider (independent community members, unaffiliated researchers), (d) the specific power held (upgrade, pause, parameter, etc.). - **C5.** On-chain governance: Governor / GovernorBravo / OZ Governor / Aragon Voting with token-weighted voting? Record proposal threshold, voting period, quorum, and the timelock delay between queue and execute. Every numeric constant must come from a Read Contract call you can link to, or be in unknowns[] with the C-code. If votingDelay / votingPeriod are denominated in BLOCKS, convert to seconds at the chain's CURRENT block time (Ethereum mainnet ≈ 12s post-Merge, not the 15s in older Compound/Bravo deployments) — cite both block count and converted seconds. - **C6.** EMERGENCY POWERS: separate emergency-pause / guardian role with a different time cap or different actor than the main upgrade authority? Record it explicitly. - **C7.** POWER TIER (blast radius). For each privileged path in C3–C6, classify the WORST thing that path can do, choosing the highest applicable tier. Cite the specific function name and any on-chain bound — tier claims without a named function are unsupported. - **T1 — FUND-CRITICAL**: replace implementation of contracts holding user funds; change AMM math / accounting / collateral logic; mint unbacked debt or shares; pause withdrawals; drain user-fund treasury; change oracle to attacker-controlled source; replace upgrade admin with EOA. - **T2 — ECONOMICALLY MATERIAL**: change fee parameters within bounded ranges; redirect protocol fees; add/remove markets / collateral types; bounded inflation or token mint within hard-capped schedule; spend protocol-owned (non-user) treasury. - **T3 — GOVERNANCE-INTERNAL**: change voting rules, quorum, voting period, proposal threshold; upgrade the Governor itself; rotate Timelock admin; mint governance tokens within a capped annual schedule. - **T4 — OPERATIONAL**: incentives distribution, grants, ENS / frontend canonicalization, deployment coordination, periphery router deprecation. The grade is set by the HIGHEST tier reachable on the uncontested fast path, not the median. State the tier and the binding function in the verdict. ### Read Contract discipline (applies to C3, C4, C5) Every numeric constant cited (timelock delays, voting periods, multisig thresholds, quorum percentages) must come from EITHER (a) a block-explorer Read Contract URL, OR (b) a DeFiPunkd `/api/contract/read` or `/api/safe/owners` URL (preferred with `&block=<n>` for content-addressed evidence), OR (c) an unknowns[] entry with the C-code. Docs / blog posts are corroboration only — they cannot be the sole citation for a value that is also readable on-chain. ### Off-chain-only substitute hierarchy (when grading_basis="off-chain-only" — see preamble Rule 16) When on-chain reads were genuinely unreachable this run, eligible off-chain substitutes in priority order: 1. Linked audit PDFs (admin roles, multisig members, timelock delays usually enumerated). 2. Governance forum posts that quote constants from a successful on-chain proposal (cite post URL + linked execution-tx URL). 3. Official protocol docs pages with named addresses and roles (must be on a domain owned by the protocol). 4. GitHub README / SECURITY.md / governance/*.md at a pinned commit SHA. Forbidden substitutes: third-party blog posts, X / Twitter threads, search-result snippets, model memory. Required degradation: any C-code citing a numeric constant from docs/forum/audit prose ONLY must also carry an `unknowns[]` entry with `-offchain` suffix noting "value not re-read on-chain in this run; corroboration only". ### Grade rules (apply the timelock bar conditional on the highest C7 tier reachable on the fast path) Security Council standard (used below): a multisig qualifies as "Security Council" only if ALL of: ≥7 signers, ≥51% threshold, ≥50% non-insider signers, every signer publicly announced. Failing any criterion = NOT a Security Council, regardless of signer reputation. - **green**: highest reachable tier is T3 or T4 regardless of timelock; OR T2 reachable with uncontested-fast-path delay ≥7 days; OR T1 reachable only via immutable contracts (T1 is unreachable); OR T1 reachable with uncontested-fast-path delay ≥7 days combined with a Security Council multisig; OR T1 reachable with uncontested-fast-path delay ≥7 days through active on-chain governance with broad token distribution. - **orange**: T2 reachable with uncontested-fast-path delay >0 but <7 days; OR T1 reachable with uncontested-fast-path delay >0 but <7 days; OR a multisig failing one or more Security Council criteria sits on a T1/T2 path; OR unclear upgrade authority on a T1/T2 path; OR governance with very short timelock or low quorum on a T1/T2 path. - **red**: T1 reachable with no timelock by a single EOA or 2-of-3 multisig; OR a T1 upgrade admin that is not a smart contract you can audit. - **unknown**: completed the checklist but still cannot determine the upgrade authority OR cannot classify the highest tier reachable on the main contracts. Tiering caveats: - "Bounded" must be enforced ON-CHAIN to count as T2. A function that sets fees with no upper-bound check is T1 — cite the bound check. - Recurring T2 economic extraction (e.g. fee redirect with no rate limit) approaches T1 over time. A single proposal that can permanently redirect all future revenue is T1. - T3 assumes the governance contract cannot itself authorize a T1/T2 action without going through the same timelock. If governance can self-upgrade to bypass the timelock, T3 collapses into T1. - Do not downgrade tier by hand-waving ("realistically governance would never…"). Tier on what the contract permits, not what feels likely. Notes: - **Dynamic / dual-governance timelocks** (Lido, Compound escrow veto): the rubric grades on the uncontested path because that is the path most upgrades take. A dynamic extension that fires only under stake-weighted opposition is a real protection — name it in the green steel-man, but it does not lift an orange fast path into green; state the tension in the verdict. - **Immutable cores with upgradable governance** (Uniswap-style): if fund-holding contracts are immutable and have no admin-reachable function moving / freezing / re-routing user funds, the highest reachable tier on the upgrade path is T3 — green regardless of timelock. Don't grade this orange just because the Governor is a proxy — that's a C2 fact, not a downgrade. Downgrade only applies if you can cite a concrete function on the upgradable surface that reaches T1 or T2 (privileged hook, upgradable factory controlling fund-routing, fee-switch redirecting protocol revenue without bound). - **The 7-day bar** reflects the exit-window standard — users need notice after a queued upgrade to withdraw if they disagree. The ability-to-exit slice grades the exit side; this slice grades the delay side; both must hold for users to actually benefit from the delay. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "control", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Ability to exit
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v3 - protocol.name: Uniswap V3 - protocol.chains: Ethereum, Base, Arbitrum, Binance, Polygon, X Layer, Optimism, Plasma, xDai, Celo, Avalanche, RSK, Monad, Nibiru, 0G, World Chain, XDC, Unichain, zkSync Era, Boba, Filecoin, Etherlink, Mantle, Goat, BOB, Lens, Telos, Sonic, Redbelly, Hemi, Scroll, Linea, Sei, Blast, Taiko, Lisk, Polygon zkEVM, Moonbeam, Corn, Manta, LightLink, Tempo, Saga - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2", "role": "ProxyAdmin for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xEe6A57eC80ea46401049E92587E52f5Ec1c24785", "role": "TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A", "role": "Owner of UniswapV3Factory" }, { "chain": "Ethereum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Ethereum", "address": "0xE592427A0AEce92De3Edee1F18E0157C05861564", "role": "router" }, { "chain": "Ethereum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "router" }, { "chain": "Ethereum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" }, { "chain": "Ethereum", "address": "0x1F98415757620B543A52E61c46B32eB19261F984", "role": "other" }, { "chain": "Ethereum", "address": "0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696", "role": "other" }, { "chain": "Ethereum", "address": "0xbfd8137f7d1516D3ea5cA83523914859ec47F573", "role": "other" }, { "chain": "Ethereum", "address": "0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6", "role": "other" }, { "chain": "Ethereum", "address": "0x42B24A95702b9986e82d421cC3568932790A48Ec", "role": "other" }, { "chain": "Ethereum", "address": "0x91ae842A5Ffd8d12023116943e72A606179294f3", "role": "other" }, { "chain": "Ethereum", "address": "0xA5644E29708357803b5A882D272c41cC0dF92B34", "role": "other" }, { "chain": "Ethereum", "address": "0x61fFE014bA17989E743c5F6cB21bF9697530B21e", "role": "other" }, { "chain": "Ethereum", "address": "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45", "role": "router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "other" }, { "chain": "Base", "address": "0x33128a8fC17869897dcE68Ed026d694621f6FDfD", "role": "factory" }, { "chain": "Base", "address": "0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1", "role": "pool" }, { "chain": "Base", "address": "0x6fF5693b99212Da76ad316178A184AB56D299b43", "role": "router" }, { "chain": "Base", "address": "0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1", "role": "other" }, { "chain": "Arbitrum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Arbitrum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "router" }, { "chain": "Arbitrum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2 (ProxyAdmin for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xEe6A57eC80ea46401049E92587E52f5Ec1c24785 (TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A (Owner of UniswapV3Factory) - https://defipunkd.com/address/1/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/1/0xE592427A0AEce92De3Edee1F18E0157C05861564 (router) - https://defipunkd.com/address/1/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (router) - https://defipunkd.com/address/1/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) - https://defipunkd.com/address/1/0x1F98415757620B543A52E61c46B32eB19261F984 (other) - https://defipunkd.com/address/1/0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696 (other) - https://defipunkd.com/address/1/0xbfd8137f7d1516D3ea5cA83523914859ec47F573 (other) - https://defipunkd.com/address/1/0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6 (other) - https://defipunkd.com/address/1/0x42B24A95702b9986e82d421cC3568932790A48Ec (other) - https://defipunkd.com/address/1/0x91ae842A5Ffd8d12023116943e72A606179294f3 (other) - https://defipunkd.com/address/1/0xA5644E29708357803b5A882D272c41cC0dF92B34 (other) - https://defipunkd.com/address/1/0x61fFE014bA17989E743c5F6cB21bF9697530B21e (other) - https://defipunkd.com/address/1/0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 (router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (other) - https://defipunkd.com/address/8453/0x33128a8fC17869897dcE68Ed026d694621f6FDfD (factory) - https://defipunkd.com/address/8453/0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1 (pool) - https://defipunkd.com/address/8453/0x6fF5693b99212Da76ad316178A184AB56D299b43 (router) - https://defipunkd.com/address/8453/0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1 (other) - https://defipunkd.com/address/42161/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/42161/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (router) - https://defipunkd.com/address/42161/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: ABILITY-TO-EXIT Evaluate whether users can withdraw their funds on their own terms, even under adversarial admin conditions. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - E1. Enumerate every user-facing exit function in the main contracts: withdraw, redeem, burn, requestWithdrawal, claim, exit, etc. List them by name. Do NOT treat the contract as a monolith. - E2. For EACH exit function in E1: identify its access modifiers and any pause guards (e.g. _checkResumed, whenNotPaused, onlyRole). Functions that gate REQUEST PLACEMENT often differ from functions that CLAIM FINALIZED FUNDS — check both separately. - E3. For each pause guard: identify the role holder (which address holds PAUSE_ROLE / GUARDIAN / etc.) and the maximum pause duration. Specifically check whether PAUSE_INFINITELY (or equivalent uncapped pause) is callable, and which actor can call it (single multisig vs governance vote). For role-holder reads use https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=hasRole&args=0x...,0x... or &method=getRoleAdmin&args=0x.... For "is currently paused" checks use &method=paused or &method=isPaused&args=<resume-code>. Use the BARE method name (no parens). Cite the URL with &block=<n> in evidence[]. - E4. EMERGENCY vs GOVERNANCE pause distinction: many protocols have a fast-acting emergency pause capped at N days and a slow governance pause that can be indefinite. Record both paths separately if present, with their time caps and actor classes. - E5. Queued redemption: documented maximum queue duration, daily withdrawal caps, whether the queue itself is pausable. - E6. Forced-exit / escape-hatch / permissionless emergency-exit mechanism for adversarial-admin scenarios. - E7. Frontend dependency: confirm exit functions are directly callable on-chain (e.g. via Etherscan write tab or a generic wallet) without the project's frontend. Then write the steel-man section per Hard Rule 11. Common red-vs-orange tension on this slice: indefinite pause exists (suggests red) BUT the realistic emergency path is time-capped AND claims of already-finalized exits are not pause-gated (suggests orange). Resolve this by stating who can do what for how long, not by stopping at the worst-case sentence. Grade rules: - green = permissionless exit; pause is either absent, narrowly scoped to clearly-described emergencies with auto-expiry, or capped at ≤7 days; no frontend dependency for exit; claims of already-finalized exits are not pause-gated under any path. - orange = pausable with broad scope OR indefinite pause is reachable only through governance vote (not unilateral admin action), OR queued redemption with documented max > 7 days, OR claims-of-finalized are exempt but new-request placement can be paused indefinitely by governance. - red = exit requires admin signature, OR ANY actor (including governance) can pause CLAIMS of finalized exits indefinitely, OR there is no on-chain exit function at all (purely custodial), OR pause is held by a single EOA / 2-of-3 multisig with no time cap. - unknown = checklist incomplete after checking the sources above. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "ability-to-exit", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Autonomy
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v3 - protocol.name: Uniswap V3 - protocol.chains: Ethereum, Base, Arbitrum, Binance, Polygon, X Layer, Optimism, Plasma, xDai, Celo, Avalanche, RSK, Monad, Nibiru, 0G, World Chain, XDC, Unichain, zkSync Era, Boba, Filecoin, Etherlink, Mantle, Goat, BOB, Lens, Telos, Sonic, Redbelly, Hemi, Scroll, Linea, Sei, Blast, Taiko, Lisk, Polygon zkEVM, Moonbeam, Corn, Manta, LightLink, Tempo, Saga - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2", "role": "ProxyAdmin for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xEe6A57eC80ea46401049E92587E52f5Ec1c24785", "role": "TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A", "role": "Owner of UniswapV3Factory" }, { "chain": "Ethereum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Ethereum", "address": "0xE592427A0AEce92De3Edee1F18E0157C05861564", "role": "router" }, { "chain": "Ethereum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "router" }, { "chain": "Ethereum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" }, { "chain": "Ethereum", "address": "0x1F98415757620B543A52E61c46B32eB19261F984", "role": "other" }, { "chain": "Ethereum", "address": "0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696", "role": "other" }, { "chain": "Ethereum", "address": "0xbfd8137f7d1516D3ea5cA83523914859ec47F573", "role": "other" }, { "chain": "Ethereum", "address": "0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6", "role": "other" }, { "chain": "Ethereum", "address": "0x42B24A95702b9986e82d421cC3568932790A48Ec", "role": "other" }, { "chain": "Ethereum", "address": "0x91ae842A5Ffd8d12023116943e72A606179294f3", "role": "other" }, { "chain": "Ethereum", "address": "0xA5644E29708357803b5A882D272c41cC0dF92B34", "role": "other" }, { "chain": "Ethereum", "address": "0x61fFE014bA17989E743c5F6cB21bF9697530B21e", "role": "other" }, { "chain": "Ethereum", "address": "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45", "role": "router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "other" }, { "chain": "Base", "address": "0x33128a8fC17869897dcE68Ed026d694621f6FDfD", "role": "factory" }, { "chain": "Base", "address": "0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1", "role": "pool" }, { "chain": "Base", "address": "0x6fF5693b99212Da76ad316178A184AB56D299b43", "role": "router" }, { "chain": "Base", "address": "0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1", "role": "other" }, { "chain": "Arbitrum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Arbitrum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "router" }, { "chain": "Arbitrum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2 (ProxyAdmin for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xEe6A57eC80ea46401049E92587E52f5Ec1c24785 (TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A (Owner of UniswapV3Factory) - https://defipunkd.com/address/1/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/1/0xE592427A0AEce92De3Edee1F18E0157C05861564 (router) - https://defipunkd.com/address/1/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (router) - https://defipunkd.com/address/1/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) - https://defipunkd.com/address/1/0x1F98415757620B543A52E61c46B32eB19261F984 (other) - https://defipunkd.com/address/1/0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696 (other) - https://defipunkd.com/address/1/0xbfd8137f7d1516D3ea5cA83523914859ec47F573 (other) - https://defipunkd.com/address/1/0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6 (other) - https://defipunkd.com/address/1/0x42B24A95702b9986e82d421cC3568932790A48Ec (other) - https://defipunkd.com/address/1/0x91ae842A5Ffd8d12023116943e72A606179294f3 (other) - https://defipunkd.com/address/1/0xA5644E29708357803b5A882D272c41cC0dF92B34 (other) - https://defipunkd.com/address/1/0x61fFE014bA17989E743c5F6cB21bF9697530B21e (other) - https://defipunkd.com/address/1/0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 (router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (other) - https://defipunkd.com/address/8453/0x33128a8fC17869897dcE68Ed026d694621f6FDfD (factory) - https://defipunkd.com/address/8453/0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1 (pool) - https://defipunkd.com/address/8453/0x6fF5693b99212Da76ad316178A184AB56D299b43 (router) - https://defipunkd.com/address/8453/0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1 (other) - https://defipunkd.com/address/42161/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/42161/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (router) - https://defipunkd.com/address/42161/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: AUTONOMY Evaluate this protocol's autonomy: can a failure of anything outside its own contracts cause theft or loss of user principal, loss of unclaimed yield, or materially change the protocol's expected performance? "Autonomy" is not "has zero external touchpoints" — it is "external failures are either survivable or recoverable without user loss". This slice adapts DefiScan v1's Autonomy dimension; dependencies are one of several criteria, not the whole frame. GUARDRAILS (read before grading): - Category alone (Liquid Staking, Bridge, RWA Lending, Restaking, …) does NOT force a grade. A category is a hint about where to look; the grade must come from the concrete A1–A9 findings below. - Base-chain consensus (Ethereum PoS, the chain's validator set, the canonical Deposit Contract at 0x00000000219ab540356cBB839Cbe05303d7705Fa) is the SUBSTRATE, not a dependency, for any protocol deployed on that chain. Do not list "depends on Ethereum" as a finding. - Oracles or other integrations used by DOWNSTREAM protocols that happen to read this protocol's token (e.g. Chainlink stETH/USD consumed by Aave) are NOT this protocol's dependencies. Count only what THIS protocol's contracts call or trust on-chain. If a feed or contract appears in the protocol's docs only as reference material for third-party integrators, EXCLUDE IT ENTIRELY — do not log it as a finding even with a "peripheral" or "referenced only" caveat. - "Upgradeable admin can change things" belongs to the CONTROL slice; only count it here when the upgrade surface lets governance silently swap an external dependency (see A9). - Underlying-asset risk in opt-in, isolated markets is NOT autonomy-red on its own. When a protocol wraps third-party yield-bearing assets (LSTs, LRTs, ERC-4626 vaults, lending receipts, restaked tokens) into per-market silos that users explicitly choose, a failure of one underlying does NOT propagate to other markets and is risk the user opted into per-market. Record it under A4 with depth and propagation scope, but do not let it alone drive a red verdict — red requires an external dependency that cross-cuts the protocol or that the user did not opt into at deposit time. A failure mode that is "if the LRT you deposited is hacked, your principal in that LRT-backed market is impaired" is the underlying's autonomy story, not this protocol's; grade it on whether THIS protocol introduces additional dependencies on top. - Sub-module enumeration is mandatory before grading. If the protocol ships distinct product lines or modules (e.g., a v2 core AMM plus a newer perps/funding-rate module, a lending pool plus a separate vault layer, an L1 core plus a cross-chain extension), enumerate each in findings and grade against the WORST module weighted by its share of TVS or its blast radius. A green core does not rescue an orange/red sub-module; conversely, a small red sub-module with capped TVS may bound the overall grade to orange. Name each module by its on-chain factory or router address. If you do not know whether a module exists, that is an unknowns[] entry, not silence. EXPLICIT TVS WEIGHTING: in the verdict, state each module's approximate share of total protocol TVS (use "~X%" if exact figures unavailable; check DeFiLlama or block-explorer balances on the module's main contract) and how that share informs the weighted grade. Format: "Module A holds ~X% of TVS (grade: <g>); Module B holds ~Y% (grade: <g>); weighted overall = <grade> because <reason>." If a red sub-module holds <5% of total TVS and is capped, the overall grade may be orange; if it holds >25%, the overall grade is red. Do not let qualitative reasoning substitute for the percentages — write the numbers. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. External contract calls. Enumerate every external contract the core contracts call or read from (oracles, price feeds, AMM pools, lending pools, staking/deposit contracts, yield wrappers). For each, identify the address, the provider, and what user-facing function of this protocol would break or mis-price if that external contract paused, mis-reported, or behaved adversarially. Grep for "oracle", "aggregator", "getPrice", "latestAnswer", "chainlink", "pyth", "redstone" as a starting point. To verify an oracle is live and what it currently reports, hit https://defipunkd.com/api/contract/read?chainId=<id>&address=<oracle>&method=latestAnswer (or &method=latestRoundData, &method=getPrice, &method=description; use the BARE method name without parens) and cite the URL — the response includes blockNumber/blockHash and rawReturnData, which is stronger evidence than a docs page about which feed "should" be used. - A2. Off-chain actor committees reporting INTO the protocol. Oracle committees, guardian multisigs, DAO-selected validator sets acting as protocol reporters, exit-bus signers, fraud-proof challengers. For each, record committee size, quorum, who picks the members, and what mis-reporting could do (mint, burn, finalize withdrawal, freeze). Distinguish this from governance admins (control slice). NOTE ON STAKING PROTOCOLS: validator slashing and node-operator misbehavior are properties of the base-chain substrate, NOT external dependencies, when the operator set is diversified enough that a coordinated failure caps at <5% principal loss. Count validator/operator risk under A2 ONLY if the operator set is small, non-diversified, or lacks bonding / slashing-insurance / diversification mitigations. A curated set of 30+ independent operators with documented diversification falls under the mitigated path; a 3-operator LST does not. Do not cite the protocol's own risk disclosure as evidence that operator failure = principal loss unless you also check the diversification and bond mitigations. - A3. Bridge / cross-chain messaging dependencies. Only count bridges that carry material TVL or are required for a core user flow. For each, name the bridge operator (canonical L1↔L2, LayerZero, Wormhole, Axelar, custom multisig), the trust model (canonical, optimistic, light-client, guardian set), and what fraction of TVL or users ride on it. "wstETH exists on 15 chains" is not a finding unless material TVL sits there. Before listing any non-primary chain deployment as a dependency, verify it is still operational as of analysis_date — retired or sunset deployments (e.g., Lido-on-Terra, Lido-on-Solana) belong in unknowns[] or should be omitted, never cited as a current dependency. - A4. Nested collateral / restaking chains. For restaking / LRT / receipt-of-receipt designs: record the depth of the collateral chain, every actor with slashing or freezing power at each level, and whether a failure N levels deep propagates to user principal here. - A5. Fork lineage (silent check). If DeFiLlama's forkedFrom is non-empty, record it as one finding and move on. If empty, do NOT add a placeholder finding; it adds noise. - A6. Fallback mechanisms and circuit breakers. What catches an external failure? Sanity-check contracts on oracle reports, rebase bounds, pause paths triggered by bad prices, second-opinion oracles, max-per-block throughput caps, withdrawal queues that absorb bad reports. Record which A1–A4 risks are mitigated by which fallback, and which are unmitigated. For EACH fallback you cite, state its activation status explicitly: (i) LIVE and enforcing on-chain today, (ii) DEPLOYED but not yet wired / activated (e.g., interface exists but the address is zero or the role is unassigned), or (iii) DOCUMENTED / PROPOSED only (forum post, LIP draft, audit pending). Only (i) counts as mitigation for the grade. A fallback in state (ii) or (iii) should be noted but must not reduce the risk in your steel-man or verdict. If you cannot determine activation status, add an unknowns[] entry rather than assume it is live. - A7. Sequencer / L1-liveness dependency BEYOND the base-chain substrate. SCOPE — sequencer risk only counts here when the protocol IS its own L2/L3 appchain or app-rollup, where the sequencer is part of the protocol's own stack and a freeze is a protocol-level outage. A protocol permissionlessly deployed on a third-party L2 inherits that L2's sequencer as substrate, not an A7 dependency. Record the sequencer/DA trust model when A7 applies. - A8. Keeper / relayer / off-chain bot liveness. Protocols that need permissionless-but-necessary off-chain actors (liquidation bots, auto-compounders, deposit relayers, intent solvers). Record whether the role is permissionless, what degrades if nobody runs it (yield paused, bad debt accumulates, positions go stale), and whether the failure mode is graceful or catastrophic. - A9. Governance-mutable dependency surface. Can an admin or DAO action silently INTRODUCE a NEW EXTERNAL dependency — swap the oracle address to a different provider, register a new staking module that calls an untrusted contract, add a new bridge, route SY through a new external vault — without an exit window for users? Check the upgrade / router / module-registry contracts. Answer: which EXTERNAL dependencies are governance-mutable, who holds that power, and whether there is a timelock or exit window. SCOPE LIMIT — read carefully: A9 is about the *external dependency surface*, not the upgrade surface in general. "The proxyAdmin / EOA can upgrade the router implementation to arbitrary bytecode" is a CONTROL-slice finding (admin can rug), NOT an autonomy-A9 finding. A9 fires only when the upgrade specifically swaps out or adds a contract that THIS protocol calls or trusts (e.g., changing the oracle address from Chainlink to a malicious feed, registering a new SY adapter that points to a third-party vault, redirecting a bridge endpoint). If the only finding is "admin can change implementation," do not log it under A9 and do not let it drive the autonomy grade — note it under control instead. The autonomy-relevant version of the same upgrade key is "admin can swap [specific external address X] without timelock"; that requires identifying the specific external dependency that becomes mutable. STEEL-MAN (per Hard Rule 13): write one-sentence strongest arguments for red, orange, and green using the A1–A9 findings. IMPACTED TVS ESTIMATE: the headline MUST include a rough impacted-TVS figure — the fraction of protocol TVS that could be lost or frozen if the worst-unmitigated dependency you identified failed. Use "~X%" if exact numbers are unavailable, "<1%" for de minimis, "unclear" only if A1–A9 left the question genuinely open (in which case grade=unknown is usually correct). Do NOT substitute qualitative phrases like "significant" — give a number or bracket. GRADE ANCHORS (mapped to DefiScan v1 stages): - green = Stage 2 equivalent. Failure of any external dependency cannot cause loss of user principal or unclaimed yield. Either there are no material external dependencies, or every critical one has a documented fallback (A6) that keeps users whole. Governance cannot silently introduce new dependencies without an exit window (A9). Impacted TVS under any single-dependency failure: effectively 0. - orange = Stage 1 equivalent. Failure of some external dependency can cause loss of unclaimed yield, or can materially change expected performance (pause withdrawals, freeze positions, degrade price quality), but cannot cause loss of principal. Committee-based oracles with sanity checks, canonical-only bridges, fallback paths that exist but are incomplete, or governance-mutable dependencies protected by a ≥7-day timelock. Impacted TVS is bounded and recoverable. - red = Stage 0 equivalent. Failure of an external dependency CAN cause theft or loss of principal. Examples: single-provider oracle with no sanity check or fallback, material TVL on a non-canonical bridge with a guardian multisig, governance can hot-swap oracles or add staking modules with no timelock or exit window, unmitigated keeper-liveness dependency where positions become insolvent if bots stop. Impacted TVS is material. - unknown = checklist incomplete after inspecting source + verified contracts. Prefer unknown over guessing when A1/A6 could not be reconstructed. RESERVE unknown for cases where the CORE ARCHITECTURE itself is unverifiable — not for cases where you merely cannot enumerate every per-market dependency in a multi-market protocol. If the core router/factory/oracle architecture is verifiable on-chain and you can determine whether the core requires external dependencies, grade the architecture even when an exhaustive per-market external-dependency census is infeasible. Acknowledge the per-market gap in unknowns[] but still issue a grade. Refusing to grade a multi-market protocol because you cannot list every SY/vault/market is over-use of unknown; grade the architecture and say so. PROMPT-META CHECK (per Hard Rule 17): before finalizing, verify the verdict cites concrete contract addresses, docs, or code — not the rubric itself. If your verdict says "the protocol belongs to a category the rubric marks red", rewrite it with the A1–A9 finding that actually justifies the grade, or drop to grade=unknown. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "autonomy", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Open Access
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v3 - protocol.name: Uniswap V3 - protocol.chains: Ethereum, Base, Arbitrum, Binance, Polygon, X Layer, Optimism, Plasma, xDai, Celo, Avalanche, RSK, Monad, Nibiru, 0G, World Chain, XDC, Unichain, zkSync Era, Boba, Filecoin, Etherlink, Mantle, Goat, BOB, Lens, Telos, Sonic, Redbelly, Hemi, Scroll, Linea, Sei, Blast, Taiko, Lisk, Polygon zkEVM, Moonbeam, Corn, Manta, LightLink, Tempo, Saga - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2", "role": "ProxyAdmin for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xEe6A57eC80ea46401049E92587E52f5Ec1c24785", "role": "TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A", "role": "Owner of UniswapV3Factory" }, { "chain": "Ethereum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Ethereum", "address": "0xE592427A0AEce92De3Edee1F18E0157C05861564", "role": "router" }, { "chain": "Ethereum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "router" }, { "chain": "Ethereum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" }, { "chain": "Ethereum", "address": "0x1F98415757620B543A52E61c46B32eB19261F984", "role": "other" }, { "chain": "Ethereum", "address": "0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696", "role": "other" }, { "chain": "Ethereum", "address": "0xbfd8137f7d1516D3ea5cA83523914859ec47F573", "role": "other" }, { "chain": "Ethereum", "address": "0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6", "role": "other" }, { "chain": "Ethereum", "address": "0x42B24A95702b9986e82d421cC3568932790A48Ec", "role": "other" }, { "chain": "Ethereum", "address": "0x91ae842A5Ffd8d12023116943e72A606179294f3", "role": "other" }, { "chain": "Ethereum", "address": "0xA5644E29708357803b5A882D272c41cC0dF92B34", "role": "other" }, { "chain": "Ethereum", "address": "0x61fFE014bA17989E743c5F6cB21bF9697530B21e", "role": "other" }, { "chain": "Ethereum", "address": "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45", "role": "router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "other" }, { "chain": "Base", "address": "0x33128a8fC17869897dcE68Ed026d694621f6FDfD", "role": "factory" }, { "chain": "Base", "address": "0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1", "role": "pool" }, { "chain": "Base", "address": "0x6fF5693b99212Da76ad316178A184AB56D299b43", "role": "router" }, { "chain": "Base", "address": "0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1", "role": "other" }, { "chain": "Arbitrum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Arbitrum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "router" }, { "chain": "Arbitrum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2 (ProxyAdmin for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xEe6A57eC80ea46401049E92587E52f5Ec1c24785 (TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A (Owner of UniswapV3Factory) - https://defipunkd.com/address/1/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/1/0xE592427A0AEce92De3Edee1F18E0157C05861564 (router) - https://defipunkd.com/address/1/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (router) - https://defipunkd.com/address/1/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) - https://defipunkd.com/address/1/0x1F98415757620B543A52E61c46B32eB19261F984 (other) - https://defipunkd.com/address/1/0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696 (other) - https://defipunkd.com/address/1/0xbfd8137f7d1516D3ea5cA83523914859ec47F573 (other) - https://defipunkd.com/address/1/0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6 (other) - https://defipunkd.com/address/1/0x42B24A95702b9986e82d421cC3568932790A48Ec (other) - https://defipunkd.com/address/1/0x91ae842A5Ffd8d12023116943e72A606179294f3 (other) - https://defipunkd.com/address/1/0xA5644E29708357803b5A882D272c41cC0dF92B34 (other) - https://defipunkd.com/address/1/0x61fFE014bA17989E743c5F6cB21bF9697530B21e (other) - https://defipunkd.com/address/1/0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 (router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (other) - https://defipunkd.com/address/8453/0x33128a8fC17869897dcE68Ed026d694621f6FDfD (factory) - https://defipunkd.com/address/8453/0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1 (pool) - https://defipunkd.com/address/8453/0x6fF5693b99212Da76ad316178A184AB56D299b43 (router) - https://defipunkd.com/address/8453/0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1 (other) - https://defipunkd.com/address/42161/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/42161/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (router) - https://defipunkd.com/address/42161/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: OPEN-ACCESS Evaluate who is allowed to use the protocol and whether any of that permission is granted off-chain. Scope: this slice is about ADMISSION — who can enter, exit, or transact. Operator LIVENESS (what breaks if keepers/oracles go offline) is assessed in the dependencies slice and is out of scope for the grade here. You may note operator dependencies as context, but do not let "the protocol halts if operator X disappears" drive the access grade on its own; that belongs in dependencies. Source verification / contract verification on block explorers is assessed in the verifiability slice and is out of scope here — do NOT let "contract is unverified" drive the access grade. Framing: the smart contracts are the access layer; frontends are UX. A permissionless contract is reachable by any client (SDK, third-party UI, aggregator, wallet integration). Frontend ToS, IP geo-blocking, and wallet screening are publisher policies on one specific client — they are reported as context but do NOT determine the grade. The grade hinges on (1) what the contract itself permits, and (2) whether the protocol is practically reachable without the official publisher's cooperation. Meta-check before finalizing: if your verdict cites phrases from this prompt as evidence ("the protocol meets the 'credible alternatives' condition", "this fits the 'documented fallback' rule"), redo the verdict. The prompt describes the rubric; evidence must come from the protocol. A verdict should cite what the protocol does, not what the rubric says. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. Whitelist / allowlist modifiers in user-facing entry points. Grep for "onlyWhitelisted", "onlyRole", "allowlist", "isAccredited", "isKYCed". Note which functions are gated and who can add/remove from the list. - A2. Off-chain operators in the admission path: keepers, sequencers, privileged relayers, oracle posters whose approval is required to admit a user action (not just to keep the protocol live). For each, identify whether the role is held by a single operator, a permissioned committee, or is permissionless. Enumerate per user-facing function class (deposit vs withdraw-request vs claim-finalized vs transfer) which ones require operator approval to be admitted, and which ones admit users unconditionally. A function whose placement is unconditional but whose downstream settlement depends on an operator is an admission-permissionless function — flag the liveness dependency as context and defer its grading weight to the dependencies slice. - A3. Frontend restrictions on the official interface — record as context, not as a grade lever. Distinguish: - A3-passive: boilerplate ToS clauses (sanctions attestation, restricted-territory self-certification, VPN-circumvention prohibition, "comply with applicable law" eligibility, age of majority). - A3-active: runtime enforcement — IP-based geo-blocking, wallet-address screening against a sanctions oracle (Chainalysis, TRM, Elliptic), KYC wall, rendering-blocking jurisdiction banner. Record findings under the correct tier. Quote ToS text or banner text in evidence[].shows. These findings populate the headline and rationale but do NOT move the grade by themselves; the grade is set by A1, A2, and the A3b path check below. - A3b. Independent access paths (the operative grade input). Enumerate paths that do not require the official publisher's cooperation: - Published SDK / library / CLI for direct contract interaction. - Third-party frontends operated by separate legal entities. - Wallet-integrated access (MetaMask Swaps, Safe apps, etc.). - DEX / lending / yield aggregators that route through the contracts. Record at least one concrete link per path that exists. The protocol does NOT have to self-document these — the test is existence, not UX cost. An A3b-i redistribution of the official UI bound by the same ToS does NOT count as an independent path. - A4. Sanctions / compliance tooling at the contract level: does the protocol check addresses against OFAC lists or similar on-chain blocklists in the contract itself? (Frontend-only screening belongs in A3.) - A5. Differentiate read access vs write access: many protocols are read-permissionless (anyone can view state) but write-gated (only certain addresses can deposit/borrow). Record both. - A6. ToS / Legal links: locate them on the website and produce a VERBATIM quote of any jurisdictional, sanctions, or eligibility clause in evidence[].shows. If you cannot extract the clause text verbatim (SPA render failure, paywall, dead link, etc.), do NOT paraphrase or infer from general knowledge — record the ToS URL in unknowns[] with the reason extraction failed. Assertions about ToS content without a verbatim quote will be downweighted by reviewers. Then write the steel-man section per Hard Rule 11. Grade rules (admission-focused; liveness concerns belong in dependencies; source verification belongs in verifiability): - green = no contract-level whitelist/KYC on user entry/exit; no operator approval required to admit a user action; AND at least one independent A3b path exists (published SDK, third-party frontend, wallet integration, or aggregator routing). Frontend ToS posture and A3-active enforcement on the official UI do NOT block green when contracts are permissionless and an independent path exists — they are reported as context. - orange = contracts admit users unconditionally, BUT the protocol is operationally captured by the official publisher: no published SDK, no third-party frontend, no wallet integration, no aggregator routing. The contract is theoretically open but practically reachable only through the official UI. Also applies when admission requires approval from a permissioned committee that is governance-managed with a documented replacement procedure. - red = contract-level whitelist / KYC on user entry/exit, OR admission of a core user action requires approval from a single privileged operator or a small committee with no documented replacement procedure, OR enforces an on-chain blocklist updatable by a single party. - unknown = checklist incomplete after checking the sources above. Default-grade guidance: when contracts are fully permissionless AND any A3b independent path exists, the default grade is green regardless of frontend ToS or A3-active enforcement on the official UI. Frontend geo-blocking, sanctions-oracle wallet screening, and ToS sanctions clauses are publisher policies on one client and are reported in findings/headline as context, not as grade levers. To grade orange on operational-capture grounds, the auditor must affirmatively show that ALL independent paths are absent or also gated. Guideline on committees: where admission depends on a multi-operator committee, the relevant axes are (a) set size, (b) whether replacement/rotation is governed on-chain, (c) whether the replacement procedure is publicly documented. A large set with on-chain governance replacement should not be graded as a single-party operator even if rotation is not instantaneous. A small set with informal replacement should be treated as a single-party operator. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "open-access", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Audit all 5 dimensions · one prompt Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v3 - protocol.name: Uniswap V3 - protocol.chains: Ethereum, Base, Arbitrum, Binance, Polygon, X Layer, Optimism, Plasma, xDai, Celo, Avalanche, RSK, Monad, Nibiru, 0G, World Chain, XDC, Unichain, zkSync Era, Boba, Filecoin, Etherlink, Mantle, Goat, BOB, Lens, Telos, Sonic, Redbelly, Hemi, Scroll, Linea, Sei, Blast, Taiko, Lisk, Polygon zkEVM, Moonbeam, Corn, Manta, LightLink, Tempo, Saga - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2", "role": "ProxyAdmin for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xEe6A57eC80ea46401049E92587E52f5Ec1c24785", "role": "TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A", "role": "Owner of UniswapV3Factory" }, { "chain": "Ethereum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Ethereum", "address": "0xE592427A0AEce92De3Edee1F18E0157C05861564", "role": "router" }, { "chain": "Ethereum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "router" }, { "chain": "Ethereum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" }, { "chain": "Ethereum", "address": "0x1F98415757620B543A52E61c46B32eB19261F984", "role": "other" }, { "chain": "Ethereum", "address": "0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696", "role": "other" }, { "chain": "Ethereum", "address": "0xbfd8137f7d1516D3ea5cA83523914859ec47F573", "role": "other" }, { "chain": "Ethereum", "address": "0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6", "role": "other" }, { "chain": "Ethereum", "address": "0x42B24A95702b9986e82d421cC3568932790A48Ec", "role": "other" }, { "chain": "Ethereum", "address": "0x91ae842A5Ffd8d12023116943e72A606179294f3", "role": "other" }, { "chain": "Ethereum", "address": "0xA5644E29708357803b5A882D272c41cC0dF92B34", "role": "other" }, { "chain": "Ethereum", "address": "0x61fFE014bA17989E743c5F6cB21bF9697530B21e", "role": "other" }, { "chain": "Ethereum", "address": "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45", "role": "router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "other" }, { "chain": "Base", "address": "0x33128a8fC17869897dcE68Ed026d694621f6FDfD", "role": "factory" }, { "chain": "Base", "address": "0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1", "role": "pool" }, { "chain": "Base", "address": "0x6fF5693b99212Da76ad316178A184AB56D299b43", "role": "router" }, { "chain": "Base", "address": "0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1", "role": "other" }, { "chain": "Arbitrum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Arbitrum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "router" }, { "chain": "Arbitrum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2 (ProxyAdmin for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xEe6A57eC80ea46401049E92587E52f5Ec1c24785 (TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A (Owner of UniswapV3Factory) - https://defipunkd.com/address/1/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/1/0xE592427A0AEce92De3Edee1F18E0157C05861564 (router) - https://defipunkd.com/address/1/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (router) - https://defipunkd.com/address/1/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) - https://defipunkd.com/address/1/0x1F98415757620B543A52E61c46B32eB19261F984 (other) - https://defipunkd.com/address/1/0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696 (other) - https://defipunkd.com/address/1/0xbfd8137f7d1516D3ea5cA83523914859ec47F573 (other) - https://defipunkd.com/address/1/0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6 (other) - https://defipunkd.com/address/1/0x42B24A95702b9986e82d421cC3568932790A48Ec (other) - https://defipunkd.com/address/1/0x91ae842A5Ffd8d12023116943e72A606179294f3 (other) - https://defipunkd.com/address/1/0xA5644E29708357803b5A882D272c41cC0dF92B34 (other) - https://defipunkd.com/address/1/0x61fFE014bA17989E743c5F6cB21bF9697530B21e (other) - https://defipunkd.com/address/1/0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 (router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (other) - https://defipunkd.com/address/8453/0x33128a8fC17869897dcE68Ed026d694621f6FDfD (factory) - https://defipunkd.com/address/8453/0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1 (pool) - https://defipunkd.com/address/8453/0x6fF5693b99212Da76ad316178A184AB56D299b43 (router) - https://defipunkd.com/address/8453/0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1 (other) - https://defipunkd.com/address/42161/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/42161/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (router) - https://defipunkd.com/address/42161/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: CONTROL Evaluate who can change the protocol's rules, how fast, and how broadly. (Step 0 capability probe and the off-chain-only fallback live in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]) - **C1.** For each address you assess: who is the contract owner / admin / pendingAdmin / governor — read these via the block explorer's "Read Contract" tab OR `https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=owner` (BARE method names: `&method=owner`, `&method=admin`, `&method=pendingOwner`, `&method=governor`). For Safes use `/api/safe/owners?chainId=<id>&address=0x...`. When a protocol has multiple major versions deployed (v2/v3/v4), perform C1 reads on the NEWEST deployment separately — newer deployments often have weaker control surfaces than the legacy core. - **C2.** Upgrade mechanism: transparent proxy / UUPS / Beacon / Diamond / immutable. Identify the proxy admin address. Check upgradeability of GOVERNANCE contracts too — a Governor / Aragon Voting / OZ Governor is often itself a proxy whose admin is the Timelock. Asymmetry: when fund-holding cores are immutable AND governance has no admin path that reaches them, an upgradable Governor/Timelock is T3-only and must NOT drag the verdict below green on that basis alone (see grade rules and the "immutable cores" caveat). Only call upgradability "mixed" if you can name a concrete function on the upgradable surface that reaches T1 or T2 on user funds. - **C3.** EXECUTION PATH (enumerate every stage, in order, with delays in seconds). The operative path is usually a chain (voting → scheduler → timelock → executor; or governor → queue → execute; or Aragon Voting → DualGovernance → EmergencyProtectedTimelock → AdminExecutor). For each stage, record (a) the contract address, (b) the delay constant name + value in seconds, (c) the URL you read it from (block-explorer Read Contract OR `/api/contract/read?...&method=MIN_DELAY&block=<n>`). Do NOT stop at the first timelock-shaped contract — if its admin is itself called by another contract, keep walking. The grading delay is the SUM OF DELAYS ON THE UNCONTESTED FAST PATH (shortest time a proposal with no opposition can go from submission to executable). Dynamic / contested extensions (veto signaling, rage quit, escrow delay) are modifiers, not the basis — note them separately. - **C4.** Enumerate EVERY multisig with reachable control — main proxy admin, emergency activation, emergency execution, reseal / pause, gate-seal committees, tiebreaker, per-module admins. For each Safe, fetch threshold + owners + version via `/api/safe/owners?chainId=<id>&address=0x...` (response includes raw eth_call data, so the URL is citable evidence). Enumerate ops/council/incentives multisigs even when off the upgrade path — record their scope so a reader can see they are NOT on the upgrade path. For each: (a) address, (b) threshold / total signers, (c) signer identities classified as insider (team, paid auditors under ongoing engagement, mandated service providers) vs non-insider (independent community members, unaffiliated researchers), (d) the specific power held (upgrade, pause, parameter, etc.). - **C5.** On-chain governance: Governor / GovernorBravo / OZ Governor / Aragon Voting with token-weighted voting? Record proposal threshold, voting period, quorum, and the timelock delay between queue and execute. Every numeric constant must come from a Read Contract call you can link to, or be in unknowns[] with the C-code. If votingDelay / votingPeriod are denominated in BLOCKS, convert to seconds at the chain's CURRENT block time (Ethereum mainnet ≈ 12s post-Merge, not the 15s in older Compound/Bravo deployments) — cite both block count and converted seconds. - **C6.** EMERGENCY POWERS: separate emergency-pause / guardian role with a different time cap or different actor than the main upgrade authority? Record it explicitly. - **C7.** POWER TIER (blast radius). For each privileged path in C3–C6, classify the WORST thing that path can do, choosing the highest applicable tier. Cite the specific function name and any on-chain bound — tier claims without a named function are unsupported. - **T1 — FUND-CRITICAL**: replace implementation of contracts holding user funds; change AMM math / accounting / collateral logic; mint unbacked debt or shares; pause withdrawals; drain user-fund treasury; change oracle to attacker-controlled source; replace upgrade admin with EOA. - **T2 — ECONOMICALLY MATERIAL**: change fee parameters within bounded ranges; redirect protocol fees; add/remove markets / collateral types; bounded inflation or token mint within hard-capped schedule; spend protocol-owned (non-user) treasury. - **T3 — GOVERNANCE-INTERNAL**: change voting rules, quorum, voting period, proposal threshold; upgrade the Governor itself; rotate Timelock admin; mint governance tokens within a capped annual schedule. - **T4 — OPERATIONAL**: incentives distribution, grants, ENS / frontend canonicalization, deployment coordination, periphery router deprecation. The grade is set by the HIGHEST tier reachable on the uncontested fast path, not the median. State the tier and the binding function in the verdict. ### Read Contract discipline (applies to C3, C4, C5) Every numeric constant cited (timelock delays, voting periods, multisig thresholds, quorum percentages) must come from EITHER (a) a block-explorer Read Contract URL, OR (b) a DeFiPunkd `/api/contract/read` or `/api/safe/owners` URL (preferred with `&block=<n>` for content-addressed evidence), OR (c) an unknowns[] entry with the C-code. Docs / blog posts are corroboration only — they cannot be the sole citation for a value that is also readable on-chain. ### Off-chain-only substitute hierarchy (when grading_basis="off-chain-only" — see preamble Rule 16) When on-chain reads were genuinely unreachable this run, eligible off-chain substitutes in priority order: 1. Linked audit PDFs (admin roles, multisig members, timelock delays usually enumerated). 2. Governance forum posts that quote constants from a successful on-chain proposal (cite post URL + linked execution-tx URL). 3. Official protocol docs pages with named addresses and roles (must be on a domain owned by the protocol). 4. GitHub README / SECURITY.md / governance/*.md at a pinned commit SHA. Forbidden substitutes: third-party blog posts, X / Twitter threads, search-result snippets, model memory. Required degradation: any C-code citing a numeric constant from docs/forum/audit prose ONLY must also carry an `unknowns[]` entry with `-offchain` suffix noting "value not re-read on-chain in this run; corroboration only". ### Grade rules (apply the timelock bar conditional on the highest C7 tier reachable on the fast path) Security Council standard (used below): a multisig qualifies as "Security Council" only if ALL of: ≥7 signers, ≥51% threshold, ≥50% non-insider signers, every signer publicly announced. Failing any criterion = NOT a Security Council, regardless of signer reputation. - **green**: highest reachable tier is T3 or T4 regardless of timelock; OR T2 reachable with uncontested-fast-path delay ≥7 days; OR T1 reachable only via immutable contracts (T1 is unreachable); OR T1 reachable with uncontested-fast-path delay ≥7 days combined with a Security Council multisig; OR T1 reachable with uncontested-fast-path delay ≥7 days through active on-chain governance with broad token distribution. - **orange**: T2 reachable with uncontested-fast-path delay >0 but <7 days; OR T1 reachable with uncontested-fast-path delay >0 but <7 days; OR a multisig failing one or more Security Council criteria sits on a T1/T2 path; OR unclear upgrade authority on a T1/T2 path; OR governance with very short timelock or low quorum on a T1/T2 path. - **red**: T1 reachable with no timelock by a single EOA or 2-of-3 multisig; OR a T1 upgrade admin that is not a smart contract you can audit. - **unknown**: completed the checklist but still cannot determine the upgrade authority OR cannot classify the highest tier reachable on the main contracts. Tiering caveats: - "Bounded" must be enforced ON-CHAIN to count as T2. A function that sets fees with no upper-bound check is T1 — cite the bound check. - Recurring T2 economic extraction (e.g. fee redirect with no rate limit) approaches T1 over time. A single proposal that can permanently redirect all future revenue is T1. - T3 assumes the governance contract cannot itself authorize a T1/T2 action without going through the same timelock. If governance can self-upgrade to bypass the timelock, T3 collapses into T1. - Do not downgrade tier by hand-waving ("realistically governance would never…"). Tier on what the contract permits, not what feels likely. Notes: - **Dynamic / dual-governance timelocks** (Lido, Compound escrow veto): the rubric grades on the uncontested path because that is the path most upgrades take. A dynamic extension that fires only under stake-weighted opposition is a real protection — name it in the green steel-man, but it does not lift an orange fast path into green; state the tension in the verdict. - **Immutable cores with upgradable governance** (Uniswap-style): if fund-holding contracts are immutable and have no admin-reachable function moving / freezing / re-routing user funds, the highest reachable tier on the upgrade path is T3 — green regardless of timelock. Don't grade this orange just because the Governor is a proxy — that's a C2 fact, not a downgrade. Downgrade only applies if you can cite a concrete function on the upgradable surface that reaches T1 or T2 (privileged hook, upgradable factory controlling fund-routing, fee-switch redirecting protocol revenue without bound). - **The 7-day bar** reflects the exit-window standard — users need notice after a queued upgrade to withdraw if they disagree. The ability-to-exit slice grades the exit side; this slice grades the delay side; both must hold for users to actually benefit from the delay. --- ### Slice: ABILITY-TO-EXIT Evaluate whether users can withdraw their funds on their own terms, even under adversarial admin conditions. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - E1. Enumerate every user-facing exit function in the main contracts: withdraw, redeem, burn, requestWithdrawal, claim, exit, etc. List them by name. Do NOT treat the contract as a monolith. - E2. For EACH exit function in E1: identify its access modifiers and any pause guards (e.g. _checkResumed, whenNotPaused, onlyRole). Functions that gate REQUEST PLACEMENT often differ from functions that CLAIM FINALIZED FUNDS — check both separately. - E3. For each pause guard: identify the role holder (which address holds PAUSE_ROLE / GUARDIAN / etc.) and the maximum pause duration. Specifically check whether PAUSE_INFINITELY (or equivalent uncapped pause) is callable, and which actor can call it (single multisig vs governance vote). For role-holder reads use https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=hasRole&args=0x...,0x... or &method=getRoleAdmin&args=0x.... For "is currently paused" checks use &method=paused or &method=isPaused&args=<resume-code>. Use the BARE method name (no parens). Cite the URL with &block=<n> in evidence[]. - E4. EMERGENCY vs GOVERNANCE pause distinction: many protocols have a fast-acting emergency pause capped at N days and a slow governance pause that can be indefinite. Record both paths separately if present, with their time caps and actor classes. - E5. Queued redemption: documented maximum queue duration, daily withdrawal caps, whether the queue itself is pausable. - E6. Forced-exit / escape-hatch / permissionless emergency-exit mechanism for adversarial-admin scenarios. - E7. Frontend dependency: confirm exit functions are directly callable on-chain (e.g. via Etherscan write tab or a generic wallet) without the project's frontend. Then write the steel-man section per Hard Rule 11. Common red-vs-orange tension on this slice: indefinite pause exists (suggests red) BUT the realistic emergency path is time-capped AND claims of already-finalized exits are not pause-gated (suggests orange). Resolve this by stating who can do what for how long, not by stopping at the worst-case sentence. Grade rules: - green = permissionless exit; pause is either absent, narrowly scoped to clearly-described emergencies with auto-expiry, or capped at ≤7 days; no frontend dependency for exit; claims of already-finalized exits are not pause-gated under any path. - orange = pausable with broad scope OR indefinite pause is reachable only through governance vote (not unilateral admin action), OR queued redemption with documented max > 7 days, OR claims-of-finalized are exempt but new-request placement can be paused indefinitely by governance. - red = exit requires admin signature, OR ANY actor (including governance) can pause CLAIMS of finalized exits indefinitely, OR there is no on-chain exit function at all (purely custodial), OR pause is held by a single EOA / 2-of-3 multisig with no time cap. - unknown = checklist incomplete after checking the sources above. --- ### Slice: AUTONOMY Evaluate this protocol's autonomy: can a failure of anything outside its own contracts cause theft or loss of user principal, loss of unclaimed yield, or materially change the protocol's expected performance? "Autonomy" is not "has zero external touchpoints" — it is "external failures are either survivable or recoverable without user loss". This slice adapts DefiScan v1's Autonomy dimension; dependencies are one of several criteria, not the whole frame. GUARDRAILS (read before grading): - Category alone (Liquid Staking, Bridge, RWA Lending, Restaking, …) does NOT force a grade. A category is a hint about where to look; the grade must come from the concrete A1–A9 findings below. - Base-chain consensus (Ethereum PoS, the chain's validator set, the canonical Deposit Contract at 0x00000000219ab540356cBB839Cbe05303d7705Fa) is the SUBSTRATE, not a dependency, for any protocol deployed on that chain. Do not list "depends on Ethereum" as a finding. - Oracles or other integrations used by DOWNSTREAM protocols that happen to read this protocol's token (e.g. Chainlink stETH/USD consumed by Aave) are NOT this protocol's dependencies. Count only what THIS protocol's contracts call or trust on-chain. If a feed or contract appears in the protocol's docs only as reference material for third-party integrators, EXCLUDE IT ENTIRELY — do not log it as a finding even with a "peripheral" or "referenced only" caveat. - "Upgradeable admin can change things" belongs to the CONTROL slice; only count it here when the upgrade surface lets governance silently swap an external dependency (see A9). - Underlying-asset risk in opt-in, isolated markets is NOT autonomy-red on its own. When a protocol wraps third-party yield-bearing assets (LSTs, LRTs, ERC-4626 vaults, lending receipts, restaked tokens) into per-market silos that users explicitly choose, a failure of one underlying does NOT propagate to other markets and is risk the user opted into per-market. Record it under A4 with depth and propagation scope, but do not let it alone drive a red verdict — red requires an external dependency that cross-cuts the protocol or that the user did not opt into at deposit time. A failure mode that is "if the LRT you deposited is hacked, your principal in that LRT-backed market is impaired" is the underlying's autonomy story, not this protocol's; grade it on whether THIS protocol introduces additional dependencies on top. - Sub-module enumeration is mandatory before grading. If the protocol ships distinct product lines or modules (e.g., a v2 core AMM plus a newer perps/funding-rate module, a lending pool plus a separate vault layer, an L1 core plus a cross-chain extension), enumerate each in findings and grade against the WORST module weighted by its share of TVS or its blast radius. A green core does not rescue an orange/red sub-module; conversely, a small red sub-module with capped TVS may bound the overall grade to orange. Name each module by its on-chain factory or router address. If you do not know whether a module exists, that is an unknowns[] entry, not silence. EXPLICIT TVS WEIGHTING: in the verdict, state each module's approximate share of total protocol TVS (use "~X%" if exact figures unavailable; check DeFiLlama or block-explorer balances on the module's main contract) and how that share informs the weighted grade. Format: "Module A holds ~X% of TVS (grade: <g>); Module B holds ~Y% (grade: <g>); weighted overall = <grade> because <reason>." If a red sub-module holds <5% of total TVS and is capped, the overall grade may be orange; if it holds >25%, the overall grade is red. Do not let qualitative reasoning substitute for the percentages — write the numbers. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. External contract calls. Enumerate every external contract the core contracts call or read from (oracles, price feeds, AMM pools, lending pools, staking/deposit contracts, yield wrappers). For each, identify the address, the provider, and what user-facing function of this protocol would break or mis-price if that external contract paused, mis-reported, or behaved adversarially. Grep for "oracle", "aggregator", "getPrice", "latestAnswer", "chainlink", "pyth", "redstone" as a starting point. To verify an oracle is live and what it currently reports, hit https://defipunkd.com/api/contract/read?chainId=<id>&address=<oracle>&method=latestAnswer (or &method=latestRoundData, &method=getPrice, &method=description; use the BARE method name without parens) and cite the URL — the response includes blockNumber/blockHash and rawReturnData, which is stronger evidence than a docs page about which feed "should" be used. - A2. Off-chain actor committees reporting INTO the protocol. Oracle committees, guardian multisigs, DAO-selected validator sets acting as protocol reporters, exit-bus signers, fraud-proof challengers. For each, record committee size, quorum, who picks the members, and what mis-reporting could do (mint, burn, finalize withdrawal, freeze). Distinguish this from governance admins (control slice). NOTE ON STAKING PROTOCOLS: validator slashing and node-operator misbehavior are properties of the base-chain substrate, NOT external dependencies, when the operator set is diversified enough that a coordinated failure caps at <5% principal loss. Count validator/operator risk under A2 ONLY if the operator set is small, non-diversified, or lacks bonding / slashing-insurance / diversification mitigations. A curated set of 30+ independent operators with documented diversification falls under the mitigated path; a 3-operator LST does not. Do not cite the protocol's own risk disclosure as evidence that operator failure = principal loss unless you also check the diversification and bond mitigations. - A3. Bridge / cross-chain messaging dependencies. Only count bridges that carry material TVL or are required for a core user flow. For each, name the bridge operator (canonical L1↔L2, LayerZero, Wormhole, Axelar, custom multisig), the trust model (canonical, optimistic, light-client, guardian set), and what fraction of TVL or users ride on it. "wstETH exists on 15 chains" is not a finding unless material TVL sits there. Before listing any non-primary chain deployment as a dependency, verify it is still operational as of analysis_date — retired or sunset deployments (e.g., Lido-on-Terra, Lido-on-Solana) belong in unknowns[] or should be omitted, never cited as a current dependency. - A4. Nested collateral / restaking chains. For restaking / LRT / receipt-of-receipt designs: record the depth of the collateral chain, every actor with slashing or freezing power at each level, and whether a failure N levels deep propagates to user principal here. - A5. Fork lineage (silent check). If DeFiLlama's forkedFrom is non-empty, record it as one finding and move on. If empty, do NOT add a placeholder finding; it adds noise. - A6. Fallback mechanisms and circuit breakers. What catches an external failure? Sanity-check contracts on oracle reports, rebase bounds, pause paths triggered by bad prices, second-opinion oracles, max-per-block throughput caps, withdrawal queues that absorb bad reports. Record which A1–A4 risks are mitigated by which fallback, and which are unmitigated. For EACH fallback you cite, state its activation status explicitly: (i) LIVE and enforcing on-chain today, (ii) DEPLOYED but not yet wired / activated (e.g., interface exists but the address is zero or the role is unassigned), or (iii) DOCUMENTED / PROPOSED only (forum post, LIP draft, audit pending). Only (i) counts as mitigation for the grade. A fallback in state (ii) or (iii) should be noted but must not reduce the risk in your steel-man or verdict. If you cannot determine activation status, add an unknowns[] entry rather than assume it is live. - A7. Sequencer / L1-liveness dependency BEYOND the base-chain substrate. SCOPE — sequencer risk only counts here when the protocol IS its own L2/L3 appchain or app-rollup, where the sequencer is part of the protocol's own stack and a freeze is a protocol-level outage. A protocol permissionlessly deployed on a third-party L2 inherits that L2's sequencer as substrate, not an A7 dependency. Record the sequencer/DA trust model when A7 applies. - A8. Keeper / relayer / off-chain bot liveness. Protocols that need permissionless-but-necessary off-chain actors (liquidation bots, auto-compounders, deposit relayers, intent solvers). Record whether the role is permissionless, what degrades if nobody runs it (yield paused, bad debt accumulates, positions go stale), and whether the failure mode is graceful or catastrophic. - A9. Governance-mutable dependency surface. Can an admin or DAO action silently INTRODUCE a NEW EXTERNAL dependency — swap the oracle address to a different provider, register a new staking module that calls an untrusted contract, add a new bridge, route SY through a new external vault — without an exit window for users? Check the upgrade / router / module-registry contracts. Answer: which EXTERNAL dependencies are governance-mutable, who holds that power, and whether there is a timelock or exit window. SCOPE LIMIT — read carefully: A9 is about the *external dependency surface*, not the upgrade surface in general. "The proxyAdmin / EOA can upgrade the router implementation to arbitrary bytecode" is a CONTROL-slice finding (admin can rug), NOT an autonomy-A9 finding. A9 fires only when the upgrade specifically swaps out or adds a contract that THIS protocol calls or trusts (e.g., changing the oracle address from Chainlink to a malicious feed, registering a new SY adapter that points to a third-party vault, redirecting a bridge endpoint). If the only finding is "admin can change implementation," do not log it under A9 and do not let it drive the autonomy grade — note it under control instead. The autonomy-relevant version of the same upgrade key is "admin can swap [specific external address X] without timelock"; that requires identifying the specific external dependency that becomes mutable. STEEL-MAN (per Hard Rule 13): write one-sentence strongest arguments for red, orange, and green using the A1–A9 findings. IMPACTED TVS ESTIMATE: the headline MUST include a rough impacted-TVS figure — the fraction of protocol TVS that could be lost or frozen if the worst-unmitigated dependency you identified failed. Use "~X%" if exact numbers are unavailable, "<1%" for de minimis, "unclear" only if A1–A9 left the question genuinely open (in which case grade=unknown is usually correct). Do NOT substitute qualitative phrases like "significant" — give a number or bracket. GRADE ANCHORS (mapped to DefiScan v1 stages): - green = Stage 2 equivalent. Failure of any external dependency cannot cause loss of user principal or unclaimed yield. Either there are no material external dependencies, or every critical one has a documented fallback (A6) that keeps users whole. Governance cannot silently introduce new dependencies without an exit window (A9). Impacted TVS under any single-dependency failure: effectively 0. - orange = Stage 1 equivalent. Failure of some external dependency can cause loss of unclaimed yield, or can materially change expected performance (pause withdrawals, freeze positions, degrade price quality), but cannot cause loss of principal. Committee-based oracles with sanity checks, canonical-only bridges, fallback paths that exist but are incomplete, or governance-mutable dependencies protected by a ≥7-day timelock. Impacted TVS is bounded and recoverable. - red = Stage 0 equivalent. Failure of an external dependency CAN cause theft or loss of principal. Examples: single-provider oracle with no sanity check or fallback, material TVL on a non-canonical bridge with a guardian multisig, governance can hot-swap oracles or add staking modules with no timelock or exit window, unmitigated keeper-liveness dependency where positions become insolvent if bots stop. Impacted TVS is material. - unknown = checklist incomplete after inspecting source + verified contracts. Prefer unknown over guessing when A1/A6 could not be reconstructed. RESERVE unknown for cases where the CORE ARCHITECTURE itself is unverifiable — not for cases where you merely cannot enumerate every per-market dependency in a multi-market protocol. If the core router/factory/oracle architecture is verifiable on-chain and you can determine whether the core requires external dependencies, grade the architecture even when an exhaustive per-market external-dependency census is infeasible. Acknowledge the per-market gap in unknowns[] but still issue a grade. Refusing to grade a multi-market protocol because you cannot list every SY/vault/market is over-use of unknown; grade the architecture and say so. PROMPT-META CHECK (per Hard Rule 17): before finalizing, verify the verdict cites concrete contract addresses, docs, or code — not the rubric itself. If your verdict says "the protocol belongs to a category the rubric marks red", rewrite it with the A1–A9 finding that actually justifies the grade, or drop to grade=unknown. --- ### Slice: OPEN-ACCESS Evaluate who is allowed to use the protocol and whether any of that permission is granted off-chain. Scope: this slice is about ADMISSION — who can enter, exit, or transact. Operator LIVENESS (what breaks if keepers/oracles go offline) is assessed in the dependencies slice and is out of scope for the grade here. You may note operator dependencies as context, but do not let "the protocol halts if operator X disappears" drive the access grade on its own; that belongs in dependencies. Source verification / contract verification on block explorers is assessed in the verifiability slice and is out of scope here — do NOT let "contract is unverified" drive the access grade. Framing: the smart contracts are the access layer; frontends are UX. A permissionless contract is reachable by any client (SDK, third-party UI, aggregator, wallet integration). Frontend ToS, IP geo-blocking, and wallet screening are publisher policies on one specific client — they are reported as context but do NOT determine the grade. The grade hinges on (1) what the contract itself permits, and (2) whether the protocol is practically reachable without the official publisher's cooperation. Meta-check before finalizing: if your verdict cites phrases from this prompt as evidence ("the protocol meets the 'credible alternatives' condition", "this fits the 'documented fallback' rule"), redo the verdict. The prompt describes the rubric; evidence must come from the protocol. A verdict should cite what the protocol does, not what the rubric says. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. Whitelist / allowlist modifiers in user-facing entry points. Grep for "onlyWhitelisted", "onlyRole", "allowlist", "isAccredited", "isKYCed". Note which functions are gated and who can add/remove from the list. - A2. Off-chain operators in the admission path: keepers, sequencers, privileged relayers, oracle posters whose approval is required to admit a user action (not just to keep the protocol live). For each, identify whether the role is held by a single operator, a permissioned committee, or is permissionless. Enumerate per user-facing function class (deposit vs withdraw-request vs claim-finalized vs transfer) which ones require operator approval to be admitted, and which ones admit users unconditionally. A function whose placement is unconditional but whose downstream settlement depends on an operator is an admission-permissionless function — flag the liveness dependency as context and defer its grading weight to the dependencies slice. - A3. Frontend restrictions on the official interface — record as context, not as a grade lever. Distinguish: - A3-passive: boilerplate ToS clauses (sanctions attestation, restricted-territory self-certification, VPN-circumvention prohibition, "comply with applicable law" eligibility, age of majority). - A3-active: runtime enforcement — IP-based geo-blocking, wallet-address screening against a sanctions oracle (Chainalysis, TRM, Elliptic), KYC wall, rendering-blocking jurisdiction banner. Record findings under the correct tier. Quote ToS text or banner text in evidence[].shows. These findings populate the headline and rationale but do NOT move the grade by themselves; the grade is set by A1, A2, and the A3b path check below. - A3b. Independent access paths (the operative grade input). Enumerate paths that do not require the official publisher's cooperation: - Published SDK / library / CLI for direct contract interaction. - Third-party frontends operated by separate legal entities. - Wallet-integrated access (MetaMask Swaps, Safe apps, etc.). - DEX / lending / yield aggregators that route through the contracts. Record at least one concrete link per path that exists. The protocol does NOT have to self-document these — the test is existence, not UX cost. An A3b-i redistribution of the official UI bound by the same ToS does NOT count as an independent path. - A4. Sanctions / compliance tooling at the contract level: does the protocol check addresses against OFAC lists or similar on-chain blocklists in the contract itself? (Frontend-only screening belongs in A3.) - A5. Differentiate read access vs write access: many protocols are read-permissionless (anyone can view state) but write-gated (only certain addresses can deposit/borrow). Record both. - A6. ToS / Legal links: locate them on the website and produce a VERBATIM quote of any jurisdictional, sanctions, or eligibility clause in evidence[].shows. If you cannot extract the clause text verbatim (SPA render failure, paywall, dead link, etc.), do NOT paraphrase or infer from general knowledge — record the ToS URL in unknowns[] with the reason extraction failed. Assertions about ToS content without a verbatim quote will be downweighted by reviewers. Then write the steel-man section per Hard Rule 11. Grade rules (admission-focused; liveness concerns belong in dependencies; source verification belongs in verifiability): - green = no contract-level whitelist/KYC on user entry/exit; no operator approval required to admit a user action; AND at least one independent A3b path exists (published SDK, third-party frontend, wallet integration, or aggregator routing). Frontend ToS posture and A3-active enforcement on the official UI do NOT block green when contracts are permissionless and an independent path exists — they are reported as context. - orange = contracts admit users unconditionally, BUT the protocol is operationally captured by the official publisher: no published SDK, no third-party frontend, no wallet integration, no aggregator routing. The contract is theoretically open but practically reachable only through the official UI. Also applies when admission requires approval from a permissioned committee that is governance-managed with a documented replacement procedure. - red = contract-level whitelist / KYC on user entry/exit, OR admission of a core user action requires approval from a single privileged operator or a small committee with no documented replacement procedure, OR enforces an on-chain blocklist updatable by a single party. - unknown = checklist incomplete after checking the sources above. Default-grade guidance: when contracts are fully permissionless AND any A3b independent path exists, the default grade is green regardless of frontend ToS or A3-active enforcement on the official UI. Frontend geo-blocking, sanctions-oracle wallet screening, and ToS sanctions clauses are publisher policies on one client and are reported in findings/headline as context, not as grade levers. To grade orange on operational-capture grounds, the auditor must affirmatively show that ALL independent paths are absent or also gated. Guideline on committees: where admission depends on a multi-operator committee, the relevant axes are (a) set size, (b) whether replacement/rotation is governed on-chain, (c) whether the replacement procedure is publicly documented. A large set with on-chain governance replacement should not be graded as a single-party operator even if rotation is not instantaneous. A small set with informal replacement should be treated as a single-party operator. --- ### Slice: VERIFIABILITY Evaluate whether an outsider can independently confirm what the deployed code does. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - V1. For each address you assess: is the bytecode verified on the chain's block explorer? Record the "Contract Source Code Verified" indicator. https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... returns this as a top-level "verified" boolean plus "abiSource" ("etherscan" / "sourcify") and an inline ABI — useful when the explorer page is rate-limited. If the contract is a proxy, verify BOTH the proxy contract AND the current implementation contract. The same /api/contract/abi response auto-resolves proxies and includes a "proxy.implementation" address when present, so one call covers V1 + V6 in one shot. An explorer "Similar Match" on a well-known proxy pattern (Aragon AppProxyUpgradeable, ERC1967Proxy, OssifiableProxy, OZ TransparentUpgradeableProxy) is expected for that pattern and does NOT count as a verification gap on its own — what matters is that the implementation is independently verified. - V2. Source-to-repo correspondence: for each verified contract, attempt to find a matching commit in the linked GitHub repos. Record evidence[].commit on a match. Independent compile/bytecode-match is NOT required for green — a recognized public repo whose structure and file contents correspond to the explorer-visible source is sufficient. If you did not pin a commit SHA or run a bytecode diff, record that plainly in unknowns[] and proceed; it is a scope limit, not a downgrade signal. - V3. Audit coverage: for each URL in protocol.audit_links, open it and record: auditor name, audit date, the specific contracts / commit in scope. Flag audits that predate the current deployment by >6 months without a follow-up review. - V4. Auditor recognition: the following firms are broadly recognized in Solidity: Trail of Bits, Zellic, Spearbit, OpenZeppelin, ConsenSys Diligence, Certora (formal verification), Quantstamp, Halborn, Peckshield, Sigma Prime, ChainSecurity, Ackee Blockchain, MixBytes, Statemind. Unknown firms are orange-at-best for any green-grade claim. Name the firm explicitly in evidence[]. - V5. Post-audit drift: compare the most recent in-scope audit(s) against the currently-deployed source, weighted by what each contract does and by what the changes actually contain. SCOPE — drift only downgrades the grade when ALL of the following hold: (i) the drifting contract is fund-custody / settlement / accounting-critical (NOT a peripheral router, lens, quoter, or pure-view contract that holds no balances); (ii) the changes are material — new functions, modified access control, modified accounting, modified fund flow — and not refactors / struct relocations / import reorgs / build or CI fixes / formatting; (iii) no later audit, fix-audit, or differential audit from a recognized firm covers the changed files (audits often pin a pre-fix commit while a follow-up reviews the delta — match by file scope, not by commit-hash equality). When you cite drift as a downgrade reason, name the specific behavior change (function added, role granted, accounting formula altered) — "N commits ahead" or "+X/-Y LOC" alone is not evidence of material drift. If you have not sampled the diff content (e.g. via the GitHub compare view or the top commits in the window), record drift as an unknowns[] entry rather than auto-downgrading; commit-count and LOC are starting signals, not findings. - V6. Implementation vs proxy: a verified proxy with an unverified implementation is effectively unverified. State whether the implementation is verified separately. EVIDENCE DISCIPLINE (read before writing findings[]): - Do not assert a specific deploy-commit SHA, bytecode equivalence, or "identical to audited commit" unless you actually fetched the artifact that shows it (e.g., a deployed-addresses JSON you opened, an explorer page you read). Inferred or plausible matches belong in unknowns[], never in findings[] or evidence[]. - Evidence[] entries must correspond to pages/files you actually retrieved this run. A URL you did not open is not evidence. Then write the steel-man section per Hard Rule 11. Grade rules: - green = deployed bytecode verified on the explorer (proxy AND implementation if proxied; "Similar Match" on a standard proxy pattern is fine per V1), a public source repo exists whose contents correspond to the explorer-visible source, AND ≥1 audit from a recognized firm covering the currently-deployed contracts (≤6 months of drift OR drift was re-audited). A missing local compile-match is not a downgrade — record it in unknowns[] and still grade green if the other conditions hold. - orange = verified but with visible drift from the public repo, OR audit scope is stale relative to deployment, OR only minor / unknown-firm audits exist, OR only some of the main contracts are verified, OR proxy verified but implementation only partially verified. - red = unverified bytecode (or verified proxy with unverified implementation), OR no audit in protocol.audit_links, OR no public repo. - unknown = reserved for when the protocol's verifiability posture genuinely cannot be assessed (e.g., explorer and repo both inaccessible for this protocol). Do NOT use unknown merely because you, the analyst, could not run a particular check such as a bytecode diff — that goes in unknowns[] while the grade is still assigned from the evidence you do have. --- ### JSON output contract Return exactly one JSON array inside a single ```json fenced block. The array MUST contain exactly five objects, one per risk slice, in this exact order: "control", "ability-to-exit", "autonomy", "open-access", "verifiability". Do not include the discovery slice. Each object has the same shape as a normal slice submission: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "<one of: control | ability-to-exit | autonomy | open-access | verifiability>", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - Produce one complete object for each of these slices only: control, ability-to-exit, autonomy, open-access, verifiability. - Reuse the same model, chat_url, snapshot_generated_at, prompt_version, analysis_date, and slug values across all five objects. - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches that object's slice checklist prefix verbatim (C1, E2, AU3, A3b, V4a, …); unknowns[] entries are checklist-coded ("C3: …"). - Wrap the array in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.
- Open source + 14 audits
Protocol publishes a GitHub repository and has at least one audit on record. This is a coarse Phase-0 signal only: auditor reputation, scope, and post-audit review coverage are not yet weighted.
Run your own prompt Submit run ↗### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v3 - protocol.name: Uniswap V3 - protocol.chains: Ethereum, Base, Arbitrum, Binance, Polygon, X Layer, Optimism, Plasma, xDai, Celo, Avalanche, RSK, Monad, Nibiru, 0G, World Chain, XDC, Unichain, zkSync Era, Boba, Filecoin, Etherlink, Mantle, Goat, BOB, Lens, Telos, Sonic, Redbelly, Hemi, Scroll, Linea, Sei, Blast, Taiko, Lisk, Polygon zkEVM, Moonbeam, Corn, Manta, LightLink, Tempo, Saga - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2", "role": "ProxyAdmin for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xEe6A57eC80ea46401049E92587E52f5Ec1c24785", "role": "TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A", "role": "Owner of UniswapV3Factory" }, { "chain": "Ethereum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Ethereum", "address": "0xE592427A0AEce92De3Edee1F18E0157C05861564", "role": "router" }, { "chain": "Ethereum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "router" }, { "chain": "Ethereum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" }, { "chain": "Ethereum", "address": "0x1F98415757620B543A52E61c46B32eB19261F984", "role": "other" }, { "chain": "Ethereum", "address": "0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696", "role": "other" }, { "chain": "Ethereum", "address": "0xbfd8137f7d1516D3ea5cA83523914859ec47F573", "role": "other" }, { "chain": "Ethereum", "address": "0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6", "role": "other" }, { "chain": "Ethereum", "address": "0x42B24A95702b9986e82d421cC3568932790A48Ec", "role": "other" }, { "chain": "Ethereum", "address": "0x91ae842A5Ffd8d12023116943e72A606179294f3", "role": "other" }, { "chain": "Ethereum", "address": "0xA5644E29708357803b5A882D272c41cC0dF92B34", "role": "other" }, { "chain": "Ethereum", "address": "0x61fFE014bA17989E743c5F6cB21bF9697530B21e", "role": "other" }, { "chain": "Ethereum", "address": "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45", "role": "router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "other" }, { "chain": "Base", "address": "0x33128a8fC17869897dcE68Ed026d694621f6FDfD", "role": "factory" }, { "chain": "Base", "address": "0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1", "role": "pool" }, { "chain": "Base", "address": "0x6fF5693b99212Da76ad316178A184AB56D299b43", "role": "router" }, { "chain": "Base", "address": "0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1", "role": "other" }, { "chain": "Arbitrum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Arbitrum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "router" }, { "chain": "Arbitrum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2 (ProxyAdmin for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xEe6A57eC80ea46401049E92587E52f5Ec1c24785 (TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A (Owner of UniswapV3Factory) - https://defipunkd.com/address/1/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/1/0xE592427A0AEce92De3Edee1F18E0157C05861564 (router) - https://defipunkd.com/address/1/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (router) - https://defipunkd.com/address/1/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) - https://defipunkd.com/address/1/0x1F98415757620B543A52E61c46B32eB19261F984 (other) - https://defipunkd.com/address/1/0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696 (other) - https://defipunkd.com/address/1/0xbfd8137f7d1516D3ea5cA83523914859ec47F573 (other) - https://defipunkd.com/address/1/0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6 (other) - https://defipunkd.com/address/1/0x42B24A95702b9986e82d421cC3568932790A48Ec (other) - https://defipunkd.com/address/1/0x91ae842A5Ffd8d12023116943e72A606179294f3 (other) - https://defipunkd.com/address/1/0xA5644E29708357803b5A882D272c41cC0dF92B34 (other) - https://defipunkd.com/address/1/0x61fFE014bA17989E743c5F6cB21bF9697530B21e (other) - https://defipunkd.com/address/1/0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 (router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (other) - https://defipunkd.com/address/8453/0x33128a8fC17869897dcE68Ed026d694621f6FDfD (factory) - https://defipunkd.com/address/8453/0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1 (pool) - https://defipunkd.com/address/8453/0x6fF5693b99212Da76ad316178A184AB56D299b43 (router) - https://defipunkd.com/address/8453/0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1 (other) - https://defipunkd.com/address/42161/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/42161/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (router) - https://defipunkd.com/address/42161/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: VERIFIABILITY Evaluate whether an outsider can independently confirm what the deployed code does. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - V1. For each address you assess: is the bytecode verified on the chain's block explorer? Record the "Contract Source Code Verified" indicator. https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... returns this as a top-level "verified" boolean plus "abiSource" ("etherscan" / "sourcify") and an inline ABI — useful when the explorer page is rate-limited. If the contract is a proxy, verify BOTH the proxy contract AND the current implementation contract. The same /api/contract/abi response auto-resolves proxies and includes a "proxy.implementation" address when present, so one call covers V1 + V6 in one shot. An explorer "Similar Match" on a well-known proxy pattern (Aragon AppProxyUpgradeable, ERC1967Proxy, OssifiableProxy, OZ TransparentUpgradeableProxy) is expected for that pattern and does NOT count as a verification gap on its own — what matters is that the implementation is independently verified. - V2. Source-to-repo correspondence: for each verified contract, attempt to find a matching commit in the linked GitHub repos. Record evidence[].commit on a match. Independent compile/bytecode-match is NOT required for green — a recognized public repo whose structure and file contents correspond to the explorer-visible source is sufficient. If you did not pin a commit SHA or run a bytecode diff, record that plainly in unknowns[] and proceed; it is a scope limit, not a downgrade signal. - V3. Audit coverage: for each URL in protocol.audit_links, open it and record: auditor name, audit date, the specific contracts / commit in scope. Flag audits that predate the current deployment by >6 months without a follow-up review. - V4. Auditor recognition: the following firms are broadly recognized in Solidity: Trail of Bits, Zellic, Spearbit, OpenZeppelin, ConsenSys Diligence, Certora (formal verification), Quantstamp, Halborn, Peckshield, Sigma Prime, ChainSecurity, Ackee Blockchain, MixBytes, Statemind. Unknown firms are orange-at-best for any green-grade claim. Name the firm explicitly in evidence[]. - V5. Post-audit drift: compare the most recent in-scope audit(s) against the currently-deployed source, weighted by what each contract does and by what the changes actually contain. SCOPE — drift only downgrades the grade when ALL of the following hold: (i) the drifting contract is fund-custody / settlement / accounting-critical (NOT a peripheral router, lens, quoter, or pure-view contract that holds no balances); (ii) the changes are material — new functions, modified access control, modified accounting, modified fund flow — and not refactors / struct relocations / import reorgs / build or CI fixes / formatting; (iii) no later audit, fix-audit, or differential audit from a recognized firm covers the changed files (audits often pin a pre-fix commit while a follow-up reviews the delta — match by file scope, not by commit-hash equality). When you cite drift as a downgrade reason, name the specific behavior change (function added, role granted, accounting formula altered) — "N commits ahead" or "+X/-Y LOC" alone is not evidence of material drift. If you have not sampled the diff content (e.g. via the GitHub compare view or the top commits in the window), record drift as an unknowns[] entry rather than auto-downgrading; commit-count and LOC are starting signals, not findings. - V6. Implementation vs proxy: a verified proxy with an unverified implementation is effectively unverified. State whether the implementation is verified separately. EVIDENCE DISCIPLINE (read before writing findings[]): - Do not assert a specific deploy-commit SHA, bytecode equivalence, or "identical to audited commit" unless you actually fetched the artifact that shows it (e.g., a deployed-addresses JSON you opened, an explorer page you read). Inferred or plausible matches belong in unknowns[], never in findings[] or evidence[]. - Evidence[] entries must correspond to pages/files you actually retrieved this run. A URL you did not open is not evidence. Then write the steel-man section per Hard Rule 11. Grade rules: - green = deployed bytecode verified on the explorer (proxy AND implementation if proxied; "Similar Match" on a standard proxy pattern is fine per V1), a public source repo exists whose contents correspond to the explorer-visible source, AND ≥1 audit from a recognized firm covering the currently-deployed contracts (≤6 months of drift OR drift was re-audited). A missing local compile-match is not a downgrade — record it in unknowns[] and still grade green if the other conditions hold. - orange = verified but with visible drift from the public repo, OR audit scope is stale relative to deployment, OR only minor / unknown-firm audits exist, OR only some of the main contracts are verified, OR proxy verified but implementation only partially verified. - red = unverified bytecode (or verified proxy with unverified implementation), OR no audit in protocol.audit_links, OR no public repo. - unknown = reserved for when the protocol's verifiability posture genuinely cannot be assessed (e.g., explorer and repo both inaccessible for this protocol). Do NOT use unknown merely because you, the analyst, could not run a particular check such as a bytecode diff — that goes in unknowns[] while the grade is still assigned from the evidence you do have. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "verifiability", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.
4 dimensions not yet assessed (Control, Ability to exit, Autonomy, Open Access)
- Not yet assessed
Who holds admin privileges, how contracts can be upgraded, and how quickly. No automated heuristic grades this at Phase 0; a real assessment arrives when onchain discovery reads roles, owners, and timelocks.
No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v3 - protocol.name: Uniswap V3 - protocol.chains: Ethereum, Base, Arbitrum, Binance, Polygon, X Layer, Optimism, Plasma, xDai, Celo, Avalanche, RSK, Monad, Nibiru, 0G, World Chain, XDC, Unichain, zkSync Era, Boba, Filecoin, Etherlink, Mantle, Goat, BOB, Lens, Telos, Sonic, Redbelly, Hemi, Scroll, Linea, Sei, Blast, Taiko, Lisk, Polygon zkEVM, Moonbeam, Corn, Manta, LightLink, Tempo, Saga - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2", "role": "ProxyAdmin for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xEe6A57eC80ea46401049E92587E52f5Ec1c24785", "role": "TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A", "role": "Owner of UniswapV3Factory" }, { "chain": "Ethereum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Ethereum", "address": "0xE592427A0AEce92De3Edee1F18E0157C05861564", "role": "router" }, { "chain": "Ethereum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "router" }, { "chain": "Ethereum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" }, { "chain": "Ethereum", "address": "0x1F98415757620B543A52E61c46B32eB19261F984", "role": "other" }, { "chain": "Ethereum", "address": "0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696", "role": "other" }, { "chain": "Ethereum", "address": "0xbfd8137f7d1516D3ea5cA83523914859ec47F573", "role": "other" }, { "chain": "Ethereum", "address": "0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6", "role": "other" }, { "chain": "Ethereum", "address": "0x42B24A95702b9986e82d421cC3568932790A48Ec", "role": "other" }, { "chain": "Ethereum", "address": "0x91ae842A5Ffd8d12023116943e72A606179294f3", "role": "other" }, { "chain": "Ethereum", "address": "0xA5644E29708357803b5A882D272c41cC0dF92B34", "role": "other" }, { "chain": "Ethereum", "address": "0x61fFE014bA17989E743c5F6cB21bF9697530B21e", "role": "other" }, { "chain": "Ethereum", "address": "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45", "role": "router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "other" }, { "chain": "Base", "address": "0x33128a8fC17869897dcE68Ed026d694621f6FDfD", "role": "factory" }, { "chain": "Base", "address": "0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1", "role": "pool" }, { "chain": "Base", "address": "0x6fF5693b99212Da76ad316178A184AB56D299b43", "role": "router" }, { "chain": "Base", "address": "0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1", "role": "other" }, { "chain": "Arbitrum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Arbitrum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "router" }, { "chain": "Arbitrum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2 (ProxyAdmin for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xEe6A57eC80ea46401049E92587E52f5Ec1c24785 (TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A (Owner of UniswapV3Factory) - https://defipunkd.com/address/1/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/1/0xE592427A0AEce92De3Edee1F18E0157C05861564 (router) - https://defipunkd.com/address/1/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (router) - https://defipunkd.com/address/1/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) - https://defipunkd.com/address/1/0x1F98415757620B543A52E61c46B32eB19261F984 (other) - https://defipunkd.com/address/1/0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696 (other) - https://defipunkd.com/address/1/0xbfd8137f7d1516D3ea5cA83523914859ec47F573 (other) - https://defipunkd.com/address/1/0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6 (other) - https://defipunkd.com/address/1/0x42B24A95702b9986e82d421cC3568932790A48Ec (other) - https://defipunkd.com/address/1/0x91ae842A5Ffd8d12023116943e72A606179294f3 (other) - https://defipunkd.com/address/1/0xA5644E29708357803b5A882D272c41cC0dF92B34 (other) - https://defipunkd.com/address/1/0x61fFE014bA17989E743c5F6cB21bF9697530B21e (other) - https://defipunkd.com/address/1/0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 (router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (other) - https://defipunkd.com/address/8453/0x33128a8fC17869897dcE68Ed026d694621f6FDfD (factory) - https://defipunkd.com/address/8453/0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1 (pool) - https://defipunkd.com/address/8453/0x6fF5693b99212Da76ad316178A184AB56D299b43 (router) - https://defipunkd.com/address/8453/0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1 (other) - https://defipunkd.com/address/42161/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/42161/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (router) - https://defipunkd.com/address/42161/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: CONTROL Evaluate who can change the protocol's rules, how fast, and how broadly. (Step 0 capability probe and the off-chain-only fallback live in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]) - **C1.** For each address you assess: who is the contract owner / admin / pendingAdmin / governor — read these via the block explorer's "Read Contract" tab OR `https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=owner` (BARE method names: `&method=owner`, `&method=admin`, `&method=pendingOwner`, `&method=governor`). For Safes use `/api/safe/owners?chainId=<id>&address=0x...`. When a protocol has multiple major versions deployed (v2/v3/v4), perform C1 reads on the NEWEST deployment separately — newer deployments often have weaker control surfaces than the legacy core. - **C2.** Upgrade mechanism: transparent proxy / UUPS / Beacon / Diamond / immutable. Identify the proxy admin address. Check upgradeability of GOVERNANCE contracts too — a Governor / Aragon Voting / OZ Governor is often itself a proxy whose admin is the Timelock. Asymmetry: when fund-holding cores are immutable AND governance has no admin path that reaches them, an upgradable Governor/Timelock is T3-only and must NOT drag the verdict below green on that basis alone (see grade rules and the "immutable cores" caveat). Only call upgradability "mixed" if you can name a concrete function on the upgradable surface that reaches T1 or T2 on user funds. - **C3.** EXECUTION PATH (enumerate every stage, in order, with delays in seconds). The operative path is usually a chain (voting → scheduler → timelock → executor; or governor → queue → execute; or Aragon Voting → DualGovernance → EmergencyProtectedTimelock → AdminExecutor). For each stage, record (a) the contract address, (b) the delay constant name + value in seconds, (c) the URL you read it from (block-explorer Read Contract OR `/api/contract/read?...&method=MIN_DELAY&block=<n>`). Do NOT stop at the first timelock-shaped contract — if its admin is itself called by another contract, keep walking. The grading delay is the SUM OF DELAYS ON THE UNCONTESTED FAST PATH (shortest time a proposal with no opposition can go from submission to executable). Dynamic / contested extensions (veto signaling, rage quit, escrow delay) are modifiers, not the basis — note them separately. - **C4.** Enumerate EVERY multisig with reachable control — main proxy admin, emergency activation, emergency execution, reseal / pause, gate-seal committees, tiebreaker, per-module admins. For each Safe, fetch threshold + owners + version via `/api/safe/owners?chainId=<id>&address=0x...` (response includes raw eth_call data, so the URL is citable evidence). Enumerate ops/council/incentives multisigs even when off the upgrade path — record their scope so a reader can see they are NOT on the upgrade path. For each: (a) address, (b) threshold / total signers, (c) signer identities classified as insider (team, paid auditors under ongoing engagement, mandated service providers) vs non-insider (independent community members, unaffiliated researchers), (d) the specific power held (upgrade, pause, parameter, etc.). - **C5.** On-chain governance: Governor / GovernorBravo / OZ Governor / Aragon Voting with token-weighted voting? Record proposal threshold, voting period, quorum, and the timelock delay between queue and execute. Every numeric constant must come from a Read Contract call you can link to, or be in unknowns[] with the C-code. If votingDelay / votingPeriod are denominated in BLOCKS, convert to seconds at the chain's CURRENT block time (Ethereum mainnet ≈ 12s post-Merge, not the 15s in older Compound/Bravo deployments) — cite both block count and converted seconds. - **C6.** EMERGENCY POWERS: separate emergency-pause / guardian role with a different time cap or different actor than the main upgrade authority? Record it explicitly. - **C7.** POWER TIER (blast radius). For each privileged path in C3–C6, classify the WORST thing that path can do, choosing the highest applicable tier. Cite the specific function name and any on-chain bound — tier claims without a named function are unsupported. - **T1 — FUND-CRITICAL**: replace implementation of contracts holding user funds; change AMM math / accounting / collateral logic; mint unbacked debt or shares; pause withdrawals; drain user-fund treasury; change oracle to attacker-controlled source; replace upgrade admin with EOA. - **T2 — ECONOMICALLY MATERIAL**: change fee parameters within bounded ranges; redirect protocol fees; add/remove markets / collateral types; bounded inflation or token mint within hard-capped schedule; spend protocol-owned (non-user) treasury. - **T3 — GOVERNANCE-INTERNAL**: change voting rules, quorum, voting period, proposal threshold; upgrade the Governor itself; rotate Timelock admin; mint governance tokens within a capped annual schedule. - **T4 — OPERATIONAL**: incentives distribution, grants, ENS / frontend canonicalization, deployment coordination, periphery router deprecation. The grade is set by the HIGHEST tier reachable on the uncontested fast path, not the median. State the tier and the binding function in the verdict. ### Read Contract discipline (applies to C3, C4, C5) Every numeric constant cited (timelock delays, voting periods, multisig thresholds, quorum percentages) must come from EITHER (a) a block-explorer Read Contract URL, OR (b) a DeFiPunkd `/api/contract/read` or `/api/safe/owners` URL (preferred with `&block=<n>` for content-addressed evidence), OR (c) an unknowns[] entry with the C-code. Docs / blog posts are corroboration only — they cannot be the sole citation for a value that is also readable on-chain. ### Off-chain-only substitute hierarchy (when grading_basis="off-chain-only" — see preamble Rule 16) When on-chain reads were genuinely unreachable this run, eligible off-chain substitutes in priority order: 1. Linked audit PDFs (admin roles, multisig members, timelock delays usually enumerated). 2. Governance forum posts that quote constants from a successful on-chain proposal (cite post URL + linked execution-tx URL). 3. Official protocol docs pages with named addresses and roles (must be on a domain owned by the protocol). 4. GitHub README / SECURITY.md / governance/*.md at a pinned commit SHA. Forbidden substitutes: third-party blog posts, X / Twitter threads, search-result snippets, model memory. Required degradation: any C-code citing a numeric constant from docs/forum/audit prose ONLY must also carry an `unknowns[]` entry with `-offchain` suffix noting "value not re-read on-chain in this run; corroboration only". ### Grade rules (apply the timelock bar conditional on the highest C7 tier reachable on the fast path) Security Council standard (used below): a multisig qualifies as "Security Council" only if ALL of: ≥7 signers, ≥51% threshold, ≥50% non-insider signers, every signer publicly announced. Failing any criterion = NOT a Security Council, regardless of signer reputation. - **green**: highest reachable tier is T3 or T4 regardless of timelock; OR T2 reachable with uncontested-fast-path delay ≥7 days; OR T1 reachable only via immutable contracts (T1 is unreachable); OR T1 reachable with uncontested-fast-path delay ≥7 days combined with a Security Council multisig; OR T1 reachable with uncontested-fast-path delay ≥7 days through active on-chain governance with broad token distribution. - **orange**: T2 reachable with uncontested-fast-path delay >0 but <7 days; OR T1 reachable with uncontested-fast-path delay >0 but <7 days; OR a multisig failing one or more Security Council criteria sits on a T1/T2 path; OR unclear upgrade authority on a T1/T2 path; OR governance with very short timelock or low quorum on a T1/T2 path. - **red**: T1 reachable with no timelock by a single EOA or 2-of-3 multisig; OR a T1 upgrade admin that is not a smart contract you can audit. - **unknown**: completed the checklist but still cannot determine the upgrade authority OR cannot classify the highest tier reachable on the main contracts. Tiering caveats: - "Bounded" must be enforced ON-CHAIN to count as T2. A function that sets fees with no upper-bound check is T1 — cite the bound check. - Recurring T2 economic extraction (e.g. fee redirect with no rate limit) approaches T1 over time. A single proposal that can permanently redirect all future revenue is T1. - T3 assumes the governance contract cannot itself authorize a T1/T2 action without going through the same timelock. If governance can self-upgrade to bypass the timelock, T3 collapses into T1. - Do not downgrade tier by hand-waving ("realistically governance would never…"). Tier on what the contract permits, not what feels likely. Notes: - **Dynamic / dual-governance timelocks** (Lido, Compound escrow veto): the rubric grades on the uncontested path because that is the path most upgrades take. A dynamic extension that fires only under stake-weighted opposition is a real protection — name it in the green steel-man, but it does not lift an orange fast path into green; state the tension in the verdict. - **Immutable cores with upgradable governance** (Uniswap-style): if fund-holding contracts are immutable and have no admin-reachable function moving / freezing / re-routing user funds, the highest reachable tier on the upgrade path is T3 — green regardless of timelock. Don't grade this orange just because the Governor is a proxy — that's a C2 fact, not a downgrade. Downgrade only applies if you can cite a concrete function on the upgradable surface that reaches T1 or T2 (privileged hook, upgradable factory controlling fund-routing, fee-switch redirecting protocol revenue without bound). - **The 7-day bar** reflects the exit-window standard — users need notice after a queued upgrade to withdraw if they disagree. The ability-to-exit slice grades the exit side; this slice grades the delay side; both must hold for users to actually benefit from the delay. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "control", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Not yet assessed
Whether users can exit on their own terms if the team disappears or acts adversarially. Requires per-protocol review; not available at Phase 0.
No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v3 - protocol.name: Uniswap V3 - protocol.chains: Ethereum, Base, Arbitrum, Binance, Polygon, X Layer, Optimism, Plasma, xDai, Celo, Avalanche, RSK, Monad, Nibiru, 0G, World Chain, XDC, Unichain, zkSync Era, Boba, Filecoin, Etherlink, Mantle, Goat, BOB, Lens, Telos, Sonic, Redbelly, Hemi, Scroll, Linea, Sei, Blast, Taiko, Lisk, Polygon zkEVM, Moonbeam, Corn, Manta, LightLink, Tempo, Saga - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2", "role": "ProxyAdmin for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xEe6A57eC80ea46401049E92587E52f5Ec1c24785", "role": "TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A", "role": "Owner of UniswapV3Factory" }, { "chain": "Ethereum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Ethereum", "address": "0xE592427A0AEce92De3Edee1F18E0157C05861564", "role": "router" }, { "chain": "Ethereum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "router" }, { "chain": "Ethereum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" }, { "chain": "Ethereum", "address": "0x1F98415757620B543A52E61c46B32eB19261F984", "role": "other" }, { "chain": "Ethereum", "address": "0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696", "role": "other" }, { "chain": "Ethereum", "address": "0xbfd8137f7d1516D3ea5cA83523914859ec47F573", "role": "other" }, { "chain": "Ethereum", "address": "0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6", "role": "other" }, { "chain": "Ethereum", "address": "0x42B24A95702b9986e82d421cC3568932790A48Ec", "role": "other" }, { "chain": "Ethereum", "address": "0x91ae842A5Ffd8d12023116943e72A606179294f3", "role": "other" }, { "chain": "Ethereum", "address": "0xA5644E29708357803b5A882D272c41cC0dF92B34", "role": "other" }, { "chain": "Ethereum", "address": "0x61fFE014bA17989E743c5F6cB21bF9697530B21e", "role": "other" }, { "chain": "Ethereum", "address": "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45", "role": "router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "other" }, { "chain": "Base", "address": "0x33128a8fC17869897dcE68Ed026d694621f6FDfD", "role": "factory" }, { "chain": "Base", "address": "0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1", "role": "pool" }, { "chain": "Base", "address": "0x6fF5693b99212Da76ad316178A184AB56D299b43", "role": "router" }, { "chain": "Base", "address": "0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1", "role": "other" }, { "chain": "Arbitrum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Arbitrum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "router" }, { "chain": "Arbitrum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2 (ProxyAdmin for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xEe6A57eC80ea46401049E92587E52f5Ec1c24785 (TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A (Owner of UniswapV3Factory) - https://defipunkd.com/address/1/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/1/0xE592427A0AEce92De3Edee1F18E0157C05861564 (router) - https://defipunkd.com/address/1/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (router) - https://defipunkd.com/address/1/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) - https://defipunkd.com/address/1/0x1F98415757620B543A52E61c46B32eB19261F984 (other) - https://defipunkd.com/address/1/0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696 (other) - https://defipunkd.com/address/1/0xbfd8137f7d1516D3ea5cA83523914859ec47F573 (other) - https://defipunkd.com/address/1/0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6 (other) - https://defipunkd.com/address/1/0x42B24A95702b9986e82d421cC3568932790A48Ec (other) - https://defipunkd.com/address/1/0x91ae842A5Ffd8d12023116943e72A606179294f3 (other) - https://defipunkd.com/address/1/0xA5644E29708357803b5A882D272c41cC0dF92B34 (other) - https://defipunkd.com/address/1/0x61fFE014bA17989E743c5F6cB21bF9697530B21e (other) - https://defipunkd.com/address/1/0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 (router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (other) - https://defipunkd.com/address/8453/0x33128a8fC17869897dcE68Ed026d694621f6FDfD (factory) - https://defipunkd.com/address/8453/0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1 (pool) - https://defipunkd.com/address/8453/0x6fF5693b99212Da76ad316178A184AB56D299b43 (router) - https://defipunkd.com/address/8453/0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1 (other) - https://defipunkd.com/address/42161/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/42161/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (router) - https://defipunkd.com/address/42161/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: ABILITY-TO-EXIT Evaluate whether users can withdraw their funds on their own terms, even under adversarial admin conditions. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - E1. Enumerate every user-facing exit function in the main contracts: withdraw, redeem, burn, requestWithdrawal, claim, exit, etc. List them by name. Do NOT treat the contract as a monolith. - E2. For EACH exit function in E1: identify its access modifiers and any pause guards (e.g. _checkResumed, whenNotPaused, onlyRole). Functions that gate REQUEST PLACEMENT often differ from functions that CLAIM FINALIZED FUNDS — check both separately. - E3. For each pause guard: identify the role holder (which address holds PAUSE_ROLE / GUARDIAN / etc.) and the maximum pause duration. Specifically check whether PAUSE_INFINITELY (or equivalent uncapped pause) is callable, and which actor can call it (single multisig vs governance vote). For role-holder reads use https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=hasRole&args=0x...,0x... or &method=getRoleAdmin&args=0x.... For "is currently paused" checks use &method=paused or &method=isPaused&args=<resume-code>. Use the BARE method name (no parens). Cite the URL with &block=<n> in evidence[]. - E4. EMERGENCY vs GOVERNANCE pause distinction: many protocols have a fast-acting emergency pause capped at N days and a slow governance pause that can be indefinite. Record both paths separately if present, with their time caps and actor classes. - E5. Queued redemption: documented maximum queue duration, daily withdrawal caps, whether the queue itself is pausable. - E6. Forced-exit / escape-hatch / permissionless emergency-exit mechanism for adversarial-admin scenarios. - E7. Frontend dependency: confirm exit functions are directly callable on-chain (e.g. via Etherscan write tab or a generic wallet) without the project's frontend. Then write the steel-man section per Hard Rule 11. Common red-vs-orange tension on this slice: indefinite pause exists (suggests red) BUT the realistic emergency path is time-capped AND claims of already-finalized exits are not pause-gated (suggests orange). Resolve this by stating who can do what for how long, not by stopping at the worst-case sentence. Grade rules: - green = permissionless exit; pause is either absent, narrowly scoped to clearly-described emergencies with auto-expiry, or capped at ≤7 days; no frontend dependency for exit; claims of already-finalized exits are not pause-gated under any path. - orange = pausable with broad scope OR indefinite pause is reachable only through governance vote (not unilateral admin action), OR queued redemption with documented max > 7 days, OR claims-of-finalized are exempt but new-request placement can be paused indefinitely by governance. - red = exit requires admin signature, OR ANY actor (including governance) can pause CLAIMS of finalized exits indefinitely, OR there is no on-chain exit function at all (purely custodial), OR pause is held by a single EOA / 2-of-3 multisig with no time cap. - unknown = checklist incomplete after checking the sources above. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "ability-to-exit", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - No Phase-0 autonomy signal
Neither the category heuristic nor the forkedFrom signal fires for this protocol. A real autonomy graph (oracles, bridges, fallbacks, governance-mutable dependencies) arrives with Phase-2 onchain discovery.
No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v3 - protocol.name: Uniswap V3 - protocol.chains: Ethereum, Base, Arbitrum, Binance, Polygon, X Layer, Optimism, Plasma, xDai, Celo, Avalanche, RSK, Monad, Nibiru, 0G, World Chain, XDC, Unichain, zkSync Era, Boba, Filecoin, Etherlink, Mantle, Goat, BOB, Lens, Telos, Sonic, Redbelly, Hemi, Scroll, Linea, Sei, Blast, Taiko, Lisk, Polygon zkEVM, Moonbeam, Corn, Manta, LightLink, Tempo, Saga - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2", "role": "ProxyAdmin for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xEe6A57eC80ea46401049E92587E52f5Ec1c24785", "role": "TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A", "role": "Owner of UniswapV3Factory" }, { "chain": "Ethereum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Ethereum", "address": "0xE592427A0AEce92De3Edee1F18E0157C05861564", "role": "router" }, { "chain": "Ethereum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "router" }, { "chain": "Ethereum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" }, { "chain": "Ethereum", "address": "0x1F98415757620B543A52E61c46B32eB19261F984", "role": "other" }, { "chain": "Ethereum", "address": "0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696", "role": "other" }, { "chain": "Ethereum", "address": "0xbfd8137f7d1516D3ea5cA83523914859ec47F573", "role": "other" }, { "chain": "Ethereum", "address": "0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6", "role": "other" }, { "chain": "Ethereum", "address": "0x42B24A95702b9986e82d421cC3568932790A48Ec", "role": "other" }, { "chain": "Ethereum", "address": "0x91ae842A5Ffd8d12023116943e72A606179294f3", "role": "other" }, { "chain": "Ethereum", "address": "0xA5644E29708357803b5A882D272c41cC0dF92B34", "role": "other" }, { "chain": "Ethereum", "address": "0x61fFE014bA17989E743c5F6cB21bF9697530B21e", "role": "other" }, { "chain": "Ethereum", "address": "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45", "role": "router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "other" }, { "chain": "Base", "address": "0x33128a8fC17869897dcE68Ed026d694621f6FDfD", "role": "factory" }, { "chain": "Base", "address": "0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1", "role": "pool" }, { "chain": "Base", "address": "0x6fF5693b99212Da76ad316178A184AB56D299b43", "role": "router" }, { "chain": "Base", "address": "0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1", "role": "other" }, { "chain": "Arbitrum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Arbitrum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "router" }, { "chain": "Arbitrum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2 (ProxyAdmin for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xEe6A57eC80ea46401049E92587E52f5Ec1c24785 (TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A (Owner of UniswapV3Factory) - https://defipunkd.com/address/1/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/1/0xE592427A0AEce92De3Edee1F18E0157C05861564 (router) - https://defipunkd.com/address/1/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (router) - https://defipunkd.com/address/1/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) - https://defipunkd.com/address/1/0x1F98415757620B543A52E61c46B32eB19261F984 (other) - https://defipunkd.com/address/1/0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696 (other) - https://defipunkd.com/address/1/0xbfd8137f7d1516D3ea5cA83523914859ec47F573 (other) - https://defipunkd.com/address/1/0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6 (other) - https://defipunkd.com/address/1/0x42B24A95702b9986e82d421cC3568932790A48Ec (other) - https://defipunkd.com/address/1/0x91ae842A5Ffd8d12023116943e72A606179294f3 (other) - https://defipunkd.com/address/1/0xA5644E29708357803b5A882D272c41cC0dF92B34 (other) - https://defipunkd.com/address/1/0x61fFE014bA17989E743c5F6cB21bF9697530B21e (other) - https://defipunkd.com/address/1/0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 (router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (other) - https://defipunkd.com/address/8453/0x33128a8fC17869897dcE68Ed026d694621f6FDfD (factory) - https://defipunkd.com/address/8453/0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1 (pool) - https://defipunkd.com/address/8453/0x6fF5693b99212Da76ad316178A184AB56D299b43 (router) - https://defipunkd.com/address/8453/0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1 (other) - https://defipunkd.com/address/42161/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/42161/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (router) - https://defipunkd.com/address/42161/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: AUTONOMY Evaluate this protocol's autonomy: can a failure of anything outside its own contracts cause theft or loss of user principal, loss of unclaimed yield, or materially change the protocol's expected performance? "Autonomy" is not "has zero external touchpoints" — it is "external failures are either survivable or recoverable without user loss". This slice adapts DefiScan v1's Autonomy dimension; dependencies are one of several criteria, not the whole frame. GUARDRAILS (read before grading): - Category alone (Liquid Staking, Bridge, RWA Lending, Restaking, …) does NOT force a grade. A category is a hint about where to look; the grade must come from the concrete A1–A9 findings below. - Base-chain consensus (Ethereum PoS, the chain's validator set, the canonical Deposit Contract at 0x00000000219ab540356cBB839Cbe05303d7705Fa) is the SUBSTRATE, not a dependency, for any protocol deployed on that chain. Do not list "depends on Ethereum" as a finding. - Oracles or other integrations used by DOWNSTREAM protocols that happen to read this protocol's token (e.g. Chainlink stETH/USD consumed by Aave) are NOT this protocol's dependencies. Count only what THIS protocol's contracts call or trust on-chain. If a feed or contract appears in the protocol's docs only as reference material for third-party integrators, EXCLUDE IT ENTIRELY — do not log it as a finding even with a "peripheral" or "referenced only" caveat. - "Upgradeable admin can change things" belongs to the CONTROL slice; only count it here when the upgrade surface lets governance silently swap an external dependency (see A9). - Underlying-asset risk in opt-in, isolated markets is NOT autonomy-red on its own. When a protocol wraps third-party yield-bearing assets (LSTs, LRTs, ERC-4626 vaults, lending receipts, restaked tokens) into per-market silos that users explicitly choose, a failure of one underlying does NOT propagate to other markets and is risk the user opted into per-market. Record it under A4 with depth and propagation scope, but do not let it alone drive a red verdict — red requires an external dependency that cross-cuts the protocol or that the user did not opt into at deposit time. A failure mode that is "if the LRT you deposited is hacked, your principal in that LRT-backed market is impaired" is the underlying's autonomy story, not this protocol's; grade it on whether THIS protocol introduces additional dependencies on top. - Sub-module enumeration is mandatory before grading. If the protocol ships distinct product lines or modules (e.g., a v2 core AMM plus a newer perps/funding-rate module, a lending pool plus a separate vault layer, an L1 core plus a cross-chain extension), enumerate each in findings and grade against the WORST module weighted by its share of TVS or its blast radius. A green core does not rescue an orange/red sub-module; conversely, a small red sub-module with capped TVS may bound the overall grade to orange. Name each module by its on-chain factory or router address. If you do not know whether a module exists, that is an unknowns[] entry, not silence. EXPLICIT TVS WEIGHTING: in the verdict, state each module's approximate share of total protocol TVS (use "~X%" if exact figures unavailable; check DeFiLlama or block-explorer balances on the module's main contract) and how that share informs the weighted grade. Format: "Module A holds ~X% of TVS (grade: <g>); Module B holds ~Y% (grade: <g>); weighted overall = <grade> because <reason>." If a red sub-module holds <5% of total TVS and is capped, the overall grade may be orange; if it holds >25%, the overall grade is red. Do not let qualitative reasoning substitute for the percentages — write the numbers. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. External contract calls. Enumerate every external contract the core contracts call or read from (oracles, price feeds, AMM pools, lending pools, staking/deposit contracts, yield wrappers). For each, identify the address, the provider, and what user-facing function of this protocol would break or mis-price if that external contract paused, mis-reported, or behaved adversarially. Grep for "oracle", "aggregator", "getPrice", "latestAnswer", "chainlink", "pyth", "redstone" as a starting point. To verify an oracle is live and what it currently reports, hit https://defipunkd.com/api/contract/read?chainId=<id>&address=<oracle>&method=latestAnswer (or &method=latestRoundData, &method=getPrice, &method=description; use the BARE method name without parens) and cite the URL — the response includes blockNumber/blockHash and rawReturnData, which is stronger evidence than a docs page about which feed "should" be used. - A2. Off-chain actor committees reporting INTO the protocol. Oracle committees, guardian multisigs, DAO-selected validator sets acting as protocol reporters, exit-bus signers, fraud-proof challengers. For each, record committee size, quorum, who picks the members, and what mis-reporting could do (mint, burn, finalize withdrawal, freeze). Distinguish this from governance admins (control slice). NOTE ON STAKING PROTOCOLS: validator slashing and node-operator misbehavior are properties of the base-chain substrate, NOT external dependencies, when the operator set is diversified enough that a coordinated failure caps at <5% principal loss. Count validator/operator risk under A2 ONLY if the operator set is small, non-diversified, or lacks bonding / slashing-insurance / diversification mitigations. A curated set of 30+ independent operators with documented diversification falls under the mitigated path; a 3-operator LST does not. Do not cite the protocol's own risk disclosure as evidence that operator failure = principal loss unless you also check the diversification and bond mitigations. - A3. Bridge / cross-chain messaging dependencies. Only count bridges that carry material TVL or are required for a core user flow. For each, name the bridge operator (canonical L1↔L2, LayerZero, Wormhole, Axelar, custom multisig), the trust model (canonical, optimistic, light-client, guardian set), and what fraction of TVL or users ride on it. "wstETH exists on 15 chains" is not a finding unless material TVL sits there. Before listing any non-primary chain deployment as a dependency, verify it is still operational as of analysis_date — retired or sunset deployments (e.g., Lido-on-Terra, Lido-on-Solana) belong in unknowns[] or should be omitted, never cited as a current dependency. - A4. Nested collateral / restaking chains. For restaking / LRT / receipt-of-receipt designs: record the depth of the collateral chain, every actor with slashing or freezing power at each level, and whether a failure N levels deep propagates to user principal here. - A5. Fork lineage (silent check). If DeFiLlama's forkedFrom is non-empty, record it as one finding and move on. If empty, do NOT add a placeholder finding; it adds noise. - A6. Fallback mechanisms and circuit breakers. What catches an external failure? Sanity-check contracts on oracle reports, rebase bounds, pause paths triggered by bad prices, second-opinion oracles, max-per-block throughput caps, withdrawal queues that absorb bad reports. Record which A1–A4 risks are mitigated by which fallback, and which are unmitigated. For EACH fallback you cite, state its activation status explicitly: (i) LIVE and enforcing on-chain today, (ii) DEPLOYED but not yet wired / activated (e.g., interface exists but the address is zero or the role is unassigned), or (iii) DOCUMENTED / PROPOSED only (forum post, LIP draft, audit pending). Only (i) counts as mitigation for the grade. A fallback in state (ii) or (iii) should be noted but must not reduce the risk in your steel-man or verdict. If you cannot determine activation status, add an unknowns[] entry rather than assume it is live. - A7. Sequencer / L1-liveness dependency BEYOND the base-chain substrate. SCOPE — sequencer risk only counts here when the protocol IS its own L2/L3 appchain or app-rollup, where the sequencer is part of the protocol's own stack and a freeze is a protocol-level outage. A protocol permissionlessly deployed on a third-party L2 inherits that L2's sequencer as substrate, not an A7 dependency. Record the sequencer/DA trust model when A7 applies. - A8. Keeper / relayer / off-chain bot liveness. Protocols that need permissionless-but-necessary off-chain actors (liquidation bots, auto-compounders, deposit relayers, intent solvers). Record whether the role is permissionless, what degrades if nobody runs it (yield paused, bad debt accumulates, positions go stale), and whether the failure mode is graceful or catastrophic. - A9. Governance-mutable dependency surface. Can an admin or DAO action silently INTRODUCE a NEW EXTERNAL dependency — swap the oracle address to a different provider, register a new staking module that calls an untrusted contract, add a new bridge, route SY through a new external vault — without an exit window for users? Check the upgrade / router / module-registry contracts. Answer: which EXTERNAL dependencies are governance-mutable, who holds that power, and whether there is a timelock or exit window. SCOPE LIMIT — read carefully: A9 is about the *external dependency surface*, not the upgrade surface in general. "The proxyAdmin / EOA can upgrade the router implementation to arbitrary bytecode" is a CONTROL-slice finding (admin can rug), NOT an autonomy-A9 finding. A9 fires only when the upgrade specifically swaps out or adds a contract that THIS protocol calls or trusts (e.g., changing the oracle address from Chainlink to a malicious feed, registering a new SY adapter that points to a third-party vault, redirecting a bridge endpoint). If the only finding is "admin can change implementation," do not log it under A9 and do not let it drive the autonomy grade — note it under control instead. The autonomy-relevant version of the same upgrade key is "admin can swap [specific external address X] without timelock"; that requires identifying the specific external dependency that becomes mutable. STEEL-MAN (per Hard Rule 13): write one-sentence strongest arguments for red, orange, and green using the A1–A9 findings. IMPACTED TVS ESTIMATE: the headline MUST include a rough impacted-TVS figure — the fraction of protocol TVS that could be lost or frozen if the worst-unmitigated dependency you identified failed. Use "~X%" if exact numbers are unavailable, "<1%" for de minimis, "unclear" only if A1–A9 left the question genuinely open (in which case grade=unknown is usually correct). Do NOT substitute qualitative phrases like "significant" — give a number or bracket. GRADE ANCHORS (mapped to DefiScan v1 stages): - green = Stage 2 equivalent. Failure of any external dependency cannot cause loss of user principal or unclaimed yield. Either there are no material external dependencies, or every critical one has a documented fallback (A6) that keeps users whole. Governance cannot silently introduce new dependencies without an exit window (A9). Impacted TVS under any single-dependency failure: effectively 0. - orange = Stage 1 equivalent. Failure of some external dependency can cause loss of unclaimed yield, or can materially change expected performance (pause withdrawals, freeze positions, degrade price quality), but cannot cause loss of principal. Committee-based oracles with sanity checks, canonical-only bridges, fallback paths that exist but are incomplete, or governance-mutable dependencies protected by a ≥7-day timelock. Impacted TVS is bounded and recoverable. - red = Stage 0 equivalent. Failure of an external dependency CAN cause theft or loss of principal. Examples: single-provider oracle with no sanity check or fallback, material TVL on a non-canonical bridge with a guardian multisig, governance can hot-swap oracles or add staking modules with no timelock or exit window, unmitigated keeper-liveness dependency where positions become insolvent if bots stop. Impacted TVS is material. - unknown = checklist incomplete after inspecting source + verified contracts. Prefer unknown over guessing when A1/A6 could not be reconstructed. RESERVE unknown for cases where the CORE ARCHITECTURE itself is unverifiable — not for cases where you merely cannot enumerate every per-market dependency in a multi-market protocol. If the core router/factory/oracle architecture is verifiable on-chain and you can determine whether the core requires external dependencies, grade the architecture even when an exhaustive per-market external-dependency census is infeasible. Acknowledge the per-market gap in unknowns[] but still issue a grade. Refusing to grade a multi-market protocol because you cannot list every SY/vault/market is over-use of unknown; grade the architecture and say so. PROMPT-META CHECK (per Hard Rule 17): before finalizing, verify the verdict cites concrete contract addresses, docs, or code — not the rubric itself. If your verdict says "the protocol belongs to a category the rubric marks red", rewrite it with the A1–A9 finding that actually justifies the grade, or drop to grade=unknown. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "autonomy", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Not yet assessed
Whether the protocol depends on privileged operators, whitelists, geo-restrictions, or off-chain infrastructure. This is not a signal DeFiLlama carries in a usable form; crawler-based detection lands in a later phase.
No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v3 - protocol.name: Uniswap V3 - protocol.chains: Ethereum, Base, Arbitrum, Binance, Polygon, X Layer, Optimism, Plasma, xDai, Celo, Avalanche, RSK, Monad, Nibiru, 0G, World Chain, XDC, Unichain, zkSync Era, Boba, Filecoin, Etherlink, Mantle, Goat, BOB, Lens, Telos, Sonic, Redbelly, Hemi, Scroll, Linea, Sei, Blast, Taiko, Lisk, Polygon zkEVM, Moonbeam, Corn, Manta, LightLink, Tempo, Saga - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2", "role": "ProxyAdmin for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xEe6A57eC80ea46401049E92587E52f5Ec1c24785", "role": "TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor" }, { "chain": "Ethereum", "address": "0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A", "role": "Owner of UniswapV3Factory" }, { "chain": "Ethereum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Ethereum", "address": "0xE592427A0AEce92De3Edee1F18E0157C05861564", "role": "router" }, { "chain": "Ethereum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "router" }, { "chain": "Ethereum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" }, { "chain": "Ethereum", "address": "0x1F98415757620B543A52E61c46B32eB19261F984", "role": "other" }, { "chain": "Ethereum", "address": "0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696", "role": "other" }, { "chain": "Ethereum", "address": "0xbfd8137f7d1516D3ea5cA83523914859ec47F573", "role": "other" }, { "chain": "Ethereum", "address": "0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6", "role": "other" }, { "chain": "Ethereum", "address": "0x42B24A95702b9986e82d421cC3568932790A48Ec", "role": "other" }, { "chain": "Ethereum", "address": "0x91ae842A5Ffd8d12023116943e72A606179294f3", "role": "other" }, { "chain": "Ethereum", "address": "0xA5644E29708357803b5A882D272c41cC0dF92B34", "role": "other" }, { "chain": "Ethereum", "address": "0x61fFE014bA17989E743c5F6cB21bF9697530B21e", "role": "other" }, { "chain": "Ethereum", "address": "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45", "role": "router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "other" }, { "chain": "Base", "address": "0x33128a8fC17869897dcE68Ed026d694621f6FDfD", "role": "factory" }, { "chain": "Base", "address": "0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1", "role": "pool" }, { "chain": "Base", "address": "0x6fF5693b99212Da76ad316178A184AB56D299b43", "role": "router" }, { "chain": "Base", "address": "0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1", "role": "other" }, { "chain": "Arbitrum", "address": "0x1F98431c8aD98523631AE4a59f267346ea31F984", "role": "factory" }, { "chain": "Arbitrum", "address": "0xC36442b4a4522E871399CD717aBDD847Ab11FE88", "role": "pool" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "router" }, { "chain": "Arbitrum", "address": "0xe34139463bA50bD61336E0c446Bd8C0867c6fE65", "role": "other" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0xB753548F6E010e7e680BA186F9Ca1BdAB2E90cf2 (ProxyAdmin for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xEe6A57eC80ea46401049E92587E52f5Ec1c24785 (TransparentUpgradeableProxy for NonfungibleTokenPositionDescriptor) - https://defipunkd.com/address/1/0xf2371551Fe3937Db7c750f4DfABe5c2fFFdcBf5A (Owner of UniswapV3Factory) - https://defipunkd.com/address/1/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/1/0xE592427A0AEce92De3Edee1F18E0157C05861564 (router) - https://defipunkd.com/address/1/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (router) - https://defipunkd.com/address/1/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) - https://defipunkd.com/address/1/0x1F98415757620B543A52E61c46B32eB19261F984 (other) - https://defipunkd.com/address/1/0x5BA1e12693Dc8F9c48aAD8770482f4739bEeD696 (other) - https://defipunkd.com/address/1/0xbfd8137f7d1516D3ea5cA83523914859ec47F573 (other) - https://defipunkd.com/address/1/0xb27308f9F90D607463bb33eA1BeBb41C27CE5AB6 (other) - https://defipunkd.com/address/1/0x42B24A95702b9986e82d421cC3568932790A48Ec (other) - https://defipunkd.com/address/1/0x91ae842A5Ffd8d12023116943e72A606179294f3 (other) - https://defipunkd.com/address/1/0xA5644E29708357803b5A882D272c41cC0dF92B34 (other) - https://defipunkd.com/address/1/0x61fFE014bA17989E743c5F6cB21bF9697530B21e (other) - https://defipunkd.com/address/1/0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45 (router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (other) - https://defipunkd.com/address/8453/0x33128a8fC17869897dcE68Ed026d694621f6FDfD (factory) - https://defipunkd.com/address/8453/0x03a520b32C04BF3bEEf7BEb72E919cf822Ed34f1 (pool) - https://defipunkd.com/address/8453/0x6fF5693b99212Da76ad316178A184AB56D299b43 (router) - https://defipunkd.com/address/8453/0x42bE4D6527829FeFA1493e1fb9F3676d2425C3C1 (other) - https://defipunkd.com/address/42161/0x1F98431c8aD98523631AE4a59f267346ea31F984 (factory) - https://defipunkd.com/address/42161/0xC36442b4a4522E871399CD717aBDD847Ab11FE88 (pool) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (router) - https://defipunkd.com/address/42161/0xe34139463bA50bD61336E0c446Bd8C0867c6fE65 (other) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: OPEN-ACCESS Evaluate who is allowed to use the protocol and whether any of that permission is granted off-chain. Scope: this slice is about ADMISSION — who can enter, exit, or transact. Operator LIVENESS (what breaks if keepers/oracles go offline) is assessed in the dependencies slice and is out of scope for the grade here. You may note operator dependencies as context, but do not let "the protocol halts if operator X disappears" drive the access grade on its own; that belongs in dependencies. Source verification / contract verification on block explorers is assessed in the verifiability slice and is out of scope here — do NOT let "contract is unverified" drive the access grade. Framing: the smart contracts are the access layer; frontends are UX. A permissionless contract is reachable by any client (SDK, third-party UI, aggregator, wallet integration). Frontend ToS, IP geo-blocking, and wallet screening are publisher policies on one specific client — they are reported as context but do NOT determine the grade. The grade hinges on (1) what the contract itself permits, and (2) whether the protocol is practically reachable without the official publisher's cooperation. Meta-check before finalizing: if your verdict cites phrases from this prompt as evidence ("the protocol meets the 'credible alternatives' condition", "this fits the 'documented fallback' rule"), redo the verdict. The prompt describes the rubric; evidence must come from the protocol. A verdict should cite what the protocol does, not what the rubric says. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. Whitelist / allowlist modifiers in user-facing entry points. Grep for "onlyWhitelisted", "onlyRole", "allowlist", "isAccredited", "isKYCed". Note which functions are gated and who can add/remove from the list. - A2. Off-chain operators in the admission path: keepers, sequencers, privileged relayers, oracle posters whose approval is required to admit a user action (not just to keep the protocol live). For each, identify whether the role is held by a single operator, a permissioned committee, or is permissionless. Enumerate per user-facing function class (deposit vs withdraw-request vs claim-finalized vs transfer) which ones require operator approval to be admitted, and which ones admit users unconditionally. A function whose placement is unconditional but whose downstream settlement depends on an operator is an admission-permissionless function — flag the liveness dependency as context and defer its grading weight to the dependencies slice. - A3. Frontend restrictions on the official interface — record as context, not as a grade lever. Distinguish: - A3-passive: boilerplate ToS clauses (sanctions attestation, restricted-territory self-certification, VPN-circumvention prohibition, "comply with applicable law" eligibility, age of majority). - A3-active: runtime enforcement — IP-based geo-blocking, wallet-address screening against a sanctions oracle (Chainalysis, TRM, Elliptic), KYC wall, rendering-blocking jurisdiction banner. Record findings under the correct tier. Quote ToS text or banner text in evidence[].shows. These findings populate the headline and rationale but do NOT move the grade by themselves; the grade is set by A1, A2, and the A3b path check below. - A3b. Independent access paths (the operative grade input). Enumerate paths that do not require the official publisher's cooperation: - Published SDK / library / CLI for direct contract interaction. - Third-party frontends operated by separate legal entities. - Wallet-integrated access (MetaMask Swaps, Safe apps, etc.). - DEX / lending / yield aggregators that route through the contracts. Record at least one concrete link per path that exists. The protocol does NOT have to self-document these — the test is existence, not UX cost. An A3b-i redistribution of the official UI bound by the same ToS does NOT count as an independent path. - A4. Sanctions / compliance tooling at the contract level: does the protocol check addresses against OFAC lists or similar on-chain blocklists in the contract itself? (Frontend-only screening belongs in A3.) - A5. Differentiate read access vs write access: many protocols are read-permissionless (anyone can view state) but write-gated (only certain addresses can deposit/borrow). Record both. - A6. ToS / Legal links: locate them on the website and produce a VERBATIM quote of any jurisdictional, sanctions, or eligibility clause in evidence[].shows. If you cannot extract the clause text verbatim (SPA render failure, paywall, dead link, etc.), do NOT paraphrase or infer from general knowledge — record the ToS URL in unknowns[] with the reason extraction failed. Assertions about ToS content without a verbatim quote will be downweighted by reviewers. Then write the steel-man section per Hard Rule 11. Grade rules (admission-focused; liveness concerns belong in dependencies; source verification belongs in verifiability): - green = no contract-level whitelist/KYC on user entry/exit; no operator approval required to admit a user action; AND at least one independent A3b path exists (published SDK, third-party frontend, wallet integration, or aggregator routing). Frontend ToS posture and A3-active enforcement on the official UI do NOT block green when contracts are permissionless and an independent path exists — they are reported as context. - orange = contracts admit users unconditionally, BUT the protocol is operationally captured by the official publisher: no published SDK, no third-party frontend, no wallet integration, no aggregator routing. The contract is theoretically open but practically reachable only through the official UI. Also applies when admission requires approval from a permissioned committee that is governance-managed with a documented replacement procedure. - red = contract-level whitelist / KYC on user entry/exit, OR admission of a core user action requires approval from a single privileged operator or a small committee with no documented replacement procedure, OR enforces an on-chain blocklist updatable by a single party. - unknown = checklist incomplete after checking the sources above. Default-grade guidance: when contracts are fully permissionless AND any A3b independent path exists, the default grade is green regardless of frontend ToS or A3-active enforcement on the official UI. Frontend geo-blocking, sanctions-oracle wallet screening, and ToS sanctions clauses are publisher policies on one client and are reported in findings/headline as context, not as grade levers. To grade orange on operational-capture grounds, the auditor must affirmatively show that ALL independent paths are absent or also gated. Guideline on committees: where admission depends on a multi-operator committee, the relevant axes are (a) set size, (b) whether replacement/rotation is governed on-chain, (c) whether the replacement procedure is publicly documented. A large set with on-chain governance replacement should not be graded as a single-party operator even if rotation is not instantaneous. A small set with informal replacement should be treated as a single-party operator. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "open-access", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.
Stage
Preview of the Phase-3 maturity framework. DeFiPunk'd will adopt DeFiScan v2's stages verbatim; the section is rendered below in its intended shape so the structure is visible today.
Uniswap V3 has not yet been assessed under the DeFiScan v2 stage framework.
The walkaway test is the central criterion. Once stages land, protocols reach Stage 1 only if users can exit in the presence of malicious operators even when the emergency council disappears.
Scope of assessment
Stages are assessed per-protocol against DeFiScan v2's criteria: governance structure, upgradeability path, timelock durations, emergency-council scope, and the walkaway test. The analysis depends on onchain discovery (roles, owners, timelocks) and deeper review of deployed contracts — neither of which DeFiPunk'd automates at Phase 0.
Stage 0 requirements pending
Governance is largely off-chain, contracts are upgradeable with short or no timelock, and the protocol depends on a multisig or team with full discretion. At Phase 0 DeFiPunk'd does not automatically evaluate these; the assessment lands with crawler-based onchain discovery.
Stage 1 requirements pending
Users can exit or opt out on their own terms even if the team disappears. Upgrades run through a meaningful timelock with an emergency security council clearly scoped. The walkaway test is the headline criterion.
Stage 2 requirements pending
Protocol is fully permissionless and immutable, or upgrades require a supermajority of token holders with a long timelock and no emergency override. This is the terminal stage of the DeFiScan v2 framework.
Stages are an opinionated assessment of maturity, not a rating of security or safety. A protocol can sit at Stage 2 and still carry substantial technical or economic risk; the framework exists to incentivize decentralization, not to rank protocols.
Contract surface
Every contract in scope for this protocol — pooled from DeFiLlama's TVL adapter (mechanical) and DEFI@home discovery submissions (LLM-curated). Verified-source flags come from Etherscan + Sourcify; owner / multisig metadata is read on-chain when available. Reviewer audit context, not a slice score. A lending protocol's adapter set will list third-party collateral tokens alongside its own contracts; attribution is the grader's job.
- 60addresses
- 10verified source
- 0proxies
- 0of 3 owners are Safes
| 0g | factory | 0xcb24…7a9d | TVL | — | — | — | factory |
| Arbitrum | factory | 0x1f98…f984 | discovery | — | — | — | factory |
| Arbitrum | other | 0xe341…fe65 | discovery | — | — | — | — |
| Arbitrum | pool | 0xc364…fe88 | discovery | — | — | — | — |
| Arbitrum | router | 0xa51a…81a3 | discovery | — | — | — | router |
| avax | UniswapV3Factory | 0x740b…1bad | TVL | ✓ | — | — | factory |
| Base | factory | 0x3312…fdfd | discovery | — | — | — | factory |
| Base | other | 0x42be…c3c1 | discovery | — | — | — | — |
| Base | pool | 0x03a5…34f1 | discovery | — | — | — | — |
| Base | router | 0x6ff5…9b43 | discovery | — | — | — | router |
| blast | UniswapV3Factory | 0x792e…f6fd | TVL | ✓ | — | — | factory |
| bob | factory | 0xcb24…7a9d | TVL | — | — | — | factory |
| boba | factory | 0xffcd…6f1b | TVL | — | — | — | factory |
| celo | UniswapV3Factory | 0xafe2…cdec | TVL | ✓ | — | — | factory |
| corn | factory | 0xcb24…7a9d | TVL | — | — | — | factory |
| era | factory | 0x8fda…5422 | TVL | ✗ | — | — | factory |
| Ethereum | factory | 0x1f98…f984 | discovery | — | — | — | factory |
| Ethereum | other | 0x0000…8ba3 | discovery | — | — | — | — |
| Ethereum | other | 0x1f98…f984 | discovery | — | — | — | — |
| Ethereum | other | 0x42b2…48ec | discovery | — | — | — | — |
| Ethereum | other | 0x5ba1…d696 | discovery | — | — | — | — |
| Ethereum | other | 0x61ff…b21e | discovery | — | — | — | — |
| Ethereum | other | 0x91ae…94f3 | discovery | — | — | — | — |
| Ethereum | other | 0xa564…2b34 | discovery | — | — | — | — |
| Ethereum | other | 0xb273…5ab6 | discovery | — | — | — | — |
| Ethereum | other | 0xbfd8…f573 | discovery | — | — | — | — |
| Ethereum | other | 0xe341…fe65 | discovery | — | — | — | — |
| Ethereum | pool | 0xc364…fe88 | discovery | — | — | — | — |
| Ethereum | proxy_admin | 0xb753…0cf2 | discovery | — | — | — | — |
| Ethereum | proxy_admin | 0xee6a…4785 | discovery | — | — | — | — |
| Ethereum | router | 0x66a9…a8af | discovery | — | — | — | router |
| Ethereum | router | 0x68b3…fc45 | discovery | — | — | — | router |
| Ethereum | router | 0xe592…1564 | discovery | — | — | — | router |
| etlk | factory | 0xcb24…7a9d | TVL | — | — | — | factory |
| goat | factory | 0xcb24…7a9d | TVL | — | — | — | factory |
| hemi | factory | 0x3462…e8a4 | TVL | — | — | — | factory |
| lens | factory | 0xe070…ef47 | TVL | — | — | — | factory |
| lightlink_phoenix | factory | 0xcb24…7a9d | TVL | — | — | — | factory |
| linea | UniswapV3Factory | 0x31fa…72a9 | TVL | ✓ | — | — | factory |
| lisk | factory | 0x0d92…4df9 | TVL | — | — | — | factory |
| manta | factory | 0x06d8…4e23 | TVL | ✗ | — | — | factory |
| mantle | UniswapV3Factory | 0x0d92…4df9 | TVL | ✓ | — | — | factory |
| monad | — | 0x760a…5701 | TVL | — | — | — | — |
| monad | factory | 0x204f…0498 | TVL | — | — | — | factory |
| moonbeam | UniswapV3Factory | 0x28f1…bb70 | TVL | ✓ | — | 0xb2af…6531 | factory |
| plasma | factory | 0xcb24…7a9d | TVL | — | — | — | factory |
| polygon_zkevm | factory | 0xff83…dfc2 | TVL | ✗ | — | — | factory |
| rbn | factory | 0x75fc…c9b3 | TVL | — | — | — | factory |
| rsk | factory | 0xaf37…ad82 | TVL | — | — | — | factory |
| scroll | factory | 0x70c6…b919 | TVL | ✗ | — | — | factory |
| sei | factory | 0x75fc…c9b3 | TVL | — | — | — | factory |
| sonic | UniswapV3Factory | 0xcb24…7a9d | TVL | ✓ | — | 0x0a53…3587 | factory |
| taiko | UniswapV3Factory | 0x75fc…c9b3 | TVL | ✓ | — | 0xf6b5…d6e5 | factory |
| telos | factory | 0xcb24…7a9d | TVL | — | — | — | factory |
| tempo | factory | 0x24a3…1fd6 | TVL | — | — | — | factory |
| unichain | UniswapV3Factory | 0x1f98…0003 | TVL | ✓ | — | — | factory |
| wc | factory | 0x7a50…a25a | TVL | — | — | — | factory |
| xdai | UniswapV3Factory | 0xe32f…89b1 | TVL | ✓ | — | — | factory |
| xdc | — | 0x5d5f…3fed | TVL | — | — | — | — |
| xdc | factory | 0xcb24…7a9d | TVL | — | — | — | factory |
Control Exit Autonomy Open Access Verifiable
Control criteria
About
Uniswap V2 is a decentralized exchange protocol enabling peer-to-peer swaps of ERC20 tokens using an automated market maker (constant-product) model with dual-contract architecture separating core (Factory, Pair) from periphery (Router02, Migrator). The protocol operates without native governance token, charges no protocol fees, and is deployed across 16+ EVM chains with identical core logic deterministically addressed via CREATE2.
Risk analysis
One card per dimension, sorted by severity. Only Verifiability and Autonomy carry automated signals in Phase 0. See methodology for scope.
Audit a dimension yourself · DEFI@home Contribute an LLM-run assessment — any model, any dimension. Three agreeing runs merge automatically into the public record.
DEFI@home is a distributed audit network modeled on SETI@home: instead of CPU cycles, it crowdsources LLM reasoning. Paste a slice prompt into Claude, ChatGPT, Gemini, or any browsing-capable model, and submit the JSON output as a pull request. The quorum bot merges it once ≥3 independent runs (from different models) reach the same grade — no single model, and no single contributor, can move the needle alone. How it works →
- Address discovery 28 addresses on file
· 1 run Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v2 - protocol.name: Uniswap V2 - protocol.chains: Ethereum, Base, Polygon, Arbitrum, Binance, Monad, Optimism, X Layer, Avalanche, Unichain, Tempo, Zora, Celo - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f", "role": "factory" }, { "chain": "Ethereum", "address": "0x7a250d5630b4cf539739df2c5dacb4c659f2488d", "role": "router" }, { "chain": "Ethereum", "address": "0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b", "role": "migrator" }, { "chain": "Ethereum", "address": "0x1f98400000000000000000000000000000000001", "role": "factory" }, { "chain": "Sepolia", "address": "0xF62c03E08ada871A0bEb309762E260a7a6a880E6", "role": "factory" }, { "chain": "Sepolia", "address": "0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3", "role": "router" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000002", "role": "factory" }, { "chain": "Unichain", "address": "0x284f11109359a7e1306c3e447ef14d38400063ff", "role": "router" }, { "chain": "Arbitrum", "address": "0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9", "role": "factory" }, { "chain": "Arbitrum", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Tempo", "address": "0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f", "role": "factory" }, { "chain": "Tempo", "address": "0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e", "role": "router" }, { "chain": "Avalanche", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Avalanche", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Binance", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Binance", "address": "0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24", "role": "router" }, { "chain": "Base", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Base", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Optimism", "address": "0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf", "role": "factory" }, { "chain": "Optimism", "address": "0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2", "role": "router" }, { "chain": "Polygon", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Polygon", "address": "0xedf6066a2b290C185783862C7F4776A2C8077AD1", "role": "router" }, { "chain": "Blast", "address": "0x5C346464d33F90bABaf70dB6388507CC889C1070", "role": "factory" }, { "chain": "Blast", "address": "0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035", "role": "router" }, { "chain": "Zora", "address": "0x0F797dC7efaEA995bB916f268D919d0a1950eE3C", "role": "factory" }, { "chain": "Zora", "address": "0xa00F34A632630EFd15223B1968358bA4845bEEC7", "role": "router" }, { "chain": "Monad", "address": "0x182a927119d56008d921126764bf884221b10f59", "role": "factory" }, { "chain": "Monad", "address": "0x4b2ab38dbf28d31d467aa8993f6c2585981d6804", "role": "router" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f (factory) - https://defipunkd.com/address/1/0x7a250d5630b4cf539739df2c5dacb4c659f2488d (router) - https://defipunkd.com/address/1/0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b (migrator) - https://defipunkd.com/address/1/0x1f98400000000000000000000000000000000001 (factory) - https://defipunkd.com/address/11155111/0xF62c03E08ada871A0bEb309762E260a7a6a880E6 (factory) - https://defipunkd.com/address/11155111/0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3 (router) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000002 (factory) - https://defipunkd.com/address/130/0x284f11109359a7e1306c3e447ef14d38400063ff (router) - https://defipunkd.com/address/42161/0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9 (factory) - https://defipunkd.com/address/42161/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Tempo: 0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f (chain not supported by the read API) - Tempo: 0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e (chain not supported by the read API) - https://defipunkd.com/address/43114/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/43114/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Binance: 0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (chain not supported by the read API) - Binance: 0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24 (chain not supported by the read API) - https://defipunkd.com/address/8453/0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (factory) - https://defipunkd.com/address/8453/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - https://defipunkd.com/address/10/0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf (factory) - https://defipunkd.com/address/10/0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2 (router) - https://defipunkd.com/address/137/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/137/0xedf6066a2b290C185783862C7F4776A2C8077AD1 (router) - https://defipunkd.com/address/81457/0x5C346464d33F90bABaf70dB6388507CC889C1070 (factory) - https://defipunkd.com/address/81457/0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035 (router) - Zora: 0x0F797dC7efaEA995bB916f268D919d0a1950eE3C (chain not supported by the read API) - Zora: 0xa00F34A632630EFd15223B1968358bA4845bEEC7 (chain not supported by the read API) - Monad: 0x182a927119d56008d921126764bf884221b10f59 (chain not supported by the read API) - Monad: 0x4b2ab38dbf28d31d467aa8993f6c2585981d6804 (chain not supported by the read API) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: DISCOVERY You are a cataloguer, not a judge. Your job is to surface every contract address that could plausibly belong to this protocol's control or fund-holding surface, each backed by a citation. `grade` is ALWAYS `"unknown"` for discovery submissions — there is no green/orange/red rubric here. The five evaluation slices that run after you (control, ability-to-exit, autonomy, open-access, verifiability) consume your output via the addressBook ratchet — every address you record becomes a pre-built surfacer URL on the next run; every address you miss costs them a tool call. Width beats depth. A `role: "other"` entry with one cited URL beats omitting it. Downstream slices will discard out-of-scope entries; they cannot rediscover what you fail to enumerate without paying the same cost again. (Step 0 capability probe lives in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every D-code below must appear in evidence[] OR unknowns[]) - **D1. Block-explorer name-tag search per chain.** For each chain in `protocol.chains`, search the canonical block explorer for the protocol's name tag — `https://etherscan.io/searchHandler?term=<query>` and the per-chain explorers (basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network). When direct fetch is blocked, use `site:<explorer> <protocol_name>` via search grounding. Record every address that surfaces with the protocol's tag, plus neighbouring "Token Contract" / "Multisig" / "Timelock" labels. - **D2. Official deployments doc.** From `protocol.website` and the docs site, locate the canonical "Deployed contracts" / "Addresses" / "Contracts" / "Deployments" page (often at `/docs/deployments`, `/docs/addresses`, `/dashboard/contracts`). Cite the URL, record every address listed with its named role, and set `protocol_metadata.deployed_contracts_doc` to this URL. - **D3. Audit PDFs.** From `protocol.audit_links` (and any audits surfaced by D2), open each. Most reports include a "Scope" / "Contracts in scope" address table in the first 5 pages. Extract every in-scope address with its labelled role. If the audit predates the current deployment, record the addresses anyway with role suffixed `(audit-era)` so downstream slices know to re-verify. - **D4. GitHub deployment artifacts.** From `protocol.github`, walk the repo at a pinned commit SHA looking for: Foundry `broadcast/<script>/<chainId>/run-latest.json` (`transactions[].contractAddress` per chainId); hardhat-deploy `deployments/<network>/<Contract>.json` (`address` field); manual indexes (`deployments.json`, `addresses.json`, `contracts.json`, `networks.json`); markdown indexes (`docs/deployments.md`, `README.md` tables). Cite the file URL with the commit SHA; pin SHAs (`?ref=<sha>`) so the citation is content-addressed. - **D5. Multi-chain enumeration.** If `protocol.chains.length > 1`, repeat D1–D4 per chain. Cross-chain deployments of the same logical contract get SEPARATE `admin_addresses[]` entries — one per chain. The chain field is part of the identity; do not collapse. If a chain has zero results, record `"D5: chain <name>: zero addresses surfaced from <sources tried>"` in unknowns[]. - **D6. Factory-discovered children.** For factory addresses surfaced in D1–D4, fetch the enumeration view via the read API (`/api/contract/read?...&method=allPools` / `getPool` / `getMarket` / `getVault`) and record each child with role like `"pool (from factory <0xFactory>)"`. **Cap at 50 children per factory.** Protocols with thousands of pools (Uniswap, Sushi) need dedicated ingestion — record the factory + the cap notice in unknowns[]. - **D7. Role taxonomy.** Every `admin_addresses[]` entry's `role` uses this controlled vocabulary (free-text suffixes OK for disambiguation, e.g. `"multisig (treasury)"`, but the leading token must match): `owner | admin | proxy_admin | governor | timelock | guardian | multisig | treasury | oracle | factory | router | token | pool | vault | other` Tentative classifications are encouraged. `actor_class` ∈ `eoa | multisig | timelock | governance | unknown` — use `unknown` when you found the address but didn't read its bytecode. - **D8. Ratchet output integrity.** Every address in `admin_addresses[]` must trace to ≥1 fetched URL in evidence[]. Snippet-only sightings go in unknowns[] with a `D8` code, NOT in admin_addresses[]. ### Discovery rationale framing - `rationale.findings`: one entry per D-code, terse, factual. Per-address detail belongs in evidence[] and admin_addresses[], not here. Example: `"D1: 8 addresses surfaced from etherscan.io name-tag search for 'Aave V3'"`. - `rationale.steelman`: ALWAYS null. - `rationale.verdict`: one short line summarizing what corpora were walked and how many addresses were catalogued. - `headline`: factual and quantitative — `"24 contracts catalogued across Ethereum, Arbitrum, and Base; 6 governance/admin and 18 protocol contracts."`. - `short_headline`: under 60 chars — `"24 contracts across 3 chains"`. ### What discovery is NOT - Not a verdict slice. `grade` must be `"unknown"`. - Not exhaustive enumeration of leaf assets — record the factory + cap and move on (see D6). - Not classification of trust assumptions — whether a multisig threshold is safe / timelock delay is sufficient / proxy admin is an EOA is the control slice's job. - Not address-book reconciliation: when addressBook is non-empty, EXTEND it (find addresses prior runs missed) rather than re-cite the same addresses; re-cite only when you have new evidence for a refined role. ### protocol_metadata side-effects While walking the corpora, populate every `protocol_metadata` field you can support with citations: `github`, `docs_url`, `audits` (one per D3 audit walked), `governance_forum`, `bug_bounty_url`, `security_contact`, `deployed_contracts_doc` (URL from D2), `upgradeability` (best-effort), and `about` (2–4 sentences sourced from docs/website, not memory). Discovery is the natural home for these — evaluation slices should not have to rediscover them. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "discovery", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Verifiability
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v2 - protocol.name: Uniswap V2 - protocol.chains: Ethereum, Base, Polygon, Arbitrum, Binance, Monad, Optimism, X Layer, Avalanche, Unichain, Tempo, Zora, Celo - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f", "role": "factory" }, { "chain": "Ethereum", "address": "0x7a250d5630b4cf539739df2c5dacb4c659f2488d", "role": "router" }, { "chain": "Ethereum", "address": "0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b", "role": "migrator" }, { "chain": "Ethereum", "address": "0x1f98400000000000000000000000000000000001", "role": "factory" }, { "chain": "Sepolia", "address": "0xF62c03E08ada871A0bEb309762E260a7a6a880E6", "role": "factory" }, { "chain": "Sepolia", "address": "0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3", "role": "router" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000002", "role": "factory" }, { "chain": "Unichain", "address": "0x284f11109359a7e1306c3e447ef14d38400063ff", "role": "router" }, { "chain": "Arbitrum", "address": "0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9", "role": "factory" }, { "chain": "Arbitrum", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Tempo", "address": "0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f", "role": "factory" }, { "chain": "Tempo", "address": "0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e", "role": "router" }, { "chain": "Avalanche", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Avalanche", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Binance", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Binance", "address": "0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24", "role": "router" }, { "chain": "Base", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Base", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Optimism", "address": "0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf", "role": "factory" }, { "chain": "Optimism", "address": "0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2", "role": "router" }, { "chain": "Polygon", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Polygon", "address": "0xedf6066a2b290C185783862C7F4776A2C8077AD1", "role": "router" }, { "chain": "Blast", "address": "0x5C346464d33F90bABaf70dB6388507CC889C1070", "role": "factory" }, { "chain": "Blast", "address": "0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035", "role": "router" }, { "chain": "Zora", "address": "0x0F797dC7efaEA995bB916f268D919d0a1950eE3C", "role": "factory" }, { "chain": "Zora", "address": "0xa00F34A632630EFd15223B1968358bA4845bEEC7", "role": "router" }, { "chain": "Monad", "address": "0x182a927119d56008d921126764bf884221b10f59", "role": "factory" }, { "chain": "Monad", "address": "0x4b2ab38dbf28d31d467aa8993f6c2585981d6804", "role": "router" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f (factory) - https://defipunkd.com/address/1/0x7a250d5630b4cf539739df2c5dacb4c659f2488d (router) - https://defipunkd.com/address/1/0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b (migrator) - https://defipunkd.com/address/1/0x1f98400000000000000000000000000000000001 (factory) - https://defipunkd.com/address/11155111/0xF62c03E08ada871A0bEb309762E260a7a6a880E6 (factory) - https://defipunkd.com/address/11155111/0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3 (router) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000002 (factory) - https://defipunkd.com/address/130/0x284f11109359a7e1306c3e447ef14d38400063ff (router) - https://defipunkd.com/address/42161/0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9 (factory) - https://defipunkd.com/address/42161/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Tempo: 0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f (chain not supported by the read API) - Tempo: 0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e (chain not supported by the read API) - https://defipunkd.com/address/43114/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/43114/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Binance: 0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (chain not supported by the read API) - Binance: 0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24 (chain not supported by the read API) - https://defipunkd.com/address/8453/0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (factory) - https://defipunkd.com/address/8453/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - https://defipunkd.com/address/10/0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf (factory) - https://defipunkd.com/address/10/0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2 (router) - https://defipunkd.com/address/137/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/137/0xedf6066a2b290C185783862C7F4776A2C8077AD1 (router) - https://defipunkd.com/address/81457/0x5C346464d33F90bABaf70dB6388507CC889C1070 (factory) - https://defipunkd.com/address/81457/0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035 (router) - Zora: 0x0F797dC7efaEA995bB916f268D919d0a1950eE3C (chain not supported by the read API) - Zora: 0xa00F34A632630EFd15223B1968358bA4845bEEC7 (chain not supported by the read API) - Monad: 0x182a927119d56008d921126764bf884221b10f59 (chain not supported by the read API) - Monad: 0x4b2ab38dbf28d31d467aa8993f6c2585981d6804 (chain not supported by the read API) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: VERIFIABILITY Evaluate whether an outsider can independently confirm what the deployed code does. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - V1. For each address you assess: is the bytecode verified on the chain's block explorer? Record the "Contract Source Code Verified" indicator. https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... returns this as a top-level "verified" boolean plus "abiSource" ("etherscan" / "sourcify") and an inline ABI — useful when the explorer page is rate-limited. If the contract is a proxy, verify BOTH the proxy contract AND the current implementation contract. The same /api/contract/abi response auto-resolves proxies and includes a "proxy.implementation" address when present, so one call covers V1 + V6 in one shot. An explorer "Similar Match" on a well-known proxy pattern (Aragon AppProxyUpgradeable, ERC1967Proxy, OssifiableProxy, OZ TransparentUpgradeableProxy) is expected for that pattern and does NOT count as a verification gap on its own — what matters is that the implementation is independently verified. - V2. Source-to-repo correspondence: for each verified contract, attempt to find a matching commit in the linked GitHub repos. Record evidence[].commit on a match. Independent compile/bytecode-match is NOT required for green — a recognized public repo whose structure and file contents correspond to the explorer-visible source is sufficient. If you did not pin a commit SHA or run a bytecode diff, record that plainly in unknowns[] and proceed; it is a scope limit, not a downgrade signal. - V3. Audit coverage: for each URL in protocol.audit_links, open it and record: auditor name, audit date, the specific contracts / commit in scope. Flag audits that predate the current deployment by >6 months without a follow-up review. - V4. Auditor recognition: the following firms are broadly recognized in Solidity: Trail of Bits, Zellic, Spearbit, OpenZeppelin, ConsenSys Diligence, Certora (formal verification), Quantstamp, Halborn, Peckshield, Sigma Prime, ChainSecurity, Ackee Blockchain, MixBytes, Statemind. Unknown firms are orange-at-best for any green-grade claim. Name the firm explicitly in evidence[]. - V5. Post-audit drift: compare the most recent in-scope audit(s) against the currently-deployed source, weighted by what each contract does and by what the changes actually contain. SCOPE — drift only downgrades the grade when ALL of the following hold: (i) the drifting contract is fund-custody / settlement / accounting-critical (NOT a peripheral router, lens, quoter, or pure-view contract that holds no balances); (ii) the changes are material — new functions, modified access control, modified accounting, modified fund flow — and not refactors / struct relocations / import reorgs / build or CI fixes / formatting; (iii) no later audit, fix-audit, or differential audit from a recognized firm covers the changed files (audits often pin a pre-fix commit while a follow-up reviews the delta — match by file scope, not by commit-hash equality). When you cite drift as a downgrade reason, name the specific behavior change (function added, role granted, accounting formula altered) — "N commits ahead" or "+X/-Y LOC" alone is not evidence of material drift. If you have not sampled the diff content (e.g. via the GitHub compare view or the top commits in the window), record drift as an unknowns[] entry rather than auto-downgrading; commit-count and LOC are starting signals, not findings. - V6. Implementation vs proxy: a verified proxy with an unverified implementation is effectively unverified. State whether the implementation is verified separately. EVIDENCE DISCIPLINE (read before writing findings[]): - Do not assert a specific deploy-commit SHA, bytecode equivalence, or "identical to audited commit" unless you actually fetched the artifact that shows it (e.g., a deployed-addresses JSON you opened, an explorer page you read). Inferred or plausible matches belong in unknowns[], never in findings[] or evidence[]. - Evidence[] entries must correspond to pages/files you actually retrieved this run. A URL you did not open is not evidence. Then write the steel-man section per Hard Rule 11. Grade rules: - green = deployed bytecode verified on the explorer (proxy AND implementation if proxied; "Similar Match" on a standard proxy pattern is fine per V1), a public source repo exists whose contents correspond to the explorer-visible source, AND ≥1 audit from a recognized firm covering the currently-deployed contracts (≤6 months of drift OR drift was re-audited). A missing local compile-match is not a downgrade — record it in unknowns[] and still grade green if the other conditions hold. - orange = verified but with visible drift from the public repo, OR audit scope is stale relative to deployment, OR only minor / unknown-firm audits exist, OR only some of the main contracts are verified, OR proxy verified but implementation only partially verified. - red = unverified bytecode (or verified proxy with unverified implementation), OR no audit in protocol.audit_links, OR no public repo. - unknown = reserved for when the protocol's verifiability posture genuinely cannot be assessed (e.g., explorer and repo both inaccessible for this protocol). Do NOT use unknown merely because you, the analyst, could not run a particular check such as a bytecode diff — that goes in unknowns[] while the grade is still assigned from the evidence you do have. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "verifiability", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Control
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v2 - protocol.name: Uniswap V2 - protocol.chains: Ethereum, Base, Polygon, Arbitrum, Binance, Monad, Optimism, X Layer, Avalanche, Unichain, Tempo, Zora, Celo - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f", "role": "factory" }, { "chain": "Ethereum", "address": "0x7a250d5630b4cf539739df2c5dacb4c659f2488d", "role": "router" }, { "chain": "Ethereum", "address": "0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b", "role": "migrator" }, { "chain": "Ethereum", "address": "0x1f98400000000000000000000000000000000001", "role": "factory" }, { "chain": "Sepolia", "address": "0xF62c03E08ada871A0bEb309762E260a7a6a880E6", "role": "factory" }, { "chain": "Sepolia", "address": "0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3", "role": "router" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000002", "role": "factory" }, { "chain": "Unichain", "address": "0x284f11109359a7e1306c3e447ef14d38400063ff", "role": "router" }, { "chain": "Arbitrum", "address": "0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9", "role": "factory" }, { "chain": "Arbitrum", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Tempo", "address": "0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f", "role": "factory" }, { "chain": "Tempo", "address": "0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e", "role": "router" }, { "chain": "Avalanche", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Avalanche", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Binance", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Binance", "address": "0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24", "role": "router" }, { "chain": "Base", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Base", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Optimism", "address": "0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf", "role": "factory" }, { "chain": "Optimism", "address": "0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2", "role": "router" }, { "chain": "Polygon", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Polygon", "address": "0xedf6066a2b290C185783862C7F4776A2C8077AD1", "role": "router" }, { "chain": "Blast", "address": "0x5C346464d33F90bABaf70dB6388507CC889C1070", "role": "factory" }, { "chain": "Blast", "address": "0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035", "role": "router" }, { "chain": "Zora", "address": "0x0F797dC7efaEA995bB916f268D919d0a1950eE3C", "role": "factory" }, { "chain": "Zora", "address": "0xa00F34A632630EFd15223B1968358bA4845bEEC7", "role": "router" }, { "chain": "Monad", "address": "0x182a927119d56008d921126764bf884221b10f59", "role": "factory" }, { "chain": "Monad", "address": "0x4b2ab38dbf28d31d467aa8993f6c2585981d6804", "role": "router" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f (factory) - https://defipunkd.com/address/1/0x7a250d5630b4cf539739df2c5dacb4c659f2488d (router) - https://defipunkd.com/address/1/0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b (migrator) - https://defipunkd.com/address/1/0x1f98400000000000000000000000000000000001 (factory) - https://defipunkd.com/address/11155111/0xF62c03E08ada871A0bEb309762E260a7a6a880E6 (factory) - https://defipunkd.com/address/11155111/0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3 (router) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000002 (factory) - https://defipunkd.com/address/130/0x284f11109359a7e1306c3e447ef14d38400063ff (router) - https://defipunkd.com/address/42161/0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9 (factory) - https://defipunkd.com/address/42161/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Tempo: 0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f (chain not supported by the read API) - Tempo: 0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e (chain not supported by the read API) - https://defipunkd.com/address/43114/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/43114/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Binance: 0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (chain not supported by the read API) - Binance: 0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24 (chain not supported by the read API) - https://defipunkd.com/address/8453/0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (factory) - https://defipunkd.com/address/8453/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - https://defipunkd.com/address/10/0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf (factory) - https://defipunkd.com/address/10/0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2 (router) - https://defipunkd.com/address/137/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/137/0xedf6066a2b290C185783862C7F4776A2C8077AD1 (router) - https://defipunkd.com/address/81457/0x5C346464d33F90bABaf70dB6388507CC889C1070 (factory) - https://defipunkd.com/address/81457/0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035 (router) - Zora: 0x0F797dC7efaEA995bB916f268D919d0a1950eE3C (chain not supported by the read API) - Zora: 0xa00F34A632630EFd15223B1968358bA4845bEEC7 (chain not supported by the read API) - Monad: 0x182a927119d56008d921126764bf884221b10f59 (chain not supported by the read API) - Monad: 0x4b2ab38dbf28d31d467aa8993f6c2585981d6804 (chain not supported by the read API) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: CONTROL Evaluate who can change the protocol's rules, how fast, and how broadly. (Step 0 capability probe and the off-chain-only fallback live in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]) - **C1.** For each address you assess: who is the contract owner / admin / pendingAdmin / governor — read these via the block explorer's "Read Contract" tab OR `https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=owner` (BARE method names: `&method=owner`, `&method=admin`, `&method=pendingOwner`, `&method=governor`). For Safes use `/api/safe/owners?chainId=<id>&address=0x...`. When a protocol has multiple major versions deployed (v2/v3/v4), perform C1 reads on the NEWEST deployment separately — newer deployments often have weaker control surfaces than the legacy core. - **C2.** Upgrade mechanism: transparent proxy / UUPS / Beacon / Diamond / immutable. Identify the proxy admin address. Check upgradeability of GOVERNANCE contracts too — a Governor / Aragon Voting / OZ Governor is often itself a proxy whose admin is the Timelock. Asymmetry: when fund-holding cores are immutable AND governance has no admin path that reaches them, an upgradable Governor/Timelock is T3-only and must NOT drag the verdict below green on that basis alone (see grade rules and the "immutable cores" caveat). Only call upgradability "mixed" if you can name a concrete function on the upgradable surface that reaches T1 or T2 on user funds. - **C3.** EXECUTION PATH (enumerate every stage, in order, with delays in seconds). The operative path is usually a chain (voting → scheduler → timelock → executor; or governor → queue → execute; or Aragon Voting → DualGovernance → EmergencyProtectedTimelock → AdminExecutor). For each stage, record (a) the contract address, (b) the delay constant name + value in seconds, (c) the URL you read it from (block-explorer Read Contract OR `/api/contract/read?...&method=MIN_DELAY&block=<n>`). Do NOT stop at the first timelock-shaped contract — if its admin is itself called by another contract, keep walking. The grading delay is the SUM OF DELAYS ON THE UNCONTESTED FAST PATH (shortest time a proposal with no opposition can go from submission to executable). Dynamic / contested extensions (veto signaling, rage quit, escrow delay) are modifiers, not the basis — note them separately. - **C4.** Enumerate EVERY multisig with reachable control — main proxy admin, emergency activation, emergency execution, reseal / pause, gate-seal committees, tiebreaker, per-module admins. For each Safe, fetch threshold + owners + version via `/api/safe/owners?chainId=<id>&address=0x...` (response includes raw eth_call data, so the URL is citable evidence). Enumerate ops/council/incentives multisigs even when off the upgrade path — record their scope so a reader can see they are NOT on the upgrade path. For each: (a) address, (b) threshold / total signers, (c) signer identities classified as insider (team, paid auditors under ongoing engagement, mandated service providers) vs non-insider (independent community members, unaffiliated researchers), (d) the specific power held (upgrade, pause, parameter, etc.). - **C5.** On-chain governance: Governor / GovernorBravo / OZ Governor / Aragon Voting with token-weighted voting? Record proposal threshold, voting period, quorum, and the timelock delay between queue and execute. Every numeric constant must come from a Read Contract call you can link to, or be in unknowns[] with the C-code. If votingDelay / votingPeriod are denominated in BLOCKS, convert to seconds at the chain's CURRENT block time (Ethereum mainnet ≈ 12s post-Merge, not the 15s in older Compound/Bravo deployments) — cite both block count and converted seconds. - **C6.** EMERGENCY POWERS: separate emergency-pause / guardian role with a different time cap or different actor than the main upgrade authority? Record it explicitly. - **C7.** POWER TIER (blast radius). For each privileged path in C3–C6, classify the WORST thing that path can do, choosing the highest applicable tier. Cite the specific function name and any on-chain bound — tier claims without a named function are unsupported. - **T1 — FUND-CRITICAL**: replace implementation of contracts holding user funds; change AMM math / accounting / collateral logic; mint unbacked debt or shares; pause withdrawals; drain user-fund treasury; change oracle to attacker-controlled source; replace upgrade admin with EOA. - **T2 — ECONOMICALLY MATERIAL**: change fee parameters within bounded ranges; redirect protocol fees; add/remove markets / collateral types; bounded inflation or token mint within hard-capped schedule; spend protocol-owned (non-user) treasury. - **T3 — GOVERNANCE-INTERNAL**: change voting rules, quorum, voting period, proposal threshold; upgrade the Governor itself; rotate Timelock admin; mint governance tokens within a capped annual schedule. - **T4 — OPERATIONAL**: incentives distribution, grants, ENS / frontend canonicalization, deployment coordination, periphery router deprecation. The grade is set by the HIGHEST tier reachable on the uncontested fast path, not the median. State the tier and the binding function in the verdict. ### Read Contract discipline (applies to C3, C4, C5) Every numeric constant cited (timelock delays, voting periods, multisig thresholds, quorum percentages) must come from EITHER (a) a block-explorer Read Contract URL, OR (b) a DeFiPunkd `/api/contract/read` or `/api/safe/owners` URL (preferred with `&block=<n>` for content-addressed evidence), OR (c) an unknowns[] entry with the C-code. Docs / blog posts are corroboration only — they cannot be the sole citation for a value that is also readable on-chain. ### Off-chain-only substitute hierarchy (when grading_basis="off-chain-only" — see preamble Rule 16) When on-chain reads were genuinely unreachable this run, eligible off-chain substitutes in priority order: 1. Linked audit PDFs (admin roles, multisig members, timelock delays usually enumerated). 2. Governance forum posts that quote constants from a successful on-chain proposal (cite post URL + linked execution-tx URL). 3. Official protocol docs pages with named addresses and roles (must be on a domain owned by the protocol). 4. GitHub README / SECURITY.md / governance/*.md at a pinned commit SHA. Forbidden substitutes: third-party blog posts, X / Twitter threads, search-result snippets, model memory. Required degradation: any C-code citing a numeric constant from docs/forum/audit prose ONLY must also carry an `unknowns[]` entry with `-offchain` suffix noting "value not re-read on-chain in this run; corroboration only". ### Grade rules (apply the timelock bar conditional on the highest C7 tier reachable on the fast path) Security Council standard (used below): a multisig qualifies as "Security Council" only if ALL of: ≥7 signers, ≥51% threshold, ≥50% non-insider signers, every signer publicly announced. Failing any criterion = NOT a Security Council, regardless of signer reputation. - **green**: highest reachable tier is T3 or T4 regardless of timelock; OR T2 reachable with uncontested-fast-path delay ≥7 days; OR T1 reachable only via immutable contracts (T1 is unreachable); OR T1 reachable with uncontested-fast-path delay ≥7 days combined with a Security Council multisig; OR T1 reachable with uncontested-fast-path delay ≥7 days through active on-chain governance with broad token distribution. - **orange**: T2 reachable with uncontested-fast-path delay >0 but <7 days; OR T1 reachable with uncontested-fast-path delay >0 but <7 days; OR a multisig failing one or more Security Council criteria sits on a T1/T2 path; OR unclear upgrade authority on a T1/T2 path; OR governance with very short timelock or low quorum on a T1/T2 path. - **red**: T1 reachable with no timelock by a single EOA or 2-of-3 multisig; OR a T1 upgrade admin that is not a smart contract you can audit. - **unknown**: completed the checklist but still cannot determine the upgrade authority OR cannot classify the highest tier reachable on the main contracts. Tiering caveats: - "Bounded" must be enforced ON-CHAIN to count as T2. A function that sets fees with no upper-bound check is T1 — cite the bound check. - Recurring T2 economic extraction (e.g. fee redirect with no rate limit) approaches T1 over time. A single proposal that can permanently redirect all future revenue is T1. - T3 assumes the governance contract cannot itself authorize a T1/T2 action without going through the same timelock. If governance can self-upgrade to bypass the timelock, T3 collapses into T1. - Do not downgrade tier by hand-waving ("realistically governance would never…"). Tier on what the contract permits, not what feels likely. Notes: - **Dynamic / dual-governance timelocks** (Lido, Compound escrow veto): the rubric grades on the uncontested path because that is the path most upgrades take. A dynamic extension that fires only under stake-weighted opposition is a real protection — name it in the green steel-man, but it does not lift an orange fast path into green; state the tension in the verdict. - **Immutable cores with upgradable governance** (Uniswap-style): if fund-holding contracts are immutable and have no admin-reachable function moving / freezing / re-routing user funds, the highest reachable tier on the upgrade path is T3 — green regardless of timelock. Don't grade this orange just because the Governor is a proxy — that's a C2 fact, not a downgrade. Downgrade only applies if you can cite a concrete function on the upgradable surface that reaches T1 or T2 (privileged hook, upgradable factory controlling fund-routing, fee-switch redirecting protocol revenue without bound). - **The 7-day bar** reflects the exit-window standard — users need notice after a queued upgrade to withdraw if they disagree. The ability-to-exit slice grades the exit side; this slice grades the delay side; both must hold for users to actually benefit from the delay. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "control", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Ability to exit
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v2 - protocol.name: Uniswap V2 - protocol.chains: Ethereum, Base, Polygon, Arbitrum, Binance, Monad, Optimism, X Layer, Avalanche, Unichain, Tempo, Zora, Celo - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f", "role": "factory" }, { "chain": "Ethereum", "address": "0x7a250d5630b4cf539739df2c5dacb4c659f2488d", "role": "router" }, { "chain": "Ethereum", "address": "0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b", "role": "migrator" }, { "chain": "Ethereum", "address": "0x1f98400000000000000000000000000000000001", "role": "factory" }, { "chain": "Sepolia", "address": "0xF62c03E08ada871A0bEb309762E260a7a6a880E6", "role": "factory" }, { "chain": "Sepolia", "address": "0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3", "role": "router" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000002", "role": "factory" }, { "chain": "Unichain", "address": "0x284f11109359a7e1306c3e447ef14d38400063ff", "role": "router" }, { "chain": "Arbitrum", "address": "0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9", "role": "factory" }, { "chain": "Arbitrum", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Tempo", "address": "0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f", "role": "factory" }, { "chain": "Tempo", "address": "0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e", "role": "router" }, { "chain": "Avalanche", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Avalanche", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Binance", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Binance", "address": "0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24", "role": "router" }, { "chain": "Base", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Base", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Optimism", "address": "0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf", "role": "factory" }, { "chain": "Optimism", "address": "0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2", "role": "router" }, { "chain": "Polygon", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Polygon", "address": "0xedf6066a2b290C185783862C7F4776A2C8077AD1", "role": "router" }, { "chain": "Blast", "address": "0x5C346464d33F90bABaf70dB6388507CC889C1070", "role": "factory" }, { "chain": "Blast", "address": "0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035", "role": "router" }, { "chain": "Zora", "address": "0x0F797dC7efaEA995bB916f268D919d0a1950eE3C", "role": "factory" }, { "chain": "Zora", "address": "0xa00F34A632630EFd15223B1968358bA4845bEEC7", "role": "router" }, { "chain": "Monad", "address": "0x182a927119d56008d921126764bf884221b10f59", "role": "factory" }, { "chain": "Monad", "address": "0x4b2ab38dbf28d31d467aa8993f6c2585981d6804", "role": "router" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f (factory) - https://defipunkd.com/address/1/0x7a250d5630b4cf539739df2c5dacb4c659f2488d (router) - https://defipunkd.com/address/1/0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b (migrator) - https://defipunkd.com/address/1/0x1f98400000000000000000000000000000000001 (factory) - https://defipunkd.com/address/11155111/0xF62c03E08ada871A0bEb309762E260a7a6a880E6 (factory) - https://defipunkd.com/address/11155111/0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3 (router) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000002 (factory) - https://defipunkd.com/address/130/0x284f11109359a7e1306c3e447ef14d38400063ff (router) - https://defipunkd.com/address/42161/0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9 (factory) - https://defipunkd.com/address/42161/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Tempo: 0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f (chain not supported by the read API) - Tempo: 0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e (chain not supported by the read API) - https://defipunkd.com/address/43114/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/43114/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Binance: 0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (chain not supported by the read API) - Binance: 0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24 (chain not supported by the read API) - https://defipunkd.com/address/8453/0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (factory) - https://defipunkd.com/address/8453/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - https://defipunkd.com/address/10/0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf (factory) - https://defipunkd.com/address/10/0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2 (router) - https://defipunkd.com/address/137/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/137/0xedf6066a2b290C185783862C7F4776A2C8077AD1 (router) - https://defipunkd.com/address/81457/0x5C346464d33F90bABaf70dB6388507CC889C1070 (factory) - https://defipunkd.com/address/81457/0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035 (router) - Zora: 0x0F797dC7efaEA995bB916f268D919d0a1950eE3C (chain not supported by the read API) - Zora: 0xa00F34A632630EFd15223B1968358bA4845bEEC7 (chain not supported by the read API) - Monad: 0x182a927119d56008d921126764bf884221b10f59 (chain not supported by the read API) - Monad: 0x4b2ab38dbf28d31d467aa8993f6c2585981d6804 (chain not supported by the read API) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: ABILITY-TO-EXIT Evaluate whether users can withdraw their funds on their own terms, even under adversarial admin conditions. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - E1. Enumerate every user-facing exit function in the main contracts: withdraw, redeem, burn, requestWithdrawal, claim, exit, etc. List them by name. Do NOT treat the contract as a monolith. - E2. For EACH exit function in E1: identify its access modifiers and any pause guards (e.g. _checkResumed, whenNotPaused, onlyRole). Functions that gate REQUEST PLACEMENT often differ from functions that CLAIM FINALIZED FUNDS — check both separately. - E3. For each pause guard: identify the role holder (which address holds PAUSE_ROLE / GUARDIAN / etc.) and the maximum pause duration. Specifically check whether PAUSE_INFINITELY (or equivalent uncapped pause) is callable, and which actor can call it (single multisig vs governance vote). For role-holder reads use https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=hasRole&args=0x...,0x... or &method=getRoleAdmin&args=0x.... For "is currently paused" checks use &method=paused or &method=isPaused&args=<resume-code>. Use the BARE method name (no parens). Cite the URL with &block=<n> in evidence[]. - E4. EMERGENCY vs GOVERNANCE pause distinction: many protocols have a fast-acting emergency pause capped at N days and a slow governance pause that can be indefinite. Record both paths separately if present, with their time caps and actor classes. - E5. Queued redemption: documented maximum queue duration, daily withdrawal caps, whether the queue itself is pausable. - E6. Forced-exit / escape-hatch / permissionless emergency-exit mechanism for adversarial-admin scenarios. - E7. Frontend dependency: confirm exit functions are directly callable on-chain (e.g. via Etherscan write tab or a generic wallet) without the project's frontend. Then write the steel-man section per Hard Rule 11. Common red-vs-orange tension on this slice: indefinite pause exists (suggests red) BUT the realistic emergency path is time-capped AND claims of already-finalized exits are not pause-gated (suggests orange). Resolve this by stating who can do what for how long, not by stopping at the worst-case sentence. Grade rules: - green = permissionless exit; pause is either absent, narrowly scoped to clearly-described emergencies with auto-expiry, or capped at ≤7 days; no frontend dependency for exit; claims of already-finalized exits are not pause-gated under any path. - orange = pausable with broad scope OR indefinite pause is reachable only through governance vote (not unilateral admin action), OR queued redemption with documented max > 7 days, OR claims-of-finalized are exempt but new-request placement can be paused indefinitely by governance. - red = exit requires admin signature, OR ANY actor (including governance) can pause CLAIMS of finalized exits indefinitely, OR there is no on-chain exit function at all (purely custodial), OR pause is held by a single EOA / 2-of-3 multisig with no time cap. - unknown = checklist incomplete after checking the sources above. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "ability-to-exit", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Autonomy
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v2 - protocol.name: Uniswap V2 - protocol.chains: Ethereum, Base, Polygon, Arbitrum, Binance, Monad, Optimism, X Layer, Avalanche, Unichain, Tempo, Zora, Celo - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f", "role": "factory" }, { "chain": "Ethereum", "address": "0x7a250d5630b4cf539739df2c5dacb4c659f2488d", "role": "router" }, { "chain": "Ethereum", "address": "0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b", "role": "migrator" }, { "chain": "Ethereum", "address": "0x1f98400000000000000000000000000000000001", "role": "factory" }, { "chain": "Sepolia", "address": "0xF62c03E08ada871A0bEb309762E260a7a6a880E6", "role": "factory" }, { "chain": "Sepolia", "address": "0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3", "role": "router" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000002", "role": "factory" }, { "chain": "Unichain", "address": "0x284f11109359a7e1306c3e447ef14d38400063ff", "role": "router" }, { "chain": "Arbitrum", "address": "0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9", "role": "factory" }, { "chain": "Arbitrum", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Tempo", "address": "0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f", "role": "factory" }, { "chain": "Tempo", "address": "0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e", "role": "router" }, { "chain": "Avalanche", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Avalanche", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Binance", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Binance", "address": "0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24", "role": "router" }, { "chain": "Base", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Base", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Optimism", "address": "0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf", "role": "factory" }, { "chain": "Optimism", "address": "0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2", "role": "router" }, { "chain": "Polygon", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Polygon", "address": "0xedf6066a2b290C185783862C7F4776A2C8077AD1", "role": "router" }, { "chain": "Blast", "address": "0x5C346464d33F90bABaf70dB6388507CC889C1070", "role": "factory" }, { "chain": "Blast", "address": "0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035", "role": "router" }, { "chain": "Zora", "address": "0x0F797dC7efaEA995bB916f268D919d0a1950eE3C", "role": "factory" }, { "chain": "Zora", "address": "0xa00F34A632630EFd15223B1968358bA4845bEEC7", "role": "router" }, { "chain": "Monad", "address": "0x182a927119d56008d921126764bf884221b10f59", "role": "factory" }, { "chain": "Monad", "address": "0x4b2ab38dbf28d31d467aa8993f6c2585981d6804", "role": "router" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f (factory) - https://defipunkd.com/address/1/0x7a250d5630b4cf539739df2c5dacb4c659f2488d (router) - https://defipunkd.com/address/1/0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b (migrator) - https://defipunkd.com/address/1/0x1f98400000000000000000000000000000000001 (factory) - https://defipunkd.com/address/11155111/0xF62c03E08ada871A0bEb309762E260a7a6a880E6 (factory) - https://defipunkd.com/address/11155111/0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3 (router) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000002 (factory) - https://defipunkd.com/address/130/0x284f11109359a7e1306c3e447ef14d38400063ff (router) - https://defipunkd.com/address/42161/0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9 (factory) - https://defipunkd.com/address/42161/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Tempo: 0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f (chain not supported by the read API) - Tempo: 0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e (chain not supported by the read API) - https://defipunkd.com/address/43114/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/43114/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Binance: 0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (chain not supported by the read API) - Binance: 0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24 (chain not supported by the read API) - https://defipunkd.com/address/8453/0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (factory) - https://defipunkd.com/address/8453/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - https://defipunkd.com/address/10/0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf (factory) - https://defipunkd.com/address/10/0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2 (router) - https://defipunkd.com/address/137/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/137/0xedf6066a2b290C185783862C7F4776A2C8077AD1 (router) - https://defipunkd.com/address/81457/0x5C346464d33F90bABaf70dB6388507CC889C1070 (factory) - https://defipunkd.com/address/81457/0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035 (router) - Zora: 0x0F797dC7efaEA995bB916f268D919d0a1950eE3C (chain not supported by the read API) - Zora: 0xa00F34A632630EFd15223B1968358bA4845bEEC7 (chain not supported by the read API) - Monad: 0x182a927119d56008d921126764bf884221b10f59 (chain not supported by the read API) - Monad: 0x4b2ab38dbf28d31d467aa8993f6c2585981d6804 (chain not supported by the read API) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: AUTONOMY Evaluate this protocol's autonomy: can a failure of anything outside its own contracts cause theft or loss of user principal, loss of unclaimed yield, or materially change the protocol's expected performance? "Autonomy" is not "has zero external touchpoints" — it is "external failures are either survivable or recoverable without user loss". This slice adapts DefiScan v1's Autonomy dimension; dependencies are one of several criteria, not the whole frame. GUARDRAILS (read before grading): - Category alone (Liquid Staking, Bridge, RWA Lending, Restaking, …) does NOT force a grade. A category is a hint about where to look; the grade must come from the concrete A1–A9 findings below. - Base-chain consensus (Ethereum PoS, the chain's validator set, the canonical Deposit Contract at 0x00000000219ab540356cBB839Cbe05303d7705Fa) is the SUBSTRATE, not a dependency, for any protocol deployed on that chain. Do not list "depends on Ethereum" as a finding. - Oracles or other integrations used by DOWNSTREAM protocols that happen to read this protocol's token (e.g. Chainlink stETH/USD consumed by Aave) are NOT this protocol's dependencies. Count only what THIS protocol's contracts call or trust on-chain. If a feed or contract appears in the protocol's docs only as reference material for third-party integrators, EXCLUDE IT ENTIRELY — do not log it as a finding even with a "peripheral" or "referenced only" caveat. - "Upgradeable admin can change things" belongs to the CONTROL slice; only count it here when the upgrade surface lets governance silently swap an external dependency (see A9). - Underlying-asset risk in opt-in, isolated markets is NOT autonomy-red on its own. When a protocol wraps third-party yield-bearing assets (LSTs, LRTs, ERC-4626 vaults, lending receipts, restaked tokens) into per-market silos that users explicitly choose, a failure of one underlying does NOT propagate to other markets and is risk the user opted into per-market. Record it under A4 with depth and propagation scope, but do not let it alone drive a red verdict — red requires an external dependency that cross-cuts the protocol or that the user did not opt into at deposit time. A failure mode that is "if the LRT you deposited is hacked, your principal in that LRT-backed market is impaired" is the underlying's autonomy story, not this protocol's; grade it on whether THIS protocol introduces additional dependencies on top. - Sub-module enumeration is mandatory before grading. If the protocol ships distinct product lines or modules (e.g., a v2 core AMM plus a newer perps/funding-rate module, a lending pool plus a separate vault layer, an L1 core plus a cross-chain extension), enumerate each in findings and grade against the WORST module weighted by its share of TVS or its blast radius. A green core does not rescue an orange/red sub-module; conversely, a small red sub-module with capped TVS may bound the overall grade to orange. Name each module by its on-chain factory or router address. If you do not know whether a module exists, that is an unknowns[] entry, not silence. EXPLICIT TVS WEIGHTING: in the verdict, state each module's approximate share of total protocol TVS (use "~X%" if exact figures unavailable; check DeFiLlama or block-explorer balances on the module's main contract) and how that share informs the weighted grade. Format: "Module A holds ~X% of TVS (grade: <g>); Module B holds ~Y% (grade: <g>); weighted overall = <grade> because <reason>." If a red sub-module holds <5% of total TVS and is capped, the overall grade may be orange; if it holds >25%, the overall grade is red. Do not let qualitative reasoning substitute for the percentages — write the numbers. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. External contract calls. Enumerate every external contract the core contracts call or read from (oracles, price feeds, AMM pools, lending pools, staking/deposit contracts, yield wrappers). For each, identify the address, the provider, and what user-facing function of this protocol would break or mis-price if that external contract paused, mis-reported, or behaved adversarially. Grep for "oracle", "aggregator", "getPrice", "latestAnswer", "chainlink", "pyth", "redstone" as a starting point. To verify an oracle is live and what it currently reports, hit https://defipunkd.com/api/contract/read?chainId=<id>&address=<oracle>&method=latestAnswer (or &method=latestRoundData, &method=getPrice, &method=description; use the BARE method name without parens) and cite the URL — the response includes blockNumber/blockHash and rawReturnData, which is stronger evidence than a docs page about which feed "should" be used. - A2. Off-chain actor committees reporting INTO the protocol. Oracle committees, guardian multisigs, DAO-selected validator sets acting as protocol reporters, exit-bus signers, fraud-proof challengers. For each, record committee size, quorum, who picks the members, and what mis-reporting could do (mint, burn, finalize withdrawal, freeze). Distinguish this from governance admins (control slice). NOTE ON STAKING PROTOCOLS: validator slashing and node-operator misbehavior are properties of the base-chain substrate, NOT external dependencies, when the operator set is diversified enough that a coordinated failure caps at <5% principal loss. Count validator/operator risk under A2 ONLY if the operator set is small, non-diversified, or lacks bonding / slashing-insurance / diversification mitigations. A curated set of 30+ independent operators with documented diversification falls under the mitigated path; a 3-operator LST does not. Do not cite the protocol's own risk disclosure as evidence that operator failure = principal loss unless you also check the diversification and bond mitigations. - A3. Bridge / cross-chain messaging dependencies. Only count bridges that carry material TVL or are required for a core user flow. For each, name the bridge operator (canonical L1↔L2, LayerZero, Wormhole, Axelar, custom multisig), the trust model (canonical, optimistic, light-client, guardian set), and what fraction of TVL or users ride on it. "wstETH exists on 15 chains" is not a finding unless material TVL sits there. Before listing any non-primary chain deployment as a dependency, verify it is still operational as of analysis_date — retired or sunset deployments (e.g., Lido-on-Terra, Lido-on-Solana) belong in unknowns[] or should be omitted, never cited as a current dependency. - A4. Nested collateral / restaking chains. For restaking / LRT / receipt-of-receipt designs: record the depth of the collateral chain, every actor with slashing or freezing power at each level, and whether a failure N levels deep propagates to user principal here. - A5. Fork lineage (silent check). If DeFiLlama's forkedFrom is non-empty, record it as one finding and move on. If empty, do NOT add a placeholder finding; it adds noise. - A6. Fallback mechanisms and circuit breakers. What catches an external failure? Sanity-check contracts on oracle reports, rebase bounds, pause paths triggered by bad prices, second-opinion oracles, max-per-block throughput caps, withdrawal queues that absorb bad reports. Record which A1–A4 risks are mitigated by which fallback, and which are unmitigated. For EACH fallback you cite, state its activation status explicitly: (i) LIVE and enforcing on-chain today, (ii) DEPLOYED but not yet wired / activated (e.g., interface exists but the address is zero or the role is unassigned), or (iii) DOCUMENTED / PROPOSED only (forum post, LIP draft, audit pending). Only (i) counts as mitigation for the grade. A fallback in state (ii) or (iii) should be noted but must not reduce the risk in your steel-man or verdict. If you cannot determine activation status, add an unknowns[] entry rather than assume it is live. - A7. Sequencer / L1-liveness dependency BEYOND the base-chain substrate. SCOPE — sequencer risk only counts here when the protocol IS its own L2/L3 appchain or app-rollup, where the sequencer is part of the protocol's own stack and a freeze is a protocol-level outage. A protocol permissionlessly deployed on a third-party L2 inherits that L2's sequencer as substrate, not an A7 dependency. Record the sequencer/DA trust model when A7 applies. - A8. Keeper / relayer / off-chain bot liveness. Protocols that need permissionless-but-necessary off-chain actors (liquidation bots, auto-compounders, deposit relayers, intent solvers). Record whether the role is permissionless, what degrades if nobody runs it (yield paused, bad debt accumulates, positions go stale), and whether the failure mode is graceful or catastrophic. - A9. Governance-mutable dependency surface. Can an admin or DAO action silently INTRODUCE a NEW EXTERNAL dependency — swap the oracle address to a different provider, register a new staking module that calls an untrusted contract, add a new bridge, route SY through a new external vault — without an exit window for users? Check the upgrade / router / module-registry contracts. Answer: which EXTERNAL dependencies are governance-mutable, who holds that power, and whether there is a timelock or exit window. SCOPE LIMIT — read carefully: A9 is about the *external dependency surface*, not the upgrade surface in general. "The proxyAdmin / EOA can upgrade the router implementation to arbitrary bytecode" is a CONTROL-slice finding (admin can rug), NOT an autonomy-A9 finding. A9 fires only when the upgrade specifically swaps out or adds a contract that THIS protocol calls or trusts (e.g., changing the oracle address from Chainlink to a malicious feed, registering a new SY adapter that points to a third-party vault, redirecting a bridge endpoint). If the only finding is "admin can change implementation," do not log it under A9 and do not let it drive the autonomy grade — note it under control instead. The autonomy-relevant version of the same upgrade key is "admin can swap [specific external address X] without timelock"; that requires identifying the specific external dependency that becomes mutable. STEEL-MAN (per Hard Rule 13): write one-sentence strongest arguments for red, orange, and green using the A1–A9 findings. IMPACTED TVS ESTIMATE: the headline MUST include a rough impacted-TVS figure — the fraction of protocol TVS that could be lost or frozen if the worst-unmitigated dependency you identified failed. Use "~X%" if exact numbers are unavailable, "<1%" for de minimis, "unclear" only if A1–A9 left the question genuinely open (in which case grade=unknown is usually correct). Do NOT substitute qualitative phrases like "significant" — give a number or bracket. GRADE ANCHORS (mapped to DefiScan v1 stages): - green = Stage 2 equivalent. Failure of any external dependency cannot cause loss of user principal or unclaimed yield. Either there are no material external dependencies, or every critical one has a documented fallback (A6) that keeps users whole. Governance cannot silently introduce new dependencies without an exit window (A9). Impacted TVS under any single-dependency failure: effectively 0. - orange = Stage 1 equivalent. Failure of some external dependency can cause loss of unclaimed yield, or can materially change expected performance (pause withdrawals, freeze positions, degrade price quality), but cannot cause loss of principal. Committee-based oracles with sanity checks, canonical-only bridges, fallback paths that exist but are incomplete, or governance-mutable dependencies protected by a ≥7-day timelock. Impacted TVS is bounded and recoverable. - red = Stage 0 equivalent. Failure of an external dependency CAN cause theft or loss of principal. Examples: single-provider oracle with no sanity check or fallback, material TVL on a non-canonical bridge with a guardian multisig, governance can hot-swap oracles or add staking modules with no timelock or exit window, unmitigated keeper-liveness dependency where positions become insolvent if bots stop. Impacted TVS is material. - unknown = checklist incomplete after inspecting source + verified contracts. Prefer unknown over guessing when A1/A6 could not be reconstructed. RESERVE unknown for cases where the CORE ARCHITECTURE itself is unverifiable — not for cases where you merely cannot enumerate every per-market dependency in a multi-market protocol. If the core router/factory/oracle architecture is verifiable on-chain and you can determine whether the core requires external dependencies, grade the architecture even when an exhaustive per-market external-dependency census is infeasible. Acknowledge the per-market gap in unknowns[] but still issue a grade. Refusing to grade a multi-market protocol because you cannot list every SY/vault/market is over-use of unknown; grade the architecture and say so. PROMPT-META CHECK (per Hard Rule 17): before finalizing, verify the verdict cites concrete contract addresses, docs, or code — not the rubric itself. If your verdict says "the protocol belongs to a category the rubric marks red", rewrite it with the A1–A9 finding that actually justifies the grade, or drop to grade=unknown. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "autonomy", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Open Access
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v2 - protocol.name: Uniswap V2 - protocol.chains: Ethereum, Base, Polygon, Arbitrum, Binance, Monad, Optimism, X Layer, Avalanche, Unichain, Tempo, Zora, Celo - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f", "role": "factory" }, { "chain": "Ethereum", "address": "0x7a250d5630b4cf539739df2c5dacb4c659f2488d", "role": "router" }, { "chain": "Ethereum", "address": "0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b", "role": "migrator" }, { "chain": "Ethereum", "address": "0x1f98400000000000000000000000000000000001", "role": "factory" }, { "chain": "Sepolia", "address": "0xF62c03E08ada871A0bEb309762E260a7a6a880E6", "role": "factory" }, { "chain": "Sepolia", "address": "0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3", "role": "router" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000002", "role": "factory" }, { "chain": "Unichain", "address": "0x284f11109359a7e1306c3e447ef14d38400063ff", "role": "router" }, { "chain": "Arbitrum", "address": "0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9", "role": "factory" }, { "chain": "Arbitrum", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Tempo", "address": "0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f", "role": "factory" }, { "chain": "Tempo", "address": "0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e", "role": "router" }, { "chain": "Avalanche", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Avalanche", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Binance", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Binance", "address": "0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24", "role": "router" }, { "chain": "Base", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Base", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Optimism", "address": "0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf", "role": "factory" }, { "chain": "Optimism", "address": "0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2", "role": "router" }, { "chain": "Polygon", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Polygon", "address": "0xedf6066a2b290C185783862C7F4776A2C8077AD1", "role": "router" }, { "chain": "Blast", "address": "0x5C346464d33F90bABaf70dB6388507CC889C1070", "role": "factory" }, { "chain": "Blast", "address": "0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035", "role": "router" }, { "chain": "Zora", "address": "0x0F797dC7efaEA995bB916f268D919d0a1950eE3C", "role": "factory" }, { "chain": "Zora", "address": "0xa00F34A632630EFd15223B1968358bA4845bEEC7", "role": "router" }, { "chain": "Monad", "address": "0x182a927119d56008d921126764bf884221b10f59", "role": "factory" }, { "chain": "Monad", "address": "0x4b2ab38dbf28d31d467aa8993f6c2585981d6804", "role": "router" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f (factory) - https://defipunkd.com/address/1/0x7a250d5630b4cf539739df2c5dacb4c659f2488d (router) - https://defipunkd.com/address/1/0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b (migrator) - https://defipunkd.com/address/1/0x1f98400000000000000000000000000000000001 (factory) - https://defipunkd.com/address/11155111/0xF62c03E08ada871A0bEb309762E260a7a6a880E6 (factory) - https://defipunkd.com/address/11155111/0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3 (router) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000002 (factory) - https://defipunkd.com/address/130/0x284f11109359a7e1306c3e447ef14d38400063ff (router) - https://defipunkd.com/address/42161/0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9 (factory) - https://defipunkd.com/address/42161/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Tempo: 0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f (chain not supported by the read API) - Tempo: 0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e (chain not supported by the read API) - https://defipunkd.com/address/43114/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/43114/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Binance: 0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (chain not supported by the read API) - Binance: 0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24 (chain not supported by the read API) - https://defipunkd.com/address/8453/0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (factory) - https://defipunkd.com/address/8453/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - https://defipunkd.com/address/10/0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf (factory) - https://defipunkd.com/address/10/0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2 (router) - https://defipunkd.com/address/137/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/137/0xedf6066a2b290C185783862C7F4776A2C8077AD1 (router) - https://defipunkd.com/address/81457/0x5C346464d33F90bABaf70dB6388507CC889C1070 (factory) - https://defipunkd.com/address/81457/0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035 (router) - Zora: 0x0F797dC7efaEA995bB916f268D919d0a1950eE3C (chain not supported by the read API) - Zora: 0xa00F34A632630EFd15223B1968358bA4845bEEC7 (chain not supported by the read API) - Monad: 0x182a927119d56008d921126764bf884221b10f59 (chain not supported by the read API) - Monad: 0x4b2ab38dbf28d31d467aa8993f6c2585981d6804 (chain not supported by the read API) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: OPEN-ACCESS Evaluate who is allowed to use the protocol and whether any of that permission is granted off-chain. Scope: this slice is about ADMISSION — who can enter, exit, or transact. Operator LIVENESS (what breaks if keepers/oracles go offline) is assessed in the dependencies slice and is out of scope for the grade here. You may note operator dependencies as context, but do not let "the protocol halts if operator X disappears" drive the access grade on its own; that belongs in dependencies. Source verification / contract verification on block explorers is assessed in the verifiability slice and is out of scope here — do NOT let "contract is unverified" drive the access grade. Framing: the smart contracts are the access layer; frontends are UX. A permissionless contract is reachable by any client (SDK, third-party UI, aggregator, wallet integration). Frontend ToS, IP geo-blocking, and wallet screening are publisher policies on one specific client — they are reported as context but do NOT determine the grade. The grade hinges on (1) what the contract itself permits, and (2) whether the protocol is practically reachable without the official publisher's cooperation. Meta-check before finalizing: if your verdict cites phrases from this prompt as evidence ("the protocol meets the 'credible alternatives' condition", "this fits the 'documented fallback' rule"), redo the verdict. The prompt describes the rubric; evidence must come from the protocol. A verdict should cite what the protocol does, not what the rubric says. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. Whitelist / allowlist modifiers in user-facing entry points. Grep for "onlyWhitelisted", "onlyRole", "allowlist", "isAccredited", "isKYCed". Note which functions are gated and who can add/remove from the list. - A2. Off-chain operators in the admission path: keepers, sequencers, privileged relayers, oracle posters whose approval is required to admit a user action (not just to keep the protocol live). For each, identify whether the role is held by a single operator, a permissioned committee, or is permissionless. Enumerate per user-facing function class (deposit vs withdraw-request vs claim-finalized vs transfer) which ones require operator approval to be admitted, and which ones admit users unconditionally. A function whose placement is unconditional but whose downstream settlement depends on an operator is an admission-permissionless function — flag the liveness dependency as context and defer its grading weight to the dependencies slice. - A3. Frontend restrictions on the official interface — record as context, not as a grade lever. Distinguish: - A3-passive: boilerplate ToS clauses (sanctions attestation, restricted-territory self-certification, VPN-circumvention prohibition, "comply with applicable law" eligibility, age of majority). - A3-active: runtime enforcement — IP-based geo-blocking, wallet-address screening against a sanctions oracle (Chainalysis, TRM, Elliptic), KYC wall, rendering-blocking jurisdiction banner. Record findings under the correct tier. Quote ToS text or banner text in evidence[].shows. These findings populate the headline and rationale but do NOT move the grade by themselves; the grade is set by A1, A2, and the A3b path check below. - A3b. Independent access paths (the operative grade input). Enumerate paths that do not require the official publisher's cooperation: - Published SDK / library / CLI for direct contract interaction. - Third-party frontends operated by separate legal entities. - Wallet-integrated access (MetaMask Swaps, Safe apps, etc.). - DEX / lending / yield aggregators that route through the contracts. Record at least one concrete link per path that exists. The protocol does NOT have to self-document these — the test is existence, not UX cost. An A3b-i redistribution of the official UI bound by the same ToS does NOT count as an independent path. - A4. Sanctions / compliance tooling at the contract level: does the protocol check addresses against OFAC lists or similar on-chain blocklists in the contract itself? (Frontend-only screening belongs in A3.) - A5. Differentiate read access vs write access: many protocols are read-permissionless (anyone can view state) but write-gated (only certain addresses can deposit/borrow). Record both. - A6. ToS / Legal links: locate them on the website and produce a VERBATIM quote of any jurisdictional, sanctions, or eligibility clause in evidence[].shows. If you cannot extract the clause text verbatim (SPA render failure, paywall, dead link, etc.), do NOT paraphrase or infer from general knowledge — record the ToS URL in unknowns[] with the reason extraction failed. Assertions about ToS content without a verbatim quote will be downweighted by reviewers. Then write the steel-man section per Hard Rule 11. Grade rules (admission-focused; liveness concerns belong in dependencies; source verification belongs in verifiability): - green = no contract-level whitelist/KYC on user entry/exit; no operator approval required to admit a user action; AND at least one independent A3b path exists (published SDK, third-party frontend, wallet integration, or aggregator routing). Frontend ToS posture and A3-active enforcement on the official UI do NOT block green when contracts are permissionless and an independent path exists — they are reported as context. - orange = contracts admit users unconditionally, BUT the protocol is operationally captured by the official publisher: no published SDK, no third-party frontend, no wallet integration, no aggregator routing. The contract is theoretically open but practically reachable only through the official UI. Also applies when admission requires approval from a permissioned committee that is governance-managed with a documented replacement procedure. - red = contract-level whitelist / KYC on user entry/exit, OR admission of a core user action requires approval from a single privileged operator or a small committee with no documented replacement procedure, OR enforces an on-chain blocklist updatable by a single party. - unknown = checklist incomplete after checking the sources above. Default-grade guidance: when contracts are fully permissionless AND any A3b independent path exists, the default grade is green regardless of frontend ToS or A3-active enforcement on the official UI. Frontend geo-blocking, sanctions-oracle wallet screening, and ToS sanctions clauses are publisher policies on one client and are reported in findings/headline as context, not as grade levers. To grade orange on operational-capture grounds, the auditor must affirmatively show that ALL independent paths are absent or also gated. Guideline on committees: where admission depends on a multi-operator committee, the relevant axes are (a) set size, (b) whether replacement/rotation is governed on-chain, (c) whether the replacement procedure is publicly documented. A large set with on-chain governance replacement should not be graded as a single-party operator even if rotation is not instantaneous. A small set with informal replacement should be treated as a single-party operator. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "open-access", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Audit all 5 dimensions · one prompt Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v2 - protocol.name: Uniswap V2 - protocol.chains: Ethereum, Base, Polygon, Arbitrum, Binance, Monad, Optimism, X Layer, Avalanche, Unichain, Tempo, Zora, Celo - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f", "role": "factory" }, { "chain": "Ethereum", "address": "0x7a250d5630b4cf539739df2c5dacb4c659f2488d", "role": "router" }, { "chain": "Ethereum", "address": "0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b", "role": "migrator" }, { "chain": "Ethereum", "address": "0x1f98400000000000000000000000000000000001", "role": "factory" }, { "chain": "Sepolia", "address": "0xF62c03E08ada871A0bEb309762E260a7a6a880E6", "role": "factory" }, { "chain": "Sepolia", "address": "0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3", "role": "router" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000002", "role": "factory" }, { "chain": "Unichain", "address": "0x284f11109359a7e1306c3e447ef14d38400063ff", "role": "router" }, { "chain": "Arbitrum", "address": "0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9", "role": "factory" }, { "chain": "Arbitrum", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Tempo", "address": "0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f", "role": "factory" }, { "chain": "Tempo", "address": "0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e", "role": "router" }, { "chain": "Avalanche", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Avalanche", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Binance", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Binance", "address": "0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24", "role": "router" }, { "chain": "Base", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Base", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Optimism", "address": "0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf", "role": "factory" }, { "chain": "Optimism", "address": "0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2", "role": "router" }, { "chain": "Polygon", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Polygon", "address": "0xedf6066a2b290C185783862C7F4776A2C8077AD1", "role": "router" }, { "chain": "Blast", "address": "0x5C346464d33F90bABaf70dB6388507CC889C1070", "role": "factory" }, { "chain": "Blast", "address": "0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035", "role": "router" }, { "chain": "Zora", "address": "0x0F797dC7efaEA995bB916f268D919d0a1950eE3C", "role": "factory" }, { "chain": "Zora", "address": "0xa00F34A632630EFd15223B1968358bA4845bEEC7", "role": "router" }, { "chain": "Monad", "address": "0x182a927119d56008d921126764bf884221b10f59", "role": "factory" }, { "chain": "Monad", "address": "0x4b2ab38dbf28d31d467aa8993f6c2585981d6804", "role": "router" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f (factory) - https://defipunkd.com/address/1/0x7a250d5630b4cf539739df2c5dacb4c659f2488d (router) - https://defipunkd.com/address/1/0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b (migrator) - https://defipunkd.com/address/1/0x1f98400000000000000000000000000000000001 (factory) - https://defipunkd.com/address/11155111/0xF62c03E08ada871A0bEb309762E260a7a6a880E6 (factory) - https://defipunkd.com/address/11155111/0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3 (router) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000002 (factory) - https://defipunkd.com/address/130/0x284f11109359a7e1306c3e447ef14d38400063ff (router) - https://defipunkd.com/address/42161/0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9 (factory) - https://defipunkd.com/address/42161/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Tempo: 0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f (chain not supported by the read API) - Tempo: 0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e (chain not supported by the read API) - https://defipunkd.com/address/43114/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/43114/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Binance: 0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (chain not supported by the read API) - Binance: 0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24 (chain not supported by the read API) - https://defipunkd.com/address/8453/0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (factory) - https://defipunkd.com/address/8453/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - https://defipunkd.com/address/10/0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf (factory) - https://defipunkd.com/address/10/0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2 (router) - https://defipunkd.com/address/137/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/137/0xedf6066a2b290C185783862C7F4776A2C8077AD1 (router) - https://defipunkd.com/address/81457/0x5C346464d33F90bABaf70dB6388507CC889C1070 (factory) - https://defipunkd.com/address/81457/0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035 (router) - Zora: 0x0F797dC7efaEA995bB916f268D919d0a1950eE3C (chain not supported by the read API) - Zora: 0xa00F34A632630EFd15223B1968358bA4845bEEC7 (chain not supported by the read API) - Monad: 0x182a927119d56008d921126764bf884221b10f59 (chain not supported by the read API) - Monad: 0x4b2ab38dbf28d31d467aa8993f6c2585981d6804 (chain not supported by the read API) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: CONTROL Evaluate who can change the protocol's rules, how fast, and how broadly. (Step 0 capability probe and the off-chain-only fallback live in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]) - **C1.** For each address you assess: who is the contract owner / admin / pendingAdmin / governor — read these via the block explorer's "Read Contract" tab OR `https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=owner` (BARE method names: `&method=owner`, `&method=admin`, `&method=pendingOwner`, `&method=governor`). For Safes use `/api/safe/owners?chainId=<id>&address=0x...`. When a protocol has multiple major versions deployed (v2/v3/v4), perform C1 reads on the NEWEST deployment separately — newer deployments often have weaker control surfaces than the legacy core. - **C2.** Upgrade mechanism: transparent proxy / UUPS / Beacon / Diamond / immutable. Identify the proxy admin address. Check upgradeability of GOVERNANCE contracts too — a Governor / Aragon Voting / OZ Governor is often itself a proxy whose admin is the Timelock. Asymmetry: when fund-holding cores are immutable AND governance has no admin path that reaches them, an upgradable Governor/Timelock is T3-only and must NOT drag the verdict below green on that basis alone (see grade rules and the "immutable cores" caveat). Only call upgradability "mixed" if you can name a concrete function on the upgradable surface that reaches T1 or T2 on user funds. - **C3.** EXECUTION PATH (enumerate every stage, in order, with delays in seconds). The operative path is usually a chain (voting → scheduler → timelock → executor; or governor → queue → execute; or Aragon Voting → DualGovernance → EmergencyProtectedTimelock → AdminExecutor). For each stage, record (a) the contract address, (b) the delay constant name + value in seconds, (c) the URL you read it from (block-explorer Read Contract OR `/api/contract/read?...&method=MIN_DELAY&block=<n>`). Do NOT stop at the first timelock-shaped contract — if its admin is itself called by another contract, keep walking. The grading delay is the SUM OF DELAYS ON THE UNCONTESTED FAST PATH (shortest time a proposal with no opposition can go from submission to executable). Dynamic / contested extensions (veto signaling, rage quit, escrow delay) are modifiers, not the basis — note them separately. - **C4.** Enumerate EVERY multisig with reachable control — main proxy admin, emergency activation, emergency execution, reseal / pause, gate-seal committees, tiebreaker, per-module admins. For each Safe, fetch threshold + owners + version via `/api/safe/owners?chainId=<id>&address=0x...` (response includes raw eth_call data, so the URL is citable evidence). Enumerate ops/council/incentives multisigs even when off the upgrade path — record their scope so a reader can see they are NOT on the upgrade path. For each: (a) address, (b) threshold / total signers, (c) signer identities classified as insider (team, paid auditors under ongoing engagement, mandated service providers) vs non-insider (independent community members, unaffiliated researchers), (d) the specific power held (upgrade, pause, parameter, etc.). - **C5.** On-chain governance: Governor / GovernorBravo / OZ Governor / Aragon Voting with token-weighted voting? Record proposal threshold, voting period, quorum, and the timelock delay between queue and execute. Every numeric constant must come from a Read Contract call you can link to, or be in unknowns[] with the C-code. If votingDelay / votingPeriod are denominated in BLOCKS, convert to seconds at the chain's CURRENT block time (Ethereum mainnet ≈ 12s post-Merge, not the 15s in older Compound/Bravo deployments) — cite both block count and converted seconds. - **C6.** EMERGENCY POWERS: separate emergency-pause / guardian role with a different time cap or different actor than the main upgrade authority? Record it explicitly. - **C7.** POWER TIER (blast radius). For each privileged path in C3–C6, classify the WORST thing that path can do, choosing the highest applicable tier. Cite the specific function name and any on-chain bound — tier claims without a named function are unsupported. - **T1 — FUND-CRITICAL**: replace implementation of contracts holding user funds; change AMM math / accounting / collateral logic; mint unbacked debt or shares; pause withdrawals; drain user-fund treasury; change oracle to attacker-controlled source; replace upgrade admin with EOA. - **T2 — ECONOMICALLY MATERIAL**: change fee parameters within bounded ranges; redirect protocol fees; add/remove markets / collateral types; bounded inflation or token mint within hard-capped schedule; spend protocol-owned (non-user) treasury. - **T3 — GOVERNANCE-INTERNAL**: change voting rules, quorum, voting period, proposal threshold; upgrade the Governor itself; rotate Timelock admin; mint governance tokens within a capped annual schedule. - **T4 — OPERATIONAL**: incentives distribution, grants, ENS / frontend canonicalization, deployment coordination, periphery router deprecation. The grade is set by the HIGHEST tier reachable on the uncontested fast path, not the median. State the tier and the binding function in the verdict. ### Read Contract discipline (applies to C3, C4, C5) Every numeric constant cited (timelock delays, voting periods, multisig thresholds, quorum percentages) must come from EITHER (a) a block-explorer Read Contract URL, OR (b) a DeFiPunkd `/api/contract/read` or `/api/safe/owners` URL (preferred with `&block=<n>` for content-addressed evidence), OR (c) an unknowns[] entry with the C-code. Docs / blog posts are corroboration only — they cannot be the sole citation for a value that is also readable on-chain. ### Off-chain-only substitute hierarchy (when grading_basis="off-chain-only" — see preamble Rule 16) When on-chain reads were genuinely unreachable this run, eligible off-chain substitutes in priority order: 1. Linked audit PDFs (admin roles, multisig members, timelock delays usually enumerated). 2. Governance forum posts that quote constants from a successful on-chain proposal (cite post URL + linked execution-tx URL). 3. Official protocol docs pages with named addresses and roles (must be on a domain owned by the protocol). 4. GitHub README / SECURITY.md / governance/*.md at a pinned commit SHA. Forbidden substitutes: third-party blog posts, X / Twitter threads, search-result snippets, model memory. Required degradation: any C-code citing a numeric constant from docs/forum/audit prose ONLY must also carry an `unknowns[]` entry with `-offchain` suffix noting "value not re-read on-chain in this run; corroboration only". ### Grade rules (apply the timelock bar conditional on the highest C7 tier reachable on the fast path) Security Council standard (used below): a multisig qualifies as "Security Council" only if ALL of: ≥7 signers, ≥51% threshold, ≥50% non-insider signers, every signer publicly announced. Failing any criterion = NOT a Security Council, regardless of signer reputation. - **green**: highest reachable tier is T3 or T4 regardless of timelock; OR T2 reachable with uncontested-fast-path delay ≥7 days; OR T1 reachable only via immutable contracts (T1 is unreachable); OR T1 reachable with uncontested-fast-path delay ≥7 days combined with a Security Council multisig; OR T1 reachable with uncontested-fast-path delay ≥7 days through active on-chain governance with broad token distribution. - **orange**: T2 reachable with uncontested-fast-path delay >0 but <7 days; OR T1 reachable with uncontested-fast-path delay >0 but <7 days; OR a multisig failing one or more Security Council criteria sits on a T1/T2 path; OR unclear upgrade authority on a T1/T2 path; OR governance with very short timelock or low quorum on a T1/T2 path. - **red**: T1 reachable with no timelock by a single EOA or 2-of-3 multisig; OR a T1 upgrade admin that is not a smart contract you can audit. - **unknown**: completed the checklist but still cannot determine the upgrade authority OR cannot classify the highest tier reachable on the main contracts. Tiering caveats: - "Bounded" must be enforced ON-CHAIN to count as T2. A function that sets fees with no upper-bound check is T1 — cite the bound check. - Recurring T2 economic extraction (e.g. fee redirect with no rate limit) approaches T1 over time. A single proposal that can permanently redirect all future revenue is T1. - T3 assumes the governance contract cannot itself authorize a T1/T2 action without going through the same timelock. If governance can self-upgrade to bypass the timelock, T3 collapses into T1. - Do not downgrade tier by hand-waving ("realistically governance would never…"). Tier on what the contract permits, not what feels likely. Notes: - **Dynamic / dual-governance timelocks** (Lido, Compound escrow veto): the rubric grades on the uncontested path because that is the path most upgrades take. A dynamic extension that fires only under stake-weighted opposition is a real protection — name it in the green steel-man, but it does not lift an orange fast path into green; state the tension in the verdict. - **Immutable cores with upgradable governance** (Uniswap-style): if fund-holding contracts are immutable and have no admin-reachable function moving / freezing / re-routing user funds, the highest reachable tier on the upgrade path is T3 — green regardless of timelock. Don't grade this orange just because the Governor is a proxy — that's a C2 fact, not a downgrade. Downgrade only applies if you can cite a concrete function on the upgradable surface that reaches T1 or T2 (privileged hook, upgradable factory controlling fund-routing, fee-switch redirecting protocol revenue without bound). - **The 7-day bar** reflects the exit-window standard — users need notice after a queued upgrade to withdraw if they disagree. The ability-to-exit slice grades the exit side; this slice grades the delay side; both must hold for users to actually benefit from the delay. --- ### Slice: ABILITY-TO-EXIT Evaluate whether users can withdraw their funds on their own terms, even under adversarial admin conditions. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - E1. Enumerate every user-facing exit function in the main contracts: withdraw, redeem, burn, requestWithdrawal, claim, exit, etc. List them by name. Do NOT treat the contract as a monolith. - E2. For EACH exit function in E1: identify its access modifiers and any pause guards (e.g. _checkResumed, whenNotPaused, onlyRole). Functions that gate REQUEST PLACEMENT often differ from functions that CLAIM FINALIZED FUNDS — check both separately. - E3. For each pause guard: identify the role holder (which address holds PAUSE_ROLE / GUARDIAN / etc.) and the maximum pause duration. Specifically check whether PAUSE_INFINITELY (or equivalent uncapped pause) is callable, and which actor can call it (single multisig vs governance vote). For role-holder reads use https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=hasRole&args=0x...,0x... or &method=getRoleAdmin&args=0x.... For "is currently paused" checks use &method=paused or &method=isPaused&args=<resume-code>. Use the BARE method name (no parens). Cite the URL with &block=<n> in evidence[]. - E4. EMERGENCY vs GOVERNANCE pause distinction: many protocols have a fast-acting emergency pause capped at N days and a slow governance pause that can be indefinite. Record both paths separately if present, with their time caps and actor classes. - E5. Queued redemption: documented maximum queue duration, daily withdrawal caps, whether the queue itself is pausable. - E6. Forced-exit / escape-hatch / permissionless emergency-exit mechanism for adversarial-admin scenarios. - E7. Frontend dependency: confirm exit functions are directly callable on-chain (e.g. via Etherscan write tab or a generic wallet) without the project's frontend. Then write the steel-man section per Hard Rule 11. Common red-vs-orange tension on this slice: indefinite pause exists (suggests red) BUT the realistic emergency path is time-capped AND claims of already-finalized exits are not pause-gated (suggests orange). Resolve this by stating who can do what for how long, not by stopping at the worst-case sentence. Grade rules: - green = permissionless exit; pause is either absent, narrowly scoped to clearly-described emergencies with auto-expiry, or capped at ≤7 days; no frontend dependency for exit; claims of already-finalized exits are not pause-gated under any path. - orange = pausable with broad scope OR indefinite pause is reachable only through governance vote (not unilateral admin action), OR queued redemption with documented max > 7 days, OR claims-of-finalized are exempt but new-request placement can be paused indefinitely by governance. - red = exit requires admin signature, OR ANY actor (including governance) can pause CLAIMS of finalized exits indefinitely, OR there is no on-chain exit function at all (purely custodial), OR pause is held by a single EOA / 2-of-3 multisig with no time cap. - unknown = checklist incomplete after checking the sources above. --- ### Slice: AUTONOMY Evaluate this protocol's autonomy: can a failure of anything outside its own contracts cause theft or loss of user principal, loss of unclaimed yield, or materially change the protocol's expected performance? "Autonomy" is not "has zero external touchpoints" — it is "external failures are either survivable or recoverable without user loss". This slice adapts DefiScan v1's Autonomy dimension; dependencies are one of several criteria, not the whole frame. GUARDRAILS (read before grading): - Category alone (Liquid Staking, Bridge, RWA Lending, Restaking, …) does NOT force a grade. A category is a hint about where to look; the grade must come from the concrete A1–A9 findings below. - Base-chain consensus (Ethereum PoS, the chain's validator set, the canonical Deposit Contract at 0x00000000219ab540356cBB839Cbe05303d7705Fa) is the SUBSTRATE, not a dependency, for any protocol deployed on that chain. Do not list "depends on Ethereum" as a finding. - Oracles or other integrations used by DOWNSTREAM protocols that happen to read this protocol's token (e.g. Chainlink stETH/USD consumed by Aave) are NOT this protocol's dependencies. Count only what THIS protocol's contracts call or trust on-chain. If a feed or contract appears in the protocol's docs only as reference material for third-party integrators, EXCLUDE IT ENTIRELY — do not log it as a finding even with a "peripheral" or "referenced only" caveat. - "Upgradeable admin can change things" belongs to the CONTROL slice; only count it here when the upgrade surface lets governance silently swap an external dependency (see A9). - Underlying-asset risk in opt-in, isolated markets is NOT autonomy-red on its own. When a protocol wraps third-party yield-bearing assets (LSTs, LRTs, ERC-4626 vaults, lending receipts, restaked tokens) into per-market silos that users explicitly choose, a failure of one underlying does NOT propagate to other markets and is risk the user opted into per-market. Record it under A4 with depth and propagation scope, but do not let it alone drive a red verdict — red requires an external dependency that cross-cuts the protocol or that the user did not opt into at deposit time. A failure mode that is "if the LRT you deposited is hacked, your principal in that LRT-backed market is impaired" is the underlying's autonomy story, not this protocol's; grade it on whether THIS protocol introduces additional dependencies on top. - Sub-module enumeration is mandatory before grading. If the protocol ships distinct product lines or modules (e.g., a v2 core AMM plus a newer perps/funding-rate module, a lending pool plus a separate vault layer, an L1 core plus a cross-chain extension), enumerate each in findings and grade against the WORST module weighted by its share of TVS or its blast radius. A green core does not rescue an orange/red sub-module; conversely, a small red sub-module with capped TVS may bound the overall grade to orange. Name each module by its on-chain factory or router address. If you do not know whether a module exists, that is an unknowns[] entry, not silence. EXPLICIT TVS WEIGHTING: in the verdict, state each module's approximate share of total protocol TVS (use "~X%" if exact figures unavailable; check DeFiLlama or block-explorer balances on the module's main contract) and how that share informs the weighted grade. Format: "Module A holds ~X% of TVS (grade: <g>); Module B holds ~Y% (grade: <g>); weighted overall = <grade> because <reason>." If a red sub-module holds <5% of total TVS and is capped, the overall grade may be orange; if it holds >25%, the overall grade is red. Do not let qualitative reasoning substitute for the percentages — write the numbers. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. External contract calls. Enumerate every external contract the core contracts call or read from (oracles, price feeds, AMM pools, lending pools, staking/deposit contracts, yield wrappers). For each, identify the address, the provider, and what user-facing function of this protocol would break or mis-price if that external contract paused, mis-reported, or behaved adversarially. Grep for "oracle", "aggregator", "getPrice", "latestAnswer", "chainlink", "pyth", "redstone" as a starting point. To verify an oracle is live and what it currently reports, hit https://defipunkd.com/api/contract/read?chainId=<id>&address=<oracle>&method=latestAnswer (or &method=latestRoundData, &method=getPrice, &method=description; use the BARE method name without parens) and cite the URL — the response includes blockNumber/blockHash and rawReturnData, which is stronger evidence than a docs page about which feed "should" be used. - A2. Off-chain actor committees reporting INTO the protocol. Oracle committees, guardian multisigs, DAO-selected validator sets acting as protocol reporters, exit-bus signers, fraud-proof challengers. For each, record committee size, quorum, who picks the members, and what mis-reporting could do (mint, burn, finalize withdrawal, freeze). Distinguish this from governance admins (control slice). NOTE ON STAKING PROTOCOLS: validator slashing and node-operator misbehavior are properties of the base-chain substrate, NOT external dependencies, when the operator set is diversified enough that a coordinated failure caps at <5% principal loss. Count validator/operator risk under A2 ONLY if the operator set is small, non-diversified, or lacks bonding / slashing-insurance / diversification mitigations. A curated set of 30+ independent operators with documented diversification falls under the mitigated path; a 3-operator LST does not. Do not cite the protocol's own risk disclosure as evidence that operator failure = principal loss unless you also check the diversification and bond mitigations. - A3. Bridge / cross-chain messaging dependencies. Only count bridges that carry material TVL or are required for a core user flow. For each, name the bridge operator (canonical L1↔L2, LayerZero, Wormhole, Axelar, custom multisig), the trust model (canonical, optimistic, light-client, guardian set), and what fraction of TVL or users ride on it. "wstETH exists on 15 chains" is not a finding unless material TVL sits there. Before listing any non-primary chain deployment as a dependency, verify it is still operational as of analysis_date — retired or sunset deployments (e.g., Lido-on-Terra, Lido-on-Solana) belong in unknowns[] or should be omitted, never cited as a current dependency. - A4. Nested collateral / restaking chains. For restaking / LRT / receipt-of-receipt designs: record the depth of the collateral chain, every actor with slashing or freezing power at each level, and whether a failure N levels deep propagates to user principal here. - A5. Fork lineage (silent check). If DeFiLlama's forkedFrom is non-empty, record it as one finding and move on. If empty, do NOT add a placeholder finding; it adds noise. - A6. Fallback mechanisms and circuit breakers. What catches an external failure? Sanity-check contracts on oracle reports, rebase bounds, pause paths triggered by bad prices, second-opinion oracles, max-per-block throughput caps, withdrawal queues that absorb bad reports. Record which A1–A4 risks are mitigated by which fallback, and which are unmitigated. For EACH fallback you cite, state its activation status explicitly: (i) LIVE and enforcing on-chain today, (ii) DEPLOYED but not yet wired / activated (e.g., interface exists but the address is zero or the role is unassigned), or (iii) DOCUMENTED / PROPOSED only (forum post, LIP draft, audit pending). Only (i) counts as mitigation for the grade. A fallback in state (ii) or (iii) should be noted but must not reduce the risk in your steel-man or verdict. If you cannot determine activation status, add an unknowns[] entry rather than assume it is live. - A7. Sequencer / L1-liveness dependency BEYOND the base-chain substrate. SCOPE — sequencer risk only counts here when the protocol IS its own L2/L3 appchain or app-rollup, where the sequencer is part of the protocol's own stack and a freeze is a protocol-level outage. A protocol permissionlessly deployed on a third-party L2 inherits that L2's sequencer as substrate, not an A7 dependency. Record the sequencer/DA trust model when A7 applies. - A8. Keeper / relayer / off-chain bot liveness. Protocols that need permissionless-but-necessary off-chain actors (liquidation bots, auto-compounders, deposit relayers, intent solvers). Record whether the role is permissionless, what degrades if nobody runs it (yield paused, bad debt accumulates, positions go stale), and whether the failure mode is graceful or catastrophic. - A9. Governance-mutable dependency surface. Can an admin or DAO action silently INTRODUCE a NEW EXTERNAL dependency — swap the oracle address to a different provider, register a new staking module that calls an untrusted contract, add a new bridge, route SY through a new external vault — without an exit window for users? Check the upgrade / router / module-registry contracts. Answer: which EXTERNAL dependencies are governance-mutable, who holds that power, and whether there is a timelock or exit window. SCOPE LIMIT — read carefully: A9 is about the *external dependency surface*, not the upgrade surface in general. "The proxyAdmin / EOA can upgrade the router implementation to arbitrary bytecode" is a CONTROL-slice finding (admin can rug), NOT an autonomy-A9 finding. A9 fires only when the upgrade specifically swaps out or adds a contract that THIS protocol calls or trusts (e.g., changing the oracle address from Chainlink to a malicious feed, registering a new SY adapter that points to a third-party vault, redirecting a bridge endpoint). If the only finding is "admin can change implementation," do not log it under A9 and do not let it drive the autonomy grade — note it under control instead. The autonomy-relevant version of the same upgrade key is "admin can swap [specific external address X] without timelock"; that requires identifying the specific external dependency that becomes mutable. STEEL-MAN (per Hard Rule 13): write one-sentence strongest arguments for red, orange, and green using the A1–A9 findings. IMPACTED TVS ESTIMATE: the headline MUST include a rough impacted-TVS figure — the fraction of protocol TVS that could be lost or frozen if the worst-unmitigated dependency you identified failed. Use "~X%" if exact numbers are unavailable, "<1%" for de minimis, "unclear" only if A1–A9 left the question genuinely open (in which case grade=unknown is usually correct). Do NOT substitute qualitative phrases like "significant" — give a number or bracket. GRADE ANCHORS (mapped to DefiScan v1 stages): - green = Stage 2 equivalent. Failure of any external dependency cannot cause loss of user principal or unclaimed yield. Either there are no material external dependencies, or every critical one has a documented fallback (A6) that keeps users whole. Governance cannot silently introduce new dependencies without an exit window (A9). Impacted TVS under any single-dependency failure: effectively 0. - orange = Stage 1 equivalent. Failure of some external dependency can cause loss of unclaimed yield, or can materially change expected performance (pause withdrawals, freeze positions, degrade price quality), but cannot cause loss of principal. Committee-based oracles with sanity checks, canonical-only bridges, fallback paths that exist but are incomplete, or governance-mutable dependencies protected by a ≥7-day timelock. Impacted TVS is bounded and recoverable. - red = Stage 0 equivalent. Failure of an external dependency CAN cause theft or loss of principal. Examples: single-provider oracle with no sanity check or fallback, material TVL on a non-canonical bridge with a guardian multisig, governance can hot-swap oracles or add staking modules with no timelock or exit window, unmitigated keeper-liveness dependency where positions become insolvent if bots stop. Impacted TVS is material. - unknown = checklist incomplete after inspecting source + verified contracts. Prefer unknown over guessing when A1/A6 could not be reconstructed. RESERVE unknown for cases where the CORE ARCHITECTURE itself is unverifiable — not for cases where you merely cannot enumerate every per-market dependency in a multi-market protocol. If the core router/factory/oracle architecture is verifiable on-chain and you can determine whether the core requires external dependencies, grade the architecture even when an exhaustive per-market external-dependency census is infeasible. Acknowledge the per-market gap in unknowns[] but still issue a grade. Refusing to grade a multi-market protocol because you cannot list every SY/vault/market is over-use of unknown; grade the architecture and say so. PROMPT-META CHECK (per Hard Rule 17): before finalizing, verify the verdict cites concrete contract addresses, docs, or code — not the rubric itself. If your verdict says "the protocol belongs to a category the rubric marks red", rewrite it with the A1–A9 finding that actually justifies the grade, or drop to grade=unknown. --- ### Slice: OPEN-ACCESS Evaluate who is allowed to use the protocol and whether any of that permission is granted off-chain. Scope: this slice is about ADMISSION — who can enter, exit, or transact. Operator LIVENESS (what breaks if keepers/oracles go offline) is assessed in the dependencies slice and is out of scope for the grade here. You may note operator dependencies as context, but do not let "the protocol halts if operator X disappears" drive the access grade on its own; that belongs in dependencies. Source verification / contract verification on block explorers is assessed in the verifiability slice and is out of scope here — do NOT let "contract is unverified" drive the access grade. Framing: the smart contracts are the access layer; frontends are UX. A permissionless contract is reachable by any client (SDK, third-party UI, aggregator, wallet integration). Frontend ToS, IP geo-blocking, and wallet screening are publisher policies on one specific client — they are reported as context but do NOT determine the grade. The grade hinges on (1) what the contract itself permits, and (2) whether the protocol is practically reachable without the official publisher's cooperation. Meta-check before finalizing: if your verdict cites phrases from this prompt as evidence ("the protocol meets the 'credible alternatives' condition", "this fits the 'documented fallback' rule"), redo the verdict. The prompt describes the rubric; evidence must come from the protocol. A verdict should cite what the protocol does, not what the rubric says. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. Whitelist / allowlist modifiers in user-facing entry points. Grep for "onlyWhitelisted", "onlyRole", "allowlist", "isAccredited", "isKYCed". Note which functions are gated and who can add/remove from the list. - A2. Off-chain operators in the admission path: keepers, sequencers, privileged relayers, oracle posters whose approval is required to admit a user action (not just to keep the protocol live). For each, identify whether the role is held by a single operator, a permissioned committee, or is permissionless. Enumerate per user-facing function class (deposit vs withdraw-request vs claim-finalized vs transfer) which ones require operator approval to be admitted, and which ones admit users unconditionally. A function whose placement is unconditional but whose downstream settlement depends on an operator is an admission-permissionless function — flag the liveness dependency as context and defer its grading weight to the dependencies slice. - A3. Frontend restrictions on the official interface — record as context, not as a grade lever. Distinguish: - A3-passive: boilerplate ToS clauses (sanctions attestation, restricted-territory self-certification, VPN-circumvention prohibition, "comply with applicable law" eligibility, age of majority). - A3-active: runtime enforcement — IP-based geo-blocking, wallet-address screening against a sanctions oracle (Chainalysis, TRM, Elliptic), KYC wall, rendering-blocking jurisdiction banner. Record findings under the correct tier. Quote ToS text or banner text in evidence[].shows. These findings populate the headline and rationale but do NOT move the grade by themselves; the grade is set by A1, A2, and the A3b path check below. - A3b. Independent access paths (the operative grade input). Enumerate paths that do not require the official publisher's cooperation: - Published SDK / library / CLI for direct contract interaction. - Third-party frontends operated by separate legal entities. - Wallet-integrated access (MetaMask Swaps, Safe apps, etc.). - DEX / lending / yield aggregators that route through the contracts. Record at least one concrete link per path that exists. The protocol does NOT have to self-document these — the test is existence, not UX cost. An A3b-i redistribution of the official UI bound by the same ToS does NOT count as an independent path. - A4. Sanctions / compliance tooling at the contract level: does the protocol check addresses against OFAC lists or similar on-chain blocklists in the contract itself? (Frontend-only screening belongs in A3.) - A5. Differentiate read access vs write access: many protocols are read-permissionless (anyone can view state) but write-gated (only certain addresses can deposit/borrow). Record both. - A6. ToS / Legal links: locate them on the website and produce a VERBATIM quote of any jurisdictional, sanctions, or eligibility clause in evidence[].shows. If you cannot extract the clause text verbatim (SPA render failure, paywall, dead link, etc.), do NOT paraphrase or infer from general knowledge — record the ToS URL in unknowns[] with the reason extraction failed. Assertions about ToS content without a verbatim quote will be downweighted by reviewers. Then write the steel-man section per Hard Rule 11. Grade rules (admission-focused; liveness concerns belong in dependencies; source verification belongs in verifiability): - green = no contract-level whitelist/KYC on user entry/exit; no operator approval required to admit a user action; AND at least one independent A3b path exists (published SDK, third-party frontend, wallet integration, or aggregator routing). Frontend ToS posture and A3-active enforcement on the official UI do NOT block green when contracts are permissionless and an independent path exists — they are reported as context. - orange = contracts admit users unconditionally, BUT the protocol is operationally captured by the official publisher: no published SDK, no third-party frontend, no wallet integration, no aggregator routing. The contract is theoretically open but practically reachable only through the official UI. Also applies when admission requires approval from a permissioned committee that is governance-managed with a documented replacement procedure. - red = contract-level whitelist / KYC on user entry/exit, OR admission of a core user action requires approval from a single privileged operator or a small committee with no documented replacement procedure, OR enforces an on-chain blocklist updatable by a single party. - unknown = checklist incomplete after checking the sources above. Default-grade guidance: when contracts are fully permissionless AND any A3b independent path exists, the default grade is green regardless of frontend ToS or A3-active enforcement on the official UI. Frontend geo-blocking, sanctions-oracle wallet screening, and ToS sanctions clauses are publisher policies on one client and are reported in findings/headline as context, not as grade levers. To grade orange on operational-capture grounds, the auditor must affirmatively show that ALL independent paths are absent or also gated. Guideline on committees: where admission depends on a multi-operator committee, the relevant axes are (a) set size, (b) whether replacement/rotation is governed on-chain, (c) whether the replacement procedure is publicly documented. A large set with on-chain governance replacement should not be graded as a single-party operator even if rotation is not instantaneous. A small set with informal replacement should be treated as a single-party operator. --- ### Slice: VERIFIABILITY Evaluate whether an outsider can independently confirm what the deployed code does. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - V1. For each address you assess: is the bytecode verified on the chain's block explorer? Record the "Contract Source Code Verified" indicator. https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... returns this as a top-level "verified" boolean plus "abiSource" ("etherscan" / "sourcify") and an inline ABI — useful when the explorer page is rate-limited. If the contract is a proxy, verify BOTH the proxy contract AND the current implementation contract. The same /api/contract/abi response auto-resolves proxies and includes a "proxy.implementation" address when present, so one call covers V1 + V6 in one shot. An explorer "Similar Match" on a well-known proxy pattern (Aragon AppProxyUpgradeable, ERC1967Proxy, OssifiableProxy, OZ TransparentUpgradeableProxy) is expected for that pattern and does NOT count as a verification gap on its own — what matters is that the implementation is independently verified. - V2. Source-to-repo correspondence: for each verified contract, attempt to find a matching commit in the linked GitHub repos. Record evidence[].commit on a match. Independent compile/bytecode-match is NOT required for green — a recognized public repo whose structure and file contents correspond to the explorer-visible source is sufficient. If you did not pin a commit SHA or run a bytecode diff, record that plainly in unknowns[] and proceed; it is a scope limit, not a downgrade signal. - V3. Audit coverage: for each URL in protocol.audit_links, open it and record: auditor name, audit date, the specific contracts / commit in scope. Flag audits that predate the current deployment by >6 months without a follow-up review. - V4. Auditor recognition: the following firms are broadly recognized in Solidity: Trail of Bits, Zellic, Spearbit, OpenZeppelin, ConsenSys Diligence, Certora (formal verification), Quantstamp, Halborn, Peckshield, Sigma Prime, ChainSecurity, Ackee Blockchain, MixBytes, Statemind. Unknown firms are orange-at-best for any green-grade claim. Name the firm explicitly in evidence[]. - V5. Post-audit drift: compare the most recent in-scope audit(s) against the currently-deployed source, weighted by what each contract does and by what the changes actually contain. SCOPE — drift only downgrades the grade when ALL of the following hold: (i) the drifting contract is fund-custody / settlement / accounting-critical (NOT a peripheral router, lens, quoter, or pure-view contract that holds no balances); (ii) the changes are material — new functions, modified access control, modified accounting, modified fund flow — and not refactors / struct relocations / import reorgs / build or CI fixes / formatting; (iii) no later audit, fix-audit, or differential audit from a recognized firm covers the changed files (audits often pin a pre-fix commit while a follow-up reviews the delta — match by file scope, not by commit-hash equality). When you cite drift as a downgrade reason, name the specific behavior change (function added, role granted, accounting formula altered) — "N commits ahead" or "+X/-Y LOC" alone is not evidence of material drift. If you have not sampled the diff content (e.g. via the GitHub compare view or the top commits in the window), record drift as an unknowns[] entry rather than auto-downgrading; commit-count and LOC are starting signals, not findings. - V6. Implementation vs proxy: a verified proxy with an unverified implementation is effectively unverified. State whether the implementation is verified separately. EVIDENCE DISCIPLINE (read before writing findings[]): - Do not assert a specific deploy-commit SHA, bytecode equivalence, or "identical to audited commit" unless you actually fetched the artifact that shows it (e.g., a deployed-addresses JSON you opened, an explorer page you read). Inferred or plausible matches belong in unknowns[], never in findings[] or evidence[]. - Evidence[] entries must correspond to pages/files you actually retrieved this run. A URL you did not open is not evidence. Then write the steel-man section per Hard Rule 11. Grade rules: - green = deployed bytecode verified on the explorer (proxy AND implementation if proxied; "Similar Match" on a standard proxy pattern is fine per V1), a public source repo exists whose contents correspond to the explorer-visible source, AND ≥1 audit from a recognized firm covering the currently-deployed contracts (≤6 months of drift OR drift was re-audited). A missing local compile-match is not a downgrade — record it in unknowns[] and still grade green if the other conditions hold. - orange = verified but with visible drift from the public repo, OR audit scope is stale relative to deployment, OR only minor / unknown-firm audits exist, OR only some of the main contracts are verified, OR proxy verified but implementation only partially verified. - red = unverified bytecode (or verified proxy with unverified implementation), OR no audit in protocol.audit_links, OR no public repo. - unknown = reserved for when the protocol's verifiability posture genuinely cannot be assessed (e.g., explorer and repo both inaccessible for this protocol). Do NOT use unknown merely because you, the analyst, could not run a particular check such as a bytecode diff — that goes in unknowns[] while the grade is still assigned from the evidence you do have. --- ### JSON output contract Return exactly one JSON array inside a single ```json fenced block. The array MUST contain exactly five objects, one per risk slice, in this exact order: "control", "ability-to-exit", "autonomy", "open-access", "verifiability". Do not include the discovery slice. Each object has the same shape as a normal slice submission: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "<one of: control | ability-to-exit | autonomy | open-access | verifiability>", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - Produce one complete object for each of these slices only: control, ability-to-exit, autonomy, open-access, verifiability. - Reuse the same model, chat_url, snapshot_generated_at, prompt_version, analysis_date, and slug values across all five objects. - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches that object's slice checklist prefix verbatim (C1, E2, AU3, A3b, V4a, …); unknowns[] entries are checklist-coded ("C3: …"). - Wrap the array in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.
- Open source + 11 audits
Protocol publishes a GitHub repository and has at least one audit on record. This is a coarse Phase-0 signal only: auditor reputation, scope, and post-audit review coverage are not yet weighted.
Run your own prompt Submit run ↗### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v2 - protocol.name: Uniswap V2 - protocol.chains: Ethereum, Base, Polygon, Arbitrum, Binance, Monad, Optimism, X Layer, Avalanche, Unichain, Tempo, Zora, Celo - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f", "role": "factory" }, { "chain": "Ethereum", "address": "0x7a250d5630b4cf539739df2c5dacb4c659f2488d", "role": "router" }, { "chain": "Ethereum", "address": "0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b", "role": "migrator" }, { "chain": "Ethereum", "address": "0x1f98400000000000000000000000000000000001", "role": "factory" }, { "chain": "Sepolia", "address": "0xF62c03E08ada871A0bEb309762E260a7a6a880E6", "role": "factory" }, { "chain": "Sepolia", "address": "0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3", "role": "router" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000002", "role": "factory" }, { "chain": "Unichain", "address": "0x284f11109359a7e1306c3e447ef14d38400063ff", "role": "router" }, { "chain": "Arbitrum", "address": "0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9", "role": "factory" }, { "chain": "Arbitrum", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Tempo", "address": "0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f", "role": "factory" }, { "chain": "Tempo", "address": "0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e", "role": "router" }, { "chain": "Avalanche", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Avalanche", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Binance", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Binance", "address": "0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24", "role": "router" }, { "chain": "Base", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Base", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Optimism", "address": "0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf", "role": "factory" }, { "chain": "Optimism", "address": "0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2", "role": "router" }, { "chain": "Polygon", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Polygon", "address": "0xedf6066a2b290C185783862C7F4776A2C8077AD1", "role": "router" }, { "chain": "Blast", "address": "0x5C346464d33F90bABaf70dB6388507CC889C1070", "role": "factory" }, { "chain": "Blast", "address": "0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035", "role": "router" }, { "chain": "Zora", "address": "0x0F797dC7efaEA995bB916f268D919d0a1950eE3C", "role": "factory" }, { "chain": "Zora", "address": "0xa00F34A632630EFd15223B1968358bA4845bEEC7", "role": "router" }, { "chain": "Monad", "address": "0x182a927119d56008d921126764bf884221b10f59", "role": "factory" }, { "chain": "Monad", "address": "0x4b2ab38dbf28d31d467aa8993f6c2585981d6804", "role": "router" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f (factory) - https://defipunkd.com/address/1/0x7a250d5630b4cf539739df2c5dacb4c659f2488d (router) - https://defipunkd.com/address/1/0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b (migrator) - https://defipunkd.com/address/1/0x1f98400000000000000000000000000000000001 (factory) - https://defipunkd.com/address/11155111/0xF62c03E08ada871A0bEb309762E260a7a6a880E6 (factory) - https://defipunkd.com/address/11155111/0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3 (router) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000002 (factory) - https://defipunkd.com/address/130/0x284f11109359a7e1306c3e447ef14d38400063ff (router) - https://defipunkd.com/address/42161/0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9 (factory) - https://defipunkd.com/address/42161/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Tempo: 0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f (chain not supported by the read API) - Tempo: 0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e (chain not supported by the read API) - https://defipunkd.com/address/43114/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/43114/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Binance: 0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (chain not supported by the read API) - Binance: 0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24 (chain not supported by the read API) - https://defipunkd.com/address/8453/0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (factory) - https://defipunkd.com/address/8453/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - https://defipunkd.com/address/10/0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf (factory) - https://defipunkd.com/address/10/0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2 (router) - https://defipunkd.com/address/137/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/137/0xedf6066a2b290C185783862C7F4776A2C8077AD1 (router) - https://defipunkd.com/address/81457/0x5C346464d33F90bABaf70dB6388507CC889C1070 (factory) - https://defipunkd.com/address/81457/0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035 (router) - Zora: 0x0F797dC7efaEA995bB916f268D919d0a1950eE3C (chain not supported by the read API) - Zora: 0xa00F34A632630EFd15223B1968358bA4845bEEC7 (chain not supported by the read API) - Monad: 0x182a927119d56008d921126764bf884221b10f59 (chain not supported by the read API) - Monad: 0x4b2ab38dbf28d31d467aa8993f6c2585981d6804 (chain not supported by the read API) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: VERIFIABILITY Evaluate whether an outsider can independently confirm what the deployed code does. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - V1. For each address you assess: is the bytecode verified on the chain's block explorer? Record the "Contract Source Code Verified" indicator. https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... returns this as a top-level "verified" boolean plus "abiSource" ("etherscan" / "sourcify") and an inline ABI — useful when the explorer page is rate-limited. If the contract is a proxy, verify BOTH the proxy contract AND the current implementation contract. The same /api/contract/abi response auto-resolves proxies and includes a "proxy.implementation" address when present, so one call covers V1 + V6 in one shot. An explorer "Similar Match" on a well-known proxy pattern (Aragon AppProxyUpgradeable, ERC1967Proxy, OssifiableProxy, OZ TransparentUpgradeableProxy) is expected for that pattern and does NOT count as a verification gap on its own — what matters is that the implementation is independently verified. - V2. Source-to-repo correspondence: for each verified contract, attempt to find a matching commit in the linked GitHub repos. Record evidence[].commit on a match. Independent compile/bytecode-match is NOT required for green — a recognized public repo whose structure and file contents correspond to the explorer-visible source is sufficient. If you did not pin a commit SHA or run a bytecode diff, record that plainly in unknowns[] and proceed; it is a scope limit, not a downgrade signal. - V3. Audit coverage: for each URL in protocol.audit_links, open it and record: auditor name, audit date, the specific contracts / commit in scope. Flag audits that predate the current deployment by >6 months without a follow-up review. - V4. Auditor recognition: the following firms are broadly recognized in Solidity: Trail of Bits, Zellic, Spearbit, OpenZeppelin, ConsenSys Diligence, Certora (formal verification), Quantstamp, Halborn, Peckshield, Sigma Prime, ChainSecurity, Ackee Blockchain, MixBytes, Statemind. Unknown firms are orange-at-best for any green-grade claim. Name the firm explicitly in evidence[]. - V5. Post-audit drift: compare the most recent in-scope audit(s) against the currently-deployed source, weighted by what each contract does and by what the changes actually contain. SCOPE — drift only downgrades the grade when ALL of the following hold: (i) the drifting contract is fund-custody / settlement / accounting-critical (NOT a peripheral router, lens, quoter, or pure-view contract that holds no balances); (ii) the changes are material — new functions, modified access control, modified accounting, modified fund flow — and not refactors / struct relocations / import reorgs / build or CI fixes / formatting; (iii) no later audit, fix-audit, or differential audit from a recognized firm covers the changed files (audits often pin a pre-fix commit while a follow-up reviews the delta — match by file scope, not by commit-hash equality). When you cite drift as a downgrade reason, name the specific behavior change (function added, role granted, accounting formula altered) — "N commits ahead" or "+X/-Y LOC" alone is not evidence of material drift. If you have not sampled the diff content (e.g. via the GitHub compare view or the top commits in the window), record drift as an unknowns[] entry rather than auto-downgrading; commit-count and LOC are starting signals, not findings. - V6. Implementation vs proxy: a verified proxy with an unverified implementation is effectively unverified. State whether the implementation is verified separately. EVIDENCE DISCIPLINE (read before writing findings[]): - Do not assert a specific deploy-commit SHA, bytecode equivalence, or "identical to audited commit" unless you actually fetched the artifact that shows it (e.g., a deployed-addresses JSON you opened, an explorer page you read). Inferred or plausible matches belong in unknowns[], never in findings[] or evidence[]. - Evidence[] entries must correspond to pages/files you actually retrieved this run. A URL you did not open is not evidence. Then write the steel-man section per Hard Rule 11. Grade rules: - green = deployed bytecode verified on the explorer (proxy AND implementation if proxied; "Similar Match" on a standard proxy pattern is fine per V1), a public source repo exists whose contents correspond to the explorer-visible source, AND ≥1 audit from a recognized firm covering the currently-deployed contracts (≤6 months of drift OR drift was re-audited). A missing local compile-match is not a downgrade — record it in unknowns[] and still grade green if the other conditions hold. - orange = verified but with visible drift from the public repo, OR audit scope is stale relative to deployment, OR only minor / unknown-firm audits exist, OR only some of the main contracts are verified, OR proxy verified but implementation only partially verified. - red = unverified bytecode (or verified proxy with unverified implementation), OR no audit in protocol.audit_links, OR no public repo. - unknown = reserved for when the protocol's verifiability posture genuinely cannot be assessed (e.g., explorer and repo both inaccessible for this protocol). Do NOT use unknown merely because you, the analyst, could not run a particular check such as a bytecode diff — that goes in unknowns[] while the grade is still assigned from the evidence you do have. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "verifiability", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.
4 dimensions not yet assessed (Control, Ability to exit, Autonomy, Open Access)
- Not yet assessed
Who holds admin privileges, how contracts can be upgraded, and how quickly. No automated heuristic grades this at Phase 0; a real assessment arrives when onchain discovery reads roles, owners, and timelocks.
No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v2 - protocol.name: Uniswap V2 - protocol.chains: Ethereum, Base, Polygon, Arbitrum, Binance, Monad, Optimism, X Layer, Avalanche, Unichain, Tempo, Zora, Celo - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f", "role": "factory" }, { "chain": "Ethereum", "address": "0x7a250d5630b4cf539739df2c5dacb4c659f2488d", "role": "router" }, { "chain": "Ethereum", "address": "0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b", "role": "migrator" }, { "chain": "Ethereum", "address": "0x1f98400000000000000000000000000000000001", "role": "factory" }, { "chain": "Sepolia", "address": "0xF62c03E08ada871A0bEb309762E260a7a6a880E6", "role": "factory" }, { "chain": "Sepolia", "address": "0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3", "role": "router" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000002", "role": "factory" }, { "chain": "Unichain", "address": "0x284f11109359a7e1306c3e447ef14d38400063ff", "role": "router" }, { "chain": "Arbitrum", "address": "0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9", "role": "factory" }, { "chain": "Arbitrum", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Tempo", "address": "0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f", "role": "factory" }, { "chain": "Tempo", "address": "0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e", "role": "router" }, { "chain": "Avalanche", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Avalanche", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Binance", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Binance", "address": "0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24", "role": "router" }, { "chain": "Base", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Base", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Optimism", "address": "0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf", "role": "factory" }, { "chain": "Optimism", "address": "0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2", "role": "router" }, { "chain": "Polygon", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Polygon", "address": "0xedf6066a2b290C185783862C7F4776A2C8077AD1", "role": "router" }, { "chain": "Blast", "address": "0x5C346464d33F90bABaf70dB6388507CC889C1070", "role": "factory" }, { "chain": "Blast", "address": "0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035", "role": "router" }, { "chain": "Zora", "address": "0x0F797dC7efaEA995bB916f268D919d0a1950eE3C", "role": "factory" }, { "chain": "Zora", "address": "0xa00F34A632630EFd15223B1968358bA4845bEEC7", "role": "router" }, { "chain": "Monad", "address": "0x182a927119d56008d921126764bf884221b10f59", "role": "factory" }, { "chain": "Monad", "address": "0x4b2ab38dbf28d31d467aa8993f6c2585981d6804", "role": "router" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f (factory) - https://defipunkd.com/address/1/0x7a250d5630b4cf539739df2c5dacb4c659f2488d (router) - https://defipunkd.com/address/1/0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b (migrator) - https://defipunkd.com/address/1/0x1f98400000000000000000000000000000000001 (factory) - https://defipunkd.com/address/11155111/0xF62c03E08ada871A0bEb309762E260a7a6a880E6 (factory) - https://defipunkd.com/address/11155111/0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3 (router) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000002 (factory) - https://defipunkd.com/address/130/0x284f11109359a7e1306c3e447ef14d38400063ff (router) - https://defipunkd.com/address/42161/0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9 (factory) - https://defipunkd.com/address/42161/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Tempo: 0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f (chain not supported by the read API) - Tempo: 0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e (chain not supported by the read API) - https://defipunkd.com/address/43114/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/43114/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Binance: 0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (chain not supported by the read API) - Binance: 0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24 (chain not supported by the read API) - https://defipunkd.com/address/8453/0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (factory) - https://defipunkd.com/address/8453/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - https://defipunkd.com/address/10/0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf (factory) - https://defipunkd.com/address/10/0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2 (router) - https://defipunkd.com/address/137/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/137/0xedf6066a2b290C185783862C7F4776A2C8077AD1 (router) - https://defipunkd.com/address/81457/0x5C346464d33F90bABaf70dB6388507CC889C1070 (factory) - https://defipunkd.com/address/81457/0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035 (router) - Zora: 0x0F797dC7efaEA995bB916f268D919d0a1950eE3C (chain not supported by the read API) - Zora: 0xa00F34A632630EFd15223B1968358bA4845bEEC7 (chain not supported by the read API) - Monad: 0x182a927119d56008d921126764bf884221b10f59 (chain not supported by the read API) - Monad: 0x4b2ab38dbf28d31d467aa8993f6c2585981d6804 (chain not supported by the read API) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: CONTROL Evaluate who can change the protocol's rules, how fast, and how broadly. (Step 0 capability probe and the off-chain-only fallback live in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]) - **C1.** For each address you assess: who is the contract owner / admin / pendingAdmin / governor — read these via the block explorer's "Read Contract" tab OR `https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=owner` (BARE method names: `&method=owner`, `&method=admin`, `&method=pendingOwner`, `&method=governor`). For Safes use `/api/safe/owners?chainId=<id>&address=0x...`. When a protocol has multiple major versions deployed (v2/v3/v4), perform C1 reads on the NEWEST deployment separately — newer deployments often have weaker control surfaces than the legacy core. - **C2.** Upgrade mechanism: transparent proxy / UUPS / Beacon / Diamond / immutable. Identify the proxy admin address. Check upgradeability of GOVERNANCE contracts too — a Governor / Aragon Voting / OZ Governor is often itself a proxy whose admin is the Timelock. Asymmetry: when fund-holding cores are immutable AND governance has no admin path that reaches them, an upgradable Governor/Timelock is T3-only and must NOT drag the verdict below green on that basis alone (see grade rules and the "immutable cores" caveat). Only call upgradability "mixed" if you can name a concrete function on the upgradable surface that reaches T1 or T2 on user funds. - **C3.** EXECUTION PATH (enumerate every stage, in order, with delays in seconds). The operative path is usually a chain (voting → scheduler → timelock → executor; or governor → queue → execute; or Aragon Voting → DualGovernance → EmergencyProtectedTimelock → AdminExecutor). For each stage, record (a) the contract address, (b) the delay constant name + value in seconds, (c) the URL you read it from (block-explorer Read Contract OR `/api/contract/read?...&method=MIN_DELAY&block=<n>`). Do NOT stop at the first timelock-shaped contract — if its admin is itself called by another contract, keep walking. The grading delay is the SUM OF DELAYS ON THE UNCONTESTED FAST PATH (shortest time a proposal with no opposition can go from submission to executable). Dynamic / contested extensions (veto signaling, rage quit, escrow delay) are modifiers, not the basis — note them separately. - **C4.** Enumerate EVERY multisig with reachable control — main proxy admin, emergency activation, emergency execution, reseal / pause, gate-seal committees, tiebreaker, per-module admins. For each Safe, fetch threshold + owners + version via `/api/safe/owners?chainId=<id>&address=0x...` (response includes raw eth_call data, so the URL is citable evidence). Enumerate ops/council/incentives multisigs even when off the upgrade path — record their scope so a reader can see they are NOT on the upgrade path. For each: (a) address, (b) threshold / total signers, (c) signer identities classified as insider (team, paid auditors under ongoing engagement, mandated service providers) vs non-insider (independent community members, unaffiliated researchers), (d) the specific power held (upgrade, pause, parameter, etc.). - **C5.** On-chain governance: Governor / GovernorBravo / OZ Governor / Aragon Voting with token-weighted voting? Record proposal threshold, voting period, quorum, and the timelock delay between queue and execute. Every numeric constant must come from a Read Contract call you can link to, or be in unknowns[] with the C-code. If votingDelay / votingPeriod are denominated in BLOCKS, convert to seconds at the chain's CURRENT block time (Ethereum mainnet ≈ 12s post-Merge, not the 15s in older Compound/Bravo deployments) — cite both block count and converted seconds. - **C6.** EMERGENCY POWERS: separate emergency-pause / guardian role with a different time cap or different actor than the main upgrade authority? Record it explicitly. - **C7.** POWER TIER (blast radius). For each privileged path in C3–C6, classify the WORST thing that path can do, choosing the highest applicable tier. Cite the specific function name and any on-chain bound — tier claims without a named function are unsupported. - **T1 — FUND-CRITICAL**: replace implementation of contracts holding user funds; change AMM math / accounting / collateral logic; mint unbacked debt or shares; pause withdrawals; drain user-fund treasury; change oracle to attacker-controlled source; replace upgrade admin with EOA. - **T2 — ECONOMICALLY MATERIAL**: change fee parameters within bounded ranges; redirect protocol fees; add/remove markets / collateral types; bounded inflation or token mint within hard-capped schedule; spend protocol-owned (non-user) treasury. - **T3 — GOVERNANCE-INTERNAL**: change voting rules, quorum, voting period, proposal threshold; upgrade the Governor itself; rotate Timelock admin; mint governance tokens within a capped annual schedule. - **T4 — OPERATIONAL**: incentives distribution, grants, ENS / frontend canonicalization, deployment coordination, periphery router deprecation. The grade is set by the HIGHEST tier reachable on the uncontested fast path, not the median. State the tier and the binding function in the verdict. ### Read Contract discipline (applies to C3, C4, C5) Every numeric constant cited (timelock delays, voting periods, multisig thresholds, quorum percentages) must come from EITHER (a) a block-explorer Read Contract URL, OR (b) a DeFiPunkd `/api/contract/read` or `/api/safe/owners` URL (preferred with `&block=<n>` for content-addressed evidence), OR (c) an unknowns[] entry with the C-code. Docs / blog posts are corroboration only — they cannot be the sole citation for a value that is also readable on-chain. ### Off-chain-only substitute hierarchy (when grading_basis="off-chain-only" — see preamble Rule 16) When on-chain reads were genuinely unreachable this run, eligible off-chain substitutes in priority order: 1. Linked audit PDFs (admin roles, multisig members, timelock delays usually enumerated). 2. Governance forum posts that quote constants from a successful on-chain proposal (cite post URL + linked execution-tx URL). 3. Official protocol docs pages with named addresses and roles (must be on a domain owned by the protocol). 4. GitHub README / SECURITY.md / governance/*.md at a pinned commit SHA. Forbidden substitutes: third-party blog posts, X / Twitter threads, search-result snippets, model memory. Required degradation: any C-code citing a numeric constant from docs/forum/audit prose ONLY must also carry an `unknowns[]` entry with `-offchain` suffix noting "value not re-read on-chain in this run; corroboration only". ### Grade rules (apply the timelock bar conditional on the highest C7 tier reachable on the fast path) Security Council standard (used below): a multisig qualifies as "Security Council" only if ALL of: ≥7 signers, ≥51% threshold, ≥50% non-insider signers, every signer publicly announced. Failing any criterion = NOT a Security Council, regardless of signer reputation. - **green**: highest reachable tier is T3 or T4 regardless of timelock; OR T2 reachable with uncontested-fast-path delay ≥7 days; OR T1 reachable only via immutable contracts (T1 is unreachable); OR T1 reachable with uncontested-fast-path delay ≥7 days combined with a Security Council multisig; OR T1 reachable with uncontested-fast-path delay ≥7 days through active on-chain governance with broad token distribution. - **orange**: T2 reachable with uncontested-fast-path delay >0 but <7 days; OR T1 reachable with uncontested-fast-path delay >0 but <7 days; OR a multisig failing one or more Security Council criteria sits on a T1/T2 path; OR unclear upgrade authority on a T1/T2 path; OR governance with very short timelock or low quorum on a T1/T2 path. - **red**: T1 reachable with no timelock by a single EOA or 2-of-3 multisig; OR a T1 upgrade admin that is not a smart contract you can audit. - **unknown**: completed the checklist but still cannot determine the upgrade authority OR cannot classify the highest tier reachable on the main contracts. Tiering caveats: - "Bounded" must be enforced ON-CHAIN to count as T2. A function that sets fees with no upper-bound check is T1 — cite the bound check. - Recurring T2 economic extraction (e.g. fee redirect with no rate limit) approaches T1 over time. A single proposal that can permanently redirect all future revenue is T1. - T3 assumes the governance contract cannot itself authorize a T1/T2 action without going through the same timelock. If governance can self-upgrade to bypass the timelock, T3 collapses into T1. - Do not downgrade tier by hand-waving ("realistically governance would never…"). Tier on what the contract permits, not what feels likely. Notes: - **Dynamic / dual-governance timelocks** (Lido, Compound escrow veto): the rubric grades on the uncontested path because that is the path most upgrades take. A dynamic extension that fires only under stake-weighted opposition is a real protection — name it in the green steel-man, but it does not lift an orange fast path into green; state the tension in the verdict. - **Immutable cores with upgradable governance** (Uniswap-style): if fund-holding contracts are immutable and have no admin-reachable function moving / freezing / re-routing user funds, the highest reachable tier on the upgrade path is T3 — green regardless of timelock. Don't grade this orange just because the Governor is a proxy — that's a C2 fact, not a downgrade. Downgrade only applies if you can cite a concrete function on the upgradable surface that reaches T1 or T2 (privileged hook, upgradable factory controlling fund-routing, fee-switch redirecting protocol revenue without bound). - **The 7-day bar** reflects the exit-window standard — users need notice after a queued upgrade to withdraw if they disagree. The ability-to-exit slice grades the exit side; this slice grades the delay side; both must hold for users to actually benefit from the delay. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "control", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Not yet assessed
Whether users can exit on their own terms if the team disappears or acts adversarially. Requires per-protocol review; not available at Phase 0.
No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v2 - protocol.name: Uniswap V2 - protocol.chains: Ethereum, Base, Polygon, Arbitrum, Binance, Monad, Optimism, X Layer, Avalanche, Unichain, Tempo, Zora, Celo - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f", "role": "factory" }, { "chain": "Ethereum", "address": "0x7a250d5630b4cf539739df2c5dacb4c659f2488d", "role": "router" }, { "chain": "Ethereum", "address": "0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b", "role": "migrator" }, { "chain": "Ethereum", "address": "0x1f98400000000000000000000000000000000001", "role": "factory" }, { "chain": "Sepolia", "address": "0xF62c03E08ada871A0bEb309762E260a7a6a880E6", "role": "factory" }, { "chain": "Sepolia", "address": "0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3", "role": "router" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000002", "role": "factory" }, { "chain": "Unichain", "address": "0x284f11109359a7e1306c3e447ef14d38400063ff", "role": "router" }, { "chain": "Arbitrum", "address": "0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9", "role": "factory" }, { "chain": "Arbitrum", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Tempo", "address": "0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f", "role": "factory" }, { "chain": "Tempo", "address": "0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e", "role": "router" }, { "chain": "Avalanche", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Avalanche", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Binance", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Binance", "address": "0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24", "role": "router" }, { "chain": "Base", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Base", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Optimism", "address": "0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf", "role": "factory" }, { "chain": "Optimism", "address": "0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2", "role": "router" }, { "chain": "Polygon", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Polygon", "address": "0xedf6066a2b290C185783862C7F4776A2C8077AD1", "role": "router" }, { "chain": "Blast", "address": "0x5C346464d33F90bABaf70dB6388507CC889C1070", "role": "factory" }, { "chain": "Blast", "address": "0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035", "role": "router" }, { "chain": "Zora", "address": "0x0F797dC7efaEA995bB916f268D919d0a1950eE3C", "role": "factory" }, { "chain": "Zora", "address": "0xa00F34A632630EFd15223B1968358bA4845bEEC7", "role": "router" }, { "chain": "Monad", "address": "0x182a927119d56008d921126764bf884221b10f59", "role": "factory" }, { "chain": "Monad", "address": "0x4b2ab38dbf28d31d467aa8993f6c2585981d6804", "role": "router" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f (factory) - https://defipunkd.com/address/1/0x7a250d5630b4cf539739df2c5dacb4c659f2488d (router) - https://defipunkd.com/address/1/0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b (migrator) - https://defipunkd.com/address/1/0x1f98400000000000000000000000000000000001 (factory) - https://defipunkd.com/address/11155111/0xF62c03E08ada871A0bEb309762E260a7a6a880E6 (factory) - https://defipunkd.com/address/11155111/0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3 (router) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000002 (factory) - https://defipunkd.com/address/130/0x284f11109359a7e1306c3e447ef14d38400063ff (router) - https://defipunkd.com/address/42161/0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9 (factory) - https://defipunkd.com/address/42161/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Tempo: 0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f (chain not supported by the read API) - Tempo: 0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e (chain not supported by the read API) - https://defipunkd.com/address/43114/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/43114/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Binance: 0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (chain not supported by the read API) - Binance: 0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24 (chain not supported by the read API) - https://defipunkd.com/address/8453/0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (factory) - https://defipunkd.com/address/8453/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - https://defipunkd.com/address/10/0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf (factory) - https://defipunkd.com/address/10/0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2 (router) - https://defipunkd.com/address/137/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/137/0xedf6066a2b290C185783862C7F4776A2C8077AD1 (router) - https://defipunkd.com/address/81457/0x5C346464d33F90bABaf70dB6388507CC889C1070 (factory) - https://defipunkd.com/address/81457/0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035 (router) - Zora: 0x0F797dC7efaEA995bB916f268D919d0a1950eE3C (chain not supported by the read API) - Zora: 0xa00F34A632630EFd15223B1968358bA4845bEEC7 (chain not supported by the read API) - Monad: 0x182a927119d56008d921126764bf884221b10f59 (chain not supported by the read API) - Monad: 0x4b2ab38dbf28d31d467aa8993f6c2585981d6804 (chain not supported by the read API) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: ABILITY-TO-EXIT Evaluate whether users can withdraw their funds on their own terms, even under adversarial admin conditions. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - E1. Enumerate every user-facing exit function in the main contracts: withdraw, redeem, burn, requestWithdrawal, claim, exit, etc. List them by name. Do NOT treat the contract as a monolith. - E2. For EACH exit function in E1: identify its access modifiers and any pause guards (e.g. _checkResumed, whenNotPaused, onlyRole). Functions that gate REQUEST PLACEMENT often differ from functions that CLAIM FINALIZED FUNDS — check both separately. - E3. For each pause guard: identify the role holder (which address holds PAUSE_ROLE / GUARDIAN / etc.) and the maximum pause duration. Specifically check whether PAUSE_INFINITELY (or equivalent uncapped pause) is callable, and which actor can call it (single multisig vs governance vote). For role-holder reads use https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=hasRole&args=0x...,0x... or &method=getRoleAdmin&args=0x.... For "is currently paused" checks use &method=paused or &method=isPaused&args=<resume-code>. Use the BARE method name (no parens). Cite the URL with &block=<n> in evidence[]. - E4. EMERGENCY vs GOVERNANCE pause distinction: many protocols have a fast-acting emergency pause capped at N days and a slow governance pause that can be indefinite. Record both paths separately if present, with their time caps and actor classes. - E5. Queued redemption: documented maximum queue duration, daily withdrawal caps, whether the queue itself is pausable. - E6. Forced-exit / escape-hatch / permissionless emergency-exit mechanism for adversarial-admin scenarios. - E7. Frontend dependency: confirm exit functions are directly callable on-chain (e.g. via Etherscan write tab or a generic wallet) without the project's frontend. Then write the steel-man section per Hard Rule 11. Common red-vs-orange tension on this slice: indefinite pause exists (suggests red) BUT the realistic emergency path is time-capped AND claims of already-finalized exits are not pause-gated (suggests orange). Resolve this by stating who can do what for how long, not by stopping at the worst-case sentence. Grade rules: - green = permissionless exit; pause is either absent, narrowly scoped to clearly-described emergencies with auto-expiry, or capped at ≤7 days; no frontend dependency for exit; claims of already-finalized exits are not pause-gated under any path. - orange = pausable with broad scope OR indefinite pause is reachable only through governance vote (not unilateral admin action), OR queued redemption with documented max > 7 days, OR claims-of-finalized are exempt but new-request placement can be paused indefinitely by governance. - red = exit requires admin signature, OR ANY actor (including governance) can pause CLAIMS of finalized exits indefinitely, OR there is no on-chain exit function at all (purely custodial), OR pause is held by a single EOA / 2-of-3 multisig with no time cap. - unknown = checklist incomplete after checking the sources above. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "ability-to-exit", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - No Phase-0 autonomy signal
Neither the category heuristic nor the forkedFrom signal fires for this protocol. A real autonomy graph (oracles, bridges, fallbacks, governance-mutable dependencies) arrives with Phase-2 onchain discovery.
No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v2 - protocol.name: Uniswap V2 - protocol.chains: Ethereum, Base, Polygon, Arbitrum, Binance, Monad, Optimism, X Layer, Avalanche, Unichain, Tempo, Zora, Celo - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f", "role": "factory" }, { "chain": "Ethereum", "address": "0x7a250d5630b4cf539739df2c5dacb4c659f2488d", "role": "router" }, { "chain": "Ethereum", "address": "0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b", "role": "migrator" }, { "chain": "Ethereum", "address": "0x1f98400000000000000000000000000000000001", "role": "factory" }, { "chain": "Sepolia", "address": "0xF62c03E08ada871A0bEb309762E260a7a6a880E6", "role": "factory" }, { "chain": "Sepolia", "address": "0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3", "role": "router" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000002", "role": "factory" }, { "chain": "Unichain", "address": "0x284f11109359a7e1306c3e447ef14d38400063ff", "role": "router" }, { "chain": "Arbitrum", "address": "0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9", "role": "factory" }, { "chain": "Arbitrum", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Tempo", "address": "0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f", "role": "factory" }, { "chain": "Tempo", "address": "0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e", "role": "router" }, { "chain": "Avalanche", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Avalanche", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Binance", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Binance", "address": "0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24", "role": "router" }, { "chain": "Base", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Base", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Optimism", "address": "0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf", "role": "factory" }, { "chain": "Optimism", "address": "0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2", "role": "router" }, { "chain": "Polygon", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Polygon", "address": "0xedf6066a2b290C185783862C7F4776A2C8077AD1", "role": "router" }, { "chain": "Blast", "address": "0x5C346464d33F90bABaf70dB6388507CC889C1070", "role": "factory" }, { "chain": "Blast", "address": "0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035", "role": "router" }, { "chain": "Zora", "address": "0x0F797dC7efaEA995bB916f268D919d0a1950eE3C", "role": "factory" }, { "chain": "Zora", "address": "0xa00F34A632630EFd15223B1968358bA4845bEEC7", "role": "router" }, { "chain": "Monad", "address": "0x182a927119d56008d921126764bf884221b10f59", "role": "factory" }, { "chain": "Monad", "address": "0x4b2ab38dbf28d31d467aa8993f6c2585981d6804", "role": "router" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f (factory) - https://defipunkd.com/address/1/0x7a250d5630b4cf539739df2c5dacb4c659f2488d (router) - https://defipunkd.com/address/1/0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b (migrator) - https://defipunkd.com/address/1/0x1f98400000000000000000000000000000000001 (factory) - https://defipunkd.com/address/11155111/0xF62c03E08ada871A0bEb309762E260a7a6a880E6 (factory) - https://defipunkd.com/address/11155111/0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3 (router) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000002 (factory) - https://defipunkd.com/address/130/0x284f11109359a7e1306c3e447ef14d38400063ff (router) - https://defipunkd.com/address/42161/0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9 (factory) - https://defipunkd.com/address/42161/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Tempo: 0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f (chain not supported by the read API) - Tempo: 0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e (chain not supported by the read API) - https://defipunkd.com/address/43114/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/43114/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Binance: 0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (chain not supported by the read API) - Binance: 0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24 (chain not supported by the read API) - https://defipunkd.com/address/8453/0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (factory) - https://defipunkd.com/address/8453/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - https://defipunkd.com/address/10/0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf (factory) - https://defipunkd.com/address/10/0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2 (router) - https://defipunkd.com/address/137/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/137/0xedf6066a2b290C185783862C7F4776A2C8077AD1 (router) - https://defipunkd.com/address/81457/0x5C346464d33F90bABaf70dB6388507CC889C1070 (factory) - https://defipunkd.com/address/81457/0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035 (router) - Zora: 0x0F797dC7efaEA995bB916f268D919d0a1950eE3C (chain not supported by the read API) - Zora: 0xa00F34A632630EFd15223B1968358bA4845bEEC7 (chain not supported by the read API) - Monad: 0x182a927119d56008d921126764bf884221b10f59 (chain not supported by the read API) - Monad: 0x4b2ab38dbf28d31d467aa8993f6c2585981d6804 (chain not supported by the read API) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: AUTONOMY Evaluate this protocol's autonomy: can a failure of anything outside its own contracts cause theft or loss of user principal, loss of unclaimed yield, or materially change the protocol's expected performance? "Autonomy" is not "has zero external touchpoints" — it is "external failures are either survivable or recoverable without user loss". This slice adapts DefiScan v1's Autonomy dimension; dependencies are one of several criteria, not the whole frame. GUARDRAILS (read before grading): - Category alone (Liquid Staking, Bridge, RWA Lending, Restaking, …) does NOT force a grade. A category is a hint about where to look; the grade must come from the concrete A1–A9 findings below. - Base-chain consensus (Ethereum PoS, the chain's validator set, the canonical Deposit Contract at 0x00000000219ab540356cBB839Cbe05303d7705Fa) is the SUBSTRATE, not a dependency, for any protocol deployed on that chain. Do not list "depends on Ethereum" as a finding. - Oracles or other integrations used by DOWNSTREAM protocols that happen to read this protocol's token (e.g. Chainlink stETH/USD consumed by Aave) are NOT this protocol's dependencies. Count only what THIS protocol's contracts call or trust on-chain. If a feed or contract appears in the protocol's docs only as reference material for third-party integrators, EXCLUDE IT ENTIRELY — do not log it as a finding even with a "peripheral" or "referenced only" caveat. - "Upgradeable admin can change things" belongs to the CONTROL slice; only count it here when the upgrade surface lets governance silently swap an external dependency (see A9). - Underlying-asset risk in opt-in, isolated markets is NOT autonomy-red on its own. When a protocol wraps third-party yield-bearing assets (LSTs, LRTs, ERC-4626 vaults, lending receipts, restaked tokens) into per-market silos that users explicitly choose, a failure of one underlying does NOT propagate to other markets and is risk the user opted into per-market. Record it under A4 with depth and propagation scope, but do not let it alone drive a red verdict — red requires an external dependency that cross-cuts the protocol or that the user did not opt into at deposit time. A failure mode that is "if the LRT you deposited is hacked, your principal in that LRT-backed market is impaired" is the underlying's autonomy story, not this protocol's; grade it on whether THIS protocol introduces additional dependencies on top. - Sub-module enumeration is mandatory before grading. If the protocol ships distinct product lines or modules (e.g., a v2 core AMM plus a newer perps/funding-rate module, a lending pool plus a separate vault layer, an L1 core plus a cross-chain extension), enumerate each in findings and grade against the WORST module weighted by its share of TVS or its blast radius. A green core does not rescue an orange/red sub-module; conversely, a small red sub-module with capped TVS may bound the overall grade to orange. Name each module by its on-chain factory or router address. If you do not know whether a module exists, that is an unknowns[] entry, not silence. EXPLICIT TVS WEIGHTING: in the verdict, state each module's approximate share of total protocol TVS (use "~X%" if exact figures unavailable; check DeFiLlama or block-explorer balances on the module's main contract) and how that share informs the weighted grade. Format: "Module A holds ~X% of TVS (grade: <g>); Module B holds ~Y% (grade: <g>); weighted overall = <grade> because <reason>." If a red sub-module holds <5% of total TVS and is capped, the overall grade may be orange; if it holds >25%, the overall grade is red. Do not let qualitative reasoning substitute for the percentages — write the numbers. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. External contract calls. Enumerate every external contract the core contracts call or read from (oracles, price feeds, AMM pools, lending pools, staking/deposit contracts, yield wrappers). For each, identify the address, the provider, and what user-facing function of this protocol would break or mis-price if that external contract paused, mis-reported, or behaved adversarially. Grep for "oracle", "aggregator", "getPrice", "latestAnswer", "chainlink", "pyth", "redstone" as a starting point. To verify an oracle is live and what it currently reports, hit https://defipunkd.com/api/contract/read?chainId=<id>&address=<oracle>&method=latestAnswer (or &method=latestRoundData, &method=getPrice, &method=description; use the BARE method name without parens) and cite the URL — the response includes blockNumber/blockHash and rawReturnData, which is stronger evidence than a docs page about which feed "should" be used. - A2. Off-chain actor committees reporting INTO the protocol. Oracle committees, guardian multisigs, DAO-selected validator sets acting as protocol reporters, exit-bus signers, fraud-proof challengers. For each, record committee size, quorum, who picks the members, and what mis-reporting could do (mint, burn, finalize withdrawal, freeze). Distinguish this from governance admins (control slice). NOTE ON STAKING PROTOCOLS: validator slashing and node-operator misbehavior are properties of the base-chain substrate, NOT external dependencies, when the operator set is diversified enough that a coordinated failure caps at <5% principal loss. Count validator/operator risk under A2 ONLY if the operator set is small, non-diversified, or lacks bonding / slashing-insurance / diversification mitigations. A curated set of 30+ independent operators with documented diversification falls under the mitigated path; a 3-operator LST does not. Do not cite the protocol's own risk disclosure as evidence that operator failure = principal loss unless you also check the diversification and bond mitigations. - A3. Bridge / cross-chain messaging dependencies. Only count bridges that carry material TVL or are required for a core user flow. For each, name the bridge operator (canonical L1↔L2, LayerZero, Wormhole, Axelar, custom multisig), the trust model (canonical, optimistic, light-client, guardian set), and what fraction of TVL or users ride on it. "wstETH exists on 15 chains" is not a finding unless material TVL sits there. Before listing any non-primary chain deployment as a dependency, verify it is still operational as of analysis_date — retired or sunset deployments (e.g., Lido-on-Terra, Lido-on-Solana) belong in unknowns[] or should be omitted, never cited as a current dependency. - A4. Nested collateral / restaking chains. For restaking / LRT / receipt-of-receipt designs: record the depth of the collateral chain, every actor with slashing or freezing power at each level, and whether a failure N levels deep propagates to user principal here. - A5. Fork lineage (silent check). If DeFiLlama's forkedFrom is non-empty, record it as one finding and move on. If empty, do NOT add a placeholder finding; it adds noise. - A6. Fallback mechanisms and circuit breakers. What catches an external failure? Sanity-check contracts on oracle reports, rebase bounds, pause paths triggered by bad prices, second-opinion oracles, max-per-block throughput caps, withdrawal queues that absorb bad reports. Record which A1–A4 risks are mitigated by which fallback, and which are unmitigated. For EACH fallback you cite, state its activation status explicitly: (i) LIVE and enforcing on-chain today, (ii) DEPLOYED but not yet wired / activated (e.g., interface exists but the address is zero or the role is unassigned), or (iii) DOCUMENTED / PROPOSED only (forum post, LIP draft, audit pending). Only (i) counts as mitigation for the grade. A fallback in state (ii) or (iii) should be noted but must not reduce the risk in your steel-man or verdict. If you cannot determine activation status, add an unknowns[] entry rather than assume it is live. - A7. Sequencer / L1-liveness dependency BEYOND the base-chain substrate. SCOPE — sequencer risk only counts here when the protocol IS its own L2/L3 appchain or app-rollup, where the sequencer is part of the protocol's own stack and a freeze is a protocol-level outage. A protocol permissionlessly deployed on a third-party L2 inherits that L2's sequencer as substrate, not an A7 dependency. Record the sequencer/DA trust model when A7 applies. - A8. Keeper / relayer / off-chain bot liveness. Protocols that need permissionless-but-necessary off-chain actors (liquidation bots, auto-compounders, deposit relayers, intent solvers). Record whether the role is permissionless, what degrades if nobody runs it (yield paused, bad debt accumulates, positions go stale), and whether the failure mode is graceful or catastrophic. - A9. Governance-mutable dependency surface. Can an admin or DAO action silently INTRODUCE a NEW EXTERNAL dependency — swap the oracle address to a different provider, register a new staking module that calls an untrusted contract, add a new bridge, route SY through a new external vault — without an exit window for users? Check the upgrade / router / module-registry contracts. Answer: which EXTERNAL dependencies are governance-mutable, who holds that power, and whether there is a timelock or exit window. SCOPE LIMIT — read carefully: A9 is about the *external dependency surface*, not the upgrade surface in general. "The proxyAdmin / EOA can upgrade the router implementation to arbitrary bytecode" is a CONTROL-slice finding (admin can rug), NOT an autonomy-A9 finding. A9 fires only when the upgrade specifically swaps out or adds a contract that THIS protocol calls or trusts (e.g., changing the oracle address from Chainlink to a malicious feed, registering a new SY adapter that points to a third-party vault, redirecting a bridge endpoint). If the only finding is "admin can change implementation," do not log it under A9 and do not let it drive the autonomy grade — note it under control instead. The autonomy-relevant version of the same upgrade key is "admin can swap [specific external address X] without timelock"; that requires identifying the specific external dependency that becomes mutable. STEEL-MAN (per Hard Rule 13): write one-sentence strongest arguments for red, orange, and green using the A1–A9 findings. IMPACTED TVS ESTIMATE: the headline MUST include a rough impacted-TVS figure — the fraction of protocol TVS that could be lost or frozen if the worst-unmitigated dependency you identified failed. Use "~X%" if exact numbers are unavailable, "<1%" for de minimis, "unclear" only if A1–A9 left the question genuinely open (in which case grade=unknown is usually correct). Do NOT substitute qualitative phrases like "significant" — give a number or bracket. GRADE ANCHORS (mapped to DefiScan v1 stages): - green = Stage 2 equivalent. Failure of any external dependency cannot cause loss of user principal or unclaimed yield. Either there are no material external dependencies, or every critical one has a documented fallback (A6) that keeps users whole. Governance cannot silently introduce new dependencies without an exit window (A9). Impacted TVS under any single-dependency failure: effectively 0. - orange = Stage 1 equivalent. Failure of some external dependency can cause loss of unclaimed yield, or can materially change expected performance (pause withdrawals, freeze positions, degrade price quality), but cannot cause loss of principal. Committee-based oracles with sanity checks, canonical-only bridges, fallback paths that exist but are incomplete, or governance-mutable dependencies protected by a ≥7-day timelock. Impacted TVS is bounded and recoverable. - red = Stage 0 equivalent. Failure of an external dependency CAN cause theft or loss of principal. Examples: single-provider oracle with no sanity check or fallback, material TVL on a non-canonical bridge with a guardian multisig, governance can hot-swap oracles or add staking modules with no timelock or exit window, unmitigated keeper-liveness dependency where positions become insolvent if bots stop. Impacted TVS is material. - unknown = checklist incomplete after inspecting source + verified contracts. Prefer unknown over guessing when A1/A6 could not be reconstructed. RESERVE unknown for cases where the CORE ARCHITECTURE itself is unverifiable — not for cases where you merely cannot enumerate every per-market dependency in a multi-market protocol. If the core router/factory/oracle architecture is verifiable on-chain and you can determine whether the core requires external dependencies, grade the architecture even when an exhaustive per-market external-dependency census is infeasible. Acknowledge the per-market gap in unknowns[] but still issue a grade. Refusing to grade a multi-market protocol because you cannot list every SY/vault/market is over-use of unknown; grade the architecture and say so. PROMPT-META CHECK (per Hard Rule 17): before finalizing, verify the verdict cites concrete contract addresses, docs, or code — not the rubric itself. If your verdict says "the protocol belongs to a category the rubric marks red", rewrite it with the A1–A9 finding that actually justifies the grade, or drop to grade=unknown. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "autonomy", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Not yet assessed
Whether the protocol depends on privileged operators, whitelists, geo-restrictions, or off-chain infrastructure. This is not a signal DeFiLlama carries in a usable form; crawler-based detection lands in a later phase.
No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v2 - protocol.name: Uniswap V2 - protocol.chains: Ethereum, Base, Polygon, Arbitrum, Binance, Monad, Optimism, X Layer, Avalanche, Unichain, Tempo, Zora, Celo - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f", "role": "factory" }, { "chain": "Ethereum", "address": "0x7a250d5630b4cf539739df2c5dacb4c659f2488d", "role": "router" }, { "chain": "Ethereum", "address": "0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b", "role": "migrator" }, { "chain": "Ethereum", "address": "0x1f98400000000000000000000000000000000001", "role": "factory" }, { "chain": "Sepolia", "address": "0xF62c03E08ada871A0bEb309762E260a7a6a880E6", "role": "factory" }, { "chain": "Sepolia", "address": "0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3", "role": "router" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000002", "role": "factory" }, { "chain": "Unichain", "address": "0x284f11109359a7e1306c3e447ef14d38400063ff", "role": "router" }, { "chain": "Arbitrum", "address": "0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9", "role": "factory" }, { "chain": "Arbitrum", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Tempo", "address": "0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f", "role": "factory" }, { "chain": "Tempo", "address": "0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e", "role": "router" }, { "chain": "Avalanche", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Avalanche", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Binance", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Binance", "address": "0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24", "role": "router" }, { "chain": "Base", "address": "0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6", "role": "factory" }, { "chain": "Base", "address": "0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24", "role": "router" }, { "chain": "Optimism", "address": "0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf", "role": "factory" }, { "chain": "Optimism", "address": "0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2", "role": "router" }, { "chain": "Polygon", "address": "0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C", "role": "factory" }, { "chain": "Polygon", "address": "0xedf6066a2b290C185783862C7F4776A2C8077AD1", "role": "router" }, { "chain": "Blast", "address": "0x5C346464d33F90bABaf70dB6388507CC889C1070", "role": "factory" }, { "chain": "Blast", "address": "0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035", "role": "router" }, { "chain": "Zora", "address": "0x0F797dC7efaEA995bB916f268D919d0a1950eE3C", "role": "factory" }, { "chain": "Zora", "address": "0xa00F34A632630EFd15223B1968358bA4845bEEC7", "role": "router" }, { "chain": "Monad", "address": "0x182a927119d56008d921126764bf884221b10f59", "role": "factory" }, { "chain": "Monad", "address": "0x4b2ab38dbf28d31d467aa8993f6c2585981d6804", "role": "router" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f (factory) - https://defipunkd.com/address/1/0x7a250d5630b4cf539739df2c5dacb4c659f2488d (router) - https://defipunkd.com/address/1/0x16d4f26c15f3658ec65b1126ff27dd3df2a2996b (migrator) - https://defipunkd.com/address/1/0x1f98400000000000000000000000000000000001 (factory) - https://defipunkd.com/address/11155111/0xF62c03E08ada871A0bEb309762E260a7a6a880E6 (factory) - https://defipunkd.com/address/11155111/0xeE567Fe1712Faf6149d80dA1E6934E354124CfE3 (router) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000002 (factory) - https://defipunkd.com/address/130/0x284f11109359a7e1306c3e447ef14d38400063ff (router) - https://defipunkd.com/address/42161/0xf1D7CC64Fb4452F05c498126312eBE29f30Fbcf9 (factory) - https://defipunkd.com/address/42161/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Tempo: 0xf9ec577a4e45b5278bb7cf60fcbc20c3acaef68f (chain not supported by the read API) - Tempo: 0x0fbac3c46f6f83b44c7fb4ea986d7309c701d73e (chain not supported by the read API) - https://defipunkd.com/address/43114/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/43114/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - Binance: 0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (chain not supported by the read API) - Binance: 0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24 (chain not supported by the read API) - https://defipunkd.com/address/8453/0x8909Dc15e40173Ff4699343b6eB8132c65e18eC6 (factory) - https://defipunkd.com/address/8453/0x4752ba5dbc23f44d87826276bf6fd6b1c372ad24 (router) - https://defipunkd.com/address/10/0x0c3c1c532F1e39EdF36BE9Fe0bE1410313E074Bf (factory) - https://defipunkd.com/address/10/0x4A7b5Da61326A6379179b40d00F57E5bbDC962c2 (router) - https://defipunkd.com/address/137/0x9e5A52f57b3038F1B8EeE45F28b3C1967e22799C (factory) - https://defipunkd.com/address/137/0xedf6066a2b290C185783862C7F4776A2C8077AD1 (router) - https://defipunkd.com/address/81457/0x5C346464d33F90bABaf70dB6388507CC889C1070 (factory) - https://defipunkd.com/address/81457/0xBB66Eb1c5e875933D44DAe661dbD80e5D9B03035 (router) - Zora: 0x0F797dC7efaEA995bB916f268D919d0a1950eE3C (chain not supported by the read API) - Zora: 0xa00F34A632630EFd15223B1968358bA4845bEEC7 (chain not supported by the read API) - Monad: 0x182a927119d56008d921126764bf884221b10f59 (chain not supported by the read API) - Monad: 0x4b2ab38dbf28d31d467aa8993f6c2585981d6804 (chain not supported by the read API) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: OPEN-ACCESS Evaluate who is allowed to use the protocol and whether any of that permission is granted off-chain. Scope: this slice is about ADMISSION — who can enter, exit, or transact. Operator LIVENESS (what breaks if keepers/oracles go offline) is assessed in the dependencies slice and is out of scope for the grade here. You may note operator dependencies as context, but do not let "the protocol halts if operator X disappears" drive the access grade on its own; that belongs in dependencies. Source verification / contract verification on block explorers is assessed in the verifiability slice and is out of scope here — do NOT let "contract is unverified" drive the access grade. Framing: the smart contracts are the access layer; frontends are UX. A permissionless contract is reachable by any client (SDK, third-party UI, aggregator, wallet integration). Frontend ToS, IP geo-blocking, and wallet screening are publisher policies on one specific client — they are reported as context but do NOT determine the grade. The grade hinges on (1) what the contract itself permits, and (2) whether the protocol is practically reachable without the official publisher's cooperation. Meta-check before finalizing: if your verdict cites phrases from this prompt as evidence ("the protocol meets the 'credible alternatives' condition", "this fits the 'documented fallback' rule"), redo the verdict. The prompt describes the rubric; evidence must come from the protocol. A verdict should cite what the protocol does, not what the rubric says. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. Whitelist / allowlist modifiers in user-facing entry points. Grep for "onlyWhitelisted", "onlyRole", "allowlist", "isAccredited", "isKYCed". Note which functions are gated and who can add/remove from the list. - A2. Off-chain operators in the admission path: keepers, sequencers, privileged relayers, oracle posters whose approval is required to admit a user action (not just to keep the protocol live). For each, identify whether the role is held by a single operator, a permissioned committee, or is permissionless. Enumerate per user-facing function class (deposit vs withdraw-request vs claim-finalized vs transfer) which ones require operator approval to be admitted, and which ones admit users unconditionally. A function whose placement is unconditional but whose downstream settlement depends on an operator is an admission-permissionless function — flag the liveness dependency as context and defer its grading weight to the dependencies slice. - A3. Frontend restrictions on the official interface — record as context, not as a grade lever. Distinguish: - A3-passive: boilerplate ToS clauses (sanctions attestation, restricted-territory self-certification, VPN-circumvention prohibition, "comply with applicable law" eligibility, age of majority). - A3-active: runtime enforcement — IP-based geo-blocking, wallet-address screening against a sanctions oracle (Chainalysis, TRM, Elliptic), KYC wall, rendering-blocking jurisdiction banner. Record findings under the correct tier. Quote ToS text or banner text in evidence[].shows. These findings populate the headline and rationale but do NOT move the grade by themselves; the grade is set by A1, A2, and the A3b path check below. - A3b. Independent access paths (the operative grade input). Enumerate paths that do not require the official publisher's cooperation: - Published SDK / library / CLI for direct contract interaction. - Third-party frontends operated by separate legal entities. - Wallet-integrated access (MetaMask Swaps, Safe apps, etc.). - DEX / lending / yield aggregators that route through the contracts. Record at least one concrete link per path that exists. The protocol does NOT have to self-document these — the test is existence, not UX cost. An A3b-i redistribution of the official UI bound by the same ToS does NOT count as an independent path. - A4. Sanctions / compliance tooling at the contract level: does the protocol check addresses against OFAC lists or similar on-chain blocklists in the contract itself? (Frontend-only screening belongs in A3.) - A5. Differentiate read access vs write access: many protocols are read-permissionless (anyone can view state) but write-gated (only certain addresses can deposit/borrow). Record both. - A6. ToS / Legal links: locate them on the website and produce a VERBATIM quote of any jurisdictional, sanctions, or eligibility clause in evidence[].shows. If you cannot extract the clause text verbatim (SPA render failure, paywall, dead link, etc.), do NOT paraphrase or infer from general knowledge — record the ToS URL in unknowns[] with the reason extraction failed. Assertions about ToS content without a verbatim quote will be downweighted by reviewers. Then write the steel-man section per Hard Rule 11. Grade rules (admission-focused; liveness concerns belong in dependencies; source verification belongs in verifiability): - green = no contract-level whitelist/KYC on user entry/exit; no operator approval required to admit a user action; AND at least one independent A3b path exists (published SDK, third-party frontend, wallet integration, or aggregator routing). Frontend ToS posture and A3-active enforcement on the official UI do NOT block green when contracts are permissionless and an independent path exists — they are reported as context. - orange = contracts admit users unconditionally, BUT the protocol is operationally captured by the official publisher: no published SDK, no third-party frontend, no wallet integration, no aggregator routing. The contract is theoretically open but practically reachable only through the official UI. Also applies when admission requires approval from a permissioned committee that is governance-managed with a documented replacement procedure. - red = contract-level whitelist / KYC on user entry/exit, OR admission of a core user action requires approval from a single privileged operator or a small committee with no documented replacement procedure, OR enforces an on-chain blocklist updatable by a single party. - unknown = checklist incomplete after checking the sources above. Default-grade guidance: when contracts are fully permissionless AND any A3b independent path exists, the default grade is green regardless of frontend ToS or A3-active enforcement on the official UI. Frontend geo-blocking, sanctions-oracle wallet screening, and ToS sanctions clauses are publisher policies on one client and are reported in findings/headline as context, not as grade levers. To grade orange on operational-capture grounds, the auditor must affirmatively show that ALL independent paths are absent or also gated. Guideline on committees: where admission depends on a multi-operator committee, the relevant axes are (a) set size, (b) whether replacement/rotation is governed on-chain, (c) whether the replacement procedure is publicly documented. A large set with on-chain governance replacement should not be graded as a single-party operator even if rotation is not instantaneous. A small set with informal replacement should be treated as a single-party operator. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "open-access", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.
Stage
Preview of the Phase-3 maturity framework. DeFiPunk'd will adopt DeFiScan v2's stages verbatim; the section is rendered below in its intended shape so the structure is visible today.
Uniswap V2 has not yet been assessed under the DeFiScan v2 stage framework.
The walkaway test is the central criterion. Once stages land, protocols reach Stage 1 only if users can exit in the presence of malicious operators even when the emergency council disappears.
Scope of assessment
Stages are assessed per-protocol against DeFiScan v2's criteria: governance structure, upgradeability path, timelock durations, emergency-council scope, and the walkaway test. The analysis depends on onchain discovery (roles, owners, timelocks) and deeper review of deployed contracts — neither of which DeFiPunk'd automates at Phase 0.
Stage 0 requirements pending
Governance is largely off-chain, contracts are upgradeable with short or no timelock, and the protocol depends on a multisig or team with full discretion. At Phase 0 DeFiPunk'd does not automatically evaluate these; the assessment lands with crawler-based onchain discovery.
Stage 1 requirements pending
Users can exit or opt out on their own terms even if the team disappears. Upgrades run through a meaningful timelock with an emergency security council clearly scoped. The walkaway test is the headline criterion.
Stage 2 requirements pending
Protocol is fully permissionless and immutable, or upgrades require a supermajority of token holders with a long timelock and no emergency override. This is the terminal stage of the DeFiScan v2 framework.
Stages are an opinionated assessment of maturity, not a rating of security or safety. A protocol can sit at Stage 2 and still carry substantial technical or economic risk; the framework exists to incentivize decentralization, not to rank protocols.
Contract surface
Every contract in scope for this protocol — pooled from DeFiLlama's TVL adapter (mechanical) and DEFI@home discovery submissions (LLM-curated). Verified-source flags come from Etherscan + Sourcify; owner / multisig metadata is read on-chain when available. Reviewer audit context, not a slice score. A lending protocol's adapter set will list third-party collateral tokens alongside its own contracts; attribution is the grader's job.
- 28addresses
- 0verified source
- 0proxies
| Arbitrum | factory | 0xf1d7…bcf9 | discovery | — | — | — | factory |
| Arbitrum | router | 0x4752…ad24 | discovery | — | — | — | router |
| Avalanche | factory | 0x9e5a…799c | discovery | — | — | — | factory |
| Avalanche | router | 0x4752…ad24 | discovery | — | — | — | router |
| Base | factory | 0x8909…8ec6 | discovery | — | — | — | factory |
| Base | router | 0x4752…ad24 | discovery | — | — | — | router |
| Binance | factory | 0x8909…8ec6 | discovery | — | — | — | factory |
| Binance | router | 0x4752…ad24 | discovery | — | — | — | router |
| Blast | factory | 0x5c34…1070 | discovery | — | — | — | factory |
| Blast | router | 0xbb66…3035 | discovery | — | — | — | router |
| Ethereum | factory | 0x1f98…0001 | discovery | — | — | — | factory |
| Ethereum | factory | 0x5c69…aa6f | discovery | — | — | — | factory |
| Ethereum | migrator | 0x16d4…996b | discovery | — | — | — | — |
| Ethereum | router | 0x7a25…488d | discovery | — | — | — | router |
| Monad | factory | 0x182a…0f59 | discovery | — | — | — | factory |
| Monad | router | 0x4b2a…6804 | discovery | — | — | — | router |
| Optimism | factory | 0x0c3c…74bf | discovery | — | — | — | factory |
| Optimism | router | 0x4a7b…62c2 | discovery | — | — | — | router |
| Polygon | factory | 0x9e5a…799c | discovery | — | — | — | factory |
| Polygon | router | 0xedf6…7ad1 | discovery | — | — | — | router |
| Sepolia | factory | 0xf62c…80e6 | discovery | — | — | — | factory |
| Sepolia | router | 0xee56…cfe3 | discovery | — | — | — | router |
| Tempo | factory | 0xf9ec…f68f | discovery | — | — | — | factory |
| Tempo | router | 0x0fba…d73e | discovery | — | — | — | router |
| Unichain | factory | 0x1f98…0002 | discovery | — | — | — | factory |
| Unichain | router | 0x284f…63ff | discovery | — | — | — | router |
| Zora | factory | 0x0f79…ee3c | discovery | — | — | — | factory |
| Zora | router | 0xa00f…eec7 | discovery | — | — | — | router |
Control Exit Autonomy Open Access Verifiable
- Tier silver Weak AI consensus on all dimensions
- Verifiability tentative Verified & heavily audited
- Control tentative Bounded fee governance
- Ability to exit tentative No pause, fully permissionless exit
- Autonomy tentative No external dependencies in core
- Open Access tentative Permissionless contracts, multiple access paths
Control criteria
Upgradeability
Immutable
Bug bounty
blog.uniswap.org
Governance forum
gov.uniswap.org
Docs
docs.uniswap.org
About
Uniswap v4 is a non-custodial automated market maker where users swap tokens and provide liquidity to pools. Its singleton PoolManager holds pool state and uses flash accounting so swaps, liquidity changes, settlement, and token-taking are balanced within an unlock flow. Liquidity positions are commonly managed through the v4 PositionManager ERC721 periphery, while pool creators can attach hooks that customize pool behavior.
Risk analysis
One card per dimension, sorted by severity. Only Verifiability and Autonomy carry automated signals in Phase 0. See methodology for scope.
Audit a dimension yourself · DEFI@home Contribute an LLM-run assessment — any model, any dimension. Three agreeing runs merge automatically into the public record.
DEFI@home is a distributed audit network modeled on SETI@home: instead of CPU cycles, it crowdsources LLM reasoning. Paste a slice prompt into Claude, ChatGPT, Gemini, or any browsing-capable model, and submit the JSON output as a pull request. The quorum bot merges it once ≥3 independent runs (from different models) reach the same grade — no single model, and no single contributor, can move the needle alone. How it works →
- Address discovery 117 addresses on file
· 1 run Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v4 - protocol.name: Uniswap V4 - protocol.chains: Ethereum, Base, Arbitrum, Polygon, Binance, Unichain, Monad, Soneium, Optimism, Tempo, Avalanche, World Chain, X Layer, Blast, Ink, Zora - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/Uniswap/v4-core/tree/main/docs/security/audits, https://github.com/Uniswap/v4-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-07-uniswap-v4-core-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x1a9C8182C09F50C8318d769245beA52c32BE35BC", "role": "PoolManager owner (Timelock, 2-day minimum delay)" }, { "chain": "Ethereum", "address": "0x408ED6354d4973f66138C91495F2f2FCbd8724C3", "role": "GovernorBravo proxy (admin of the Timelock)" }, { "chain": "Ethereum", "address": "0x3e51b68a157b573303155300a6593224f009990a", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497D0Cd94564c118C661384", "role": "Uniswap DAO Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497d0Cd94564c118039df83", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503475d9f9244252322473c9Cd", "role": "Uniswap Governance Timelock" }, { "chain": "Base", "address": "0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9", "role": "Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Optimism", "address": "0xa1dD330d602c32622AA270Ea73d078B803Cb3518", "role": "Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Blast", "address": "0x2339C0d23b60739B3E5ABF201F05903D24A26C77", "role": "Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Binance", "address": "0x341c1511141022cf8eE20824Ae0fFA3491F1302b", "role": "BSC PoolManager owner; Uniswap Wormhole Message Receiver linked to an Ethereum sender owned by the Uniswap timelock" }, { "chain": "Avalanche", "address": "0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc", "role": "Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint" }, { "chain": "Ethereum", "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "role": "PoolManager" }, { "chain": "Ethereum", "address": "0xd1428ba554f4c8450b763a0b2040a4935c63f06c", "role": "PositionDescriptor" }, { "chain": "Ethereum", "address": "0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e", "role": "PositionManager" }, { "chain": "Ethereum", "address": "0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203", "role": "Quoter" }, { "chain": "Ethereum", "address": "0x7ffe42c4a5deea5b0fec41c94c136cf115597227", "role": "StateView" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "Universal Router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Arbitrum", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Arbitrum", "address": "0xe2023f3fa515cf070e07fd9d51c1d236e07843f4", "role": "PositionDescriptor" }, { "chain": "Arbitrum", "address": "0xd88f38f930b7952f2db2432cb002e7abbf3dd869", "role": "PositionManager" }, { "chain": "Arbitrum", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Arbitrum", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "Universal Router" }, { "chain": "Arbitrum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Base", "address": "0x498581ff718922c3f8e6a244956af099b2652b2b", "role": "PoolManager" }, { "chain": "Base", "address": "0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5", "role": "PositionDescriptor" }, { "chain": "Base", "address": "0x7c5f5a4bbd8fd63184577525326123b519429bdc", "role": "PositionManager" }, { "chain": "Base", "address": "0x0d5e0f971ed27fbff6c2837bf31316121532048d", "role": "Quoter" }, { "chain": "Base", "address": "0xa3c0c9b65bad0b08107aa264b0f3db444b867a71", "role": "StateView" }, { "chain": "Base", "address": "0x6ff5693b99212da76ad316178a184ab56d299b43", "role": "Universal Router" }, { "chain": "Base", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Optimism", "address": "0x9a13f98cb987694c9f086b1f5eb990eea8264ec3", "role": "PoolManager" }, { "chain": "Optimism", "address": "0xedd81496169c46df161b8513a52ffecaaaa66743", "role": "PositionDescriptor" }, { "chain": "Optimism", "address": "0x3c3ea4b57a46241e54610e5f022e5c45859a1017", "role": "PositionManager" }, { "chain": "Optimism", "address": "0x1f3131a13296fb91c90870043742c3cdbff1a8d7", "role": "Quoter" }, { "chain": "Optimism", "address": "0xc18a3169788f4f75a170290584eca6395c75ecdb", "role": "StateView" }, { "chain": "Optimism", "address": "0x851116d9223fabed8e56c0e6b8ad0c31d98b3507", "role": "Universal Router" }, { "chain": "Optimism", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Polygon", "address": "0x67366782805870060151383f4bbff9dab53e5cd6", "role": "PoolManager" }, { "chain": "Polygon", "address": "0x0892771f0c1b78ad6013d6e5536007e1c16e6794", "role": "PositionDescriptor" }, { "chain": "Polygon", "address": "0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9", "role": "PositionManager" }, { "chain": "Polygon", "address": "0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9", "role": "Quoter" }, { "chain": "Polygon", "address": "0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a", "role": "StateView" }, { "chain": "Polygon", "address": "0x1095692a6237d83c6a72f3f5efedb9a670c49223", "role": "Universal Router" }, { "chain": "Polygon", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000004", "role": "PoolManager" }, { "chain": "Unichain", "address": "0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722", "role": "PositionDescriptor" }, { "chain": "Unichain", "address": "0x4529a01c7a0410167c5740c487a8de60232617bf", "role": "PositionManager" }, { "chain": "Unichain", "address": "0x333e3c607b141b18ff6de9f258db6e77fe7491e0", "role": "Quoter" }, { "chain": "Unichain", "address": "0x86e8631a016f9068c3f085faf484ee3f5fdee8f2", "role": "StateView" }, { "chain": "Unichain", "address": "0xef740bf23acae26f6492b10de645d6b98dc8eaf3", "role": "Universal Router" }, { "chain": "Unichain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Monad", "address": "0x188d586ddcf52439676ca21a244753fa19f9ea8e", "role": "PoolManager" }, { "chain": "Monad", "address": "0x5770d2914355a6d0a39a70aeea9bcce55df4201b", "role": "PositionDescriptor" }, { "chain": "Monad", "address": "0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016", "role": "PositionManager" }, { "chain": "Monad", "address": "0xa222dd357a9076d1091ed6aa2e16c9742dd26891", "role": "Quoter" }, { "chain": "Monad", "address": "0x77395f3b2e73ae90843717371294fa97cc419d64", "role": "StateView" }, { "chain": "Monad", "address": "0x0d97dc33264bfc1c226207428a79b26757fb9dc3", "role": "Universal Router" }, { "chain": "Monad", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Binance", "address": "0x28e2ea090877bf75740558f6bfb36a5ffee9e9df", "role": "PoolManager" }, { "chain": "Binance", "address": "0xf0432f360703ec3d33931a8356a75a77d8d380e1", "role": "PositionDescriptor" }, { "chain": "Binance", "address": "0x7a4a5c919ae2541aed11041a1aeee68f1287f95b", "role": "PositionManager" }, { "chain": "Binance", "address": "0x9f75dd27d6664c475b90e105573e550ff69437b0", "role": "Quoter" }, { "chain": "Binance", "address": "0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4", "role": "StateView" }, { "chain": "Binance", "address": "0x1906c1d672b88cd1b9ac7593301ca990f94eae07", "role": "Universal Router" }, { "chain": "Binance", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Soneium", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Soneium", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Soneium", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Soneium", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Soneium", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Soneium", "address": "0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df", "role": "Universal Router" }, { "chain": "Soneium", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Avalanche", "address": "0x06380c0e0912312b5150364b9dc4542ba0dbbc85", "role": "PoolManager" }, { "chain": "Avalanche", "address": "0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9", "role": "PositionDescriptor" }, { "chain": "Avalanche", "address": "0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd", "role": "PositionManager" }, { "chain": "Avalanche", "address": "0xbe40675bb704506a3c2ccfb762dcfd1e979845c2", "role": "Quoter" }, { "chain": "Avalanche", "address": "0xc3c9e198c735a4b97e3e683f391ccbdd60b69286", "role": "StateView" }, { "chain": "Avalanche", "address": "0x94b75331ae8d42c1b61065089b7d48fe14aa73b7", "role": "Universal Router" }, { "chain": "Avalanche", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "World Chain", "address": "0xb1860d529182ac3bc1f51fa2abd56662b7d13f33", "role": "PoolManager" }, { "chain": "World Chain", "address": "0x7da419153bd420b689f312363756d76836aeace4", "role": "PositionDescriptor" }, { "chain": "World Chain", "address": "0xc585e0f504613b5fbf874f21af14c65260fb41fa", "role": "PositionManager" }, { "chain": "World Chain", "address": "0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0", "role": "Quoter" }, { "chain": "World Chain", "address": "0x51d394718bc09297262e368c1a481217fdeb71eb", "role": "StateView" }, { "chain": "World Chain", "address": "0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743", "role": "Universal Router" }, { "chain": "World Chain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "X Layer", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Blast", "address": "0x1631559198a9e474033433b2958dabc135ab6446", "role": "PoolManager" }, { "chain": "Blast", "address": "0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97", "role": "PositionDescriptor" }, { "chain": "Blast", "address": "0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad", "role": "PositionManager" }, { "chain": "Blast", "address": "0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf", "role": "Quoter" }, { "chain": "Blast", "address": "0x12a88ae16f46dce4e8b15368008ab3380885df30", "role": "StateView" }, { "chain": "Blast", "address": "0xeabbcb3e8e415306207ef514f660a3f820025be3", "role": "Universal Router" }, { "chain": "Blast", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Tempo", "address": "0x33620f62c5b9b2086dd6b62f4a297a9f30347029", "role": "PoolManager" }, { "chain": "Tempo", "address": "0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77", "role": "PositionDescriptor" }, { "chain": "Tempo", "address": "0x3fc79444f8eacc1894775493ff3fa41f1e35ce11", "role": "PositionManager" }, { "chain": "Tempo", "address": "0x20e6487c371a2086f841ef453f85378223df4f4e", "role": "Quoter" }, { "chain": "Tempo", "address": "0x21b954fba3f5ddebe77ef2d47a3100c066908b2a", "role": "StateView" }, { "chain": "Tempo", "address": "0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91", "role": "Universal Router" }, { "chain": "Tempo", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ink", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Ink", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Ink", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Ink", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Ink", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Ink", "address": "0x112908dac86e20e7241b0927479ea3bf935d1fa0", "role": "Universal Router" }, { "chain": "Ink", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Zora", "address": "0x0575338e4c17006ae181b47900a84404247ca30f", "role": "PoolManager" }, { "chain": "Zora", "address": "0x7d64630bbb4993b5578dbd65e400961c9e68d55a", "role": "PositionDescriptor" }, { "chain": "Zora", "address": "0xf66c7b99e2040f0d9b326b3b7c152e9663543d63", "role": "PositionManager" }, { "chain": "Zora", "address": "0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6", "role": "Quoter" }, { "chain": "Zora", "address": "0x385785af07d63b50d0a0ea57c4ff89d06adf7328", "role": "StateView" }, { "chain": "Zora", "address": "0x3315ef7ca28db74abadc6c44570efdf06b04b020", "role": "Universal Router" }, { "chain": "Zora", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ethereum", "address": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "role": "UNI governance token" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x1a9C8182C09F50C8318d769245beA52c32BE35BC (PoolManager owner (Timelock, 2-day minimum delay)) - https://defipunkd.com/address/1/0x408ED6354d4973f66138C91495F2f2FCbd8724C3 (GovernorBravo proxy (admin of the Timelock)) - https://defipunkd.com/address/1/0x3e51b68a157b573303155300a6593224f009990a (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497D0Cd94564c118C661384 (Uniswap DAO Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497d0Cd94564c118039df83 (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503475d9f9244252322473c9Cd (Uniswap Governance Timelock) - https://defipunkd.com/address/8453/0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9 (Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/10/0xa1dD330d602c32622AA270Ea73d078B803Cb3518 (Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/81457/0x2339C0d23b60739B3E5ABF201F05903D24A26C77 (Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - Binance: 0x341c1511141022cf8eE20824Ae0fFA3491F1302b (chain not supported by the read API) - https://defipunkd.com/address/43114/0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc (Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint) - https://defipunkd.com/address/1/0x000000000004444c5dc75cB358380D2e3dE08A90 (PoolManager) - https://defipunkd.com/address/1/0xd1428ba554f4c8450b763a0b2040a4935c63f06c (PositionDescriptor) - https://defipunkd.com/address/1/0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e (PositionManager) - https://defipunkd.com/address/1/0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203 (Quoter) - https://defipunkd.com/address/1/0x7ffe42c4a5deea5b0fec41c94c136cf115597227 (StateView) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (Universal Router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/42161/0x360e68faccca8ca495c1b759fd9eee466db9fb32 (PoolManager) - https://defipunkd.com/address/42161/0xe2023f3fa515cf070e07fd9d51c1d236e07843f4 (PositionDescriptor) - https://defipunkd.com/address/42161/0xd88f38f930b7952f2db2432cb002e7abbf3dd869 (PositionManager) - https://defipunkd.com/address/42161/0x3972c00f7ed4885e145823eb7c655375d275a1c5 (Quoter) - https://defipunkd.com/address/42161/0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (StateView) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (Universal Router) - https://defipunkd.com/address/42161/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/8453/0x498581ff718922c3f8e6a244956af099b2652b2b (PoolManager) - https://defipunkd.com/address/8453/0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5 (PositionDescriptor) - https://defipunkd.com/address/8453/0x7c5f5a4bbd8fd63184577525326123b519429bdc (PositionManager) - https://defipunkd.com/address/8453/0x0d5e0f971ed27fbff6c2837bf31316121532048d (Quoter) - https://defipunkd.com/address/8453/0xa3c0c9b65bad0b08107aa264b0f3db444b867a71 (StateView) - https://defipunkd.com/address/8453/0x6ff5693b99212da76ad316178a184ab56d299b43 (Universal Router) - https://defipunkd.com/address/8453/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/10/0x9a13f98cb987694c9f086b1f5eb990eea8264ec3 (PoolManager) - https://defipunkd.com/address/10/0xedd81496169c46df161b8513a52ffecaaaa66743 (PositionDescriptor) - https://defipunkd.com/address/10/0x3c3ea4b57a46241e54610e5f022e5c45859a1017 (PositionManager) - https://defipunkd.com/address/10/0x1f3131a13296fb91c90870043742c3cdbff1a8d7 (Quoter) - https://defipunkd.com/address/10/0xc18a3169788f4f75a170290584eca6395c75ecdb (StateView) - https://defipunkd.com/address/10/0x851116d9223fabed8e56c0e6b8ad0c31d98b3507 (Universal Router) - https://defipunkd.com/address/10/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/137/0x67366782805870060151383f4bbff9dab53e5cd6 (PoolManager) - https://defipunkd.com/address/137/0x0892771f0c1b78ad6013d6e5536007e1c16e6794 (PositionDescriptor) - https://defipunkd.com/address/137/0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9 (PositionManager) - https://defipunkd.com/address/137/0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9 (Quoter) - https://defipunkd.com/address/137/0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a (StateView) - https://defipunkd.com/address/137/0x1095692a6237d83c6a72f3f5efedb9a670c49223 (Universal Router) - https://defipunkd.com/address/137/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000004 (PoolManager) - https://defipunkd.com/address/130/0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722 (PositionDescriptor) - https://defipunkd.com/address/130/0x4529a01c7a0410167c5740c487a8de60232617bf (PositionManager) - https://defipunkd.com/address/130/0x333e3c607b141b18ff6de9f258db6e77fe7491e0 (Quoter) - https://defipunkd.com/address/130/0x86e8631a016f9068c3f085faf484ee3f5fdee8f2 (StateView) - https://defipunkd.com/address/130/0xef740bf23acae26f6492b10de645d6b98dc8eaf3 (Universal Router) - https://defipunkd.com/address/130/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Monad: 0x188d586ddcf52439676ca21a244753fa19f9ea8e (chain not supported by the read API) - Monad: 0x5770d2914355a6d0a39a70aeea9bcce55df4201b (chain not supported by the read API) - Monad: 0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016 (chain not supported by the read API) - Monad: 0xa222dd357a9076d1091ed6aa2e16c9742dd26891 (chain not supported by the read API) - Monad: 0x77395f3b2e73ae90843717371294fa97cc419d64 (chain not supported by the read API) - Monad: 0x0d97dc33264bfc1c226207428a79b26757fb9dc3 (chain not supported by the read API) - Monad: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Binance: 0x28e2ea090877bf75740558f6bfb36a5ffee9e9df (chain not supported by the read API) - Binance: 0xf0432f360703ec3d33931a8356a75a77d8d380e1 (chain not supported by the read API) - Binance: 0x7a4a5c919ae2541aed11041a1aeee68f1287f95b (chain not supported by the read API) - Binance: 0x9f75dd27d6664c475b90e105573e550ff69437b0 (chain not supported by the read API) - Binance: 0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4 (chain not supported by the read API) - Binance: 0x1906c1d672b88cd1b9ac7593301ca990f94eae07 (chain not supported by the read API) - Binance: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Soneium: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Soneium: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Soneium: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Soneium: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Soneium: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Soneium: 0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df (chain not supported by the read API) - Soneium: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/43114/0x06380c0e0912312b5150364b9dc4542ba0dbbc85 (PoolManager) - https://defipunkd.com/address/43114/0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9 (PositionDescriptor) - https://defipunkd.com/address/43114/0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd (PositionManager) - https://defipunkd.com/address/43114/0xbe40675bb704506a3c2ccfb762dcfd1e979845c2 (Quoter) - https://defipunkd.com/address/43114/0xc3c9e198c735a4b97e3e683f391ccbdd60b69286 (StateView) - https://defipunkd.com/address/43114/0x94b75331ae8d42c1b61065089b7d48fe14aa73b7 (Universal Router) - https://defipunkd.com/address/43114/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - World Chain: 0xb1860d529182ac3bc1f51fa2abd56662b7d13f33 (chain not supported by the read API) - World Chain: 0x7da419153bd420b689f312363756d76836aeace4 (chain not supported by the read API) - World Chain: 0xc585e0f504613b5fbf874f21af14c65260fb41fa (chain not supported by the read API) - World Chain: 0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0 (chain not supported by the read API) - World Chain: 0x51d394718bc09297262e368c1a481217fdeb71eb (chain not supported by the read API) - World Chain: 0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743 (chain not supported by the read API) - World Chain: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - X Layer: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - https://defipunkd.com/address/81457/0x1631559198a9e474033433b2958dabc135ab6446 (PoolManager) - https://defipunkd.com/address/81457/0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97 (PositionDescriptor) - https://defipunkd.com/address/81457/0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad (PositionManager) - https://defipunkd.com/address/81457/0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf (Quoter) - https://defipunkd.com/address/81457/0x12a88ae16f46dce4e8b15368008ab3380885df30 (StateView) - https://defipunkd.com/address/81457/0xeabbcb3e8e415306207ef514f660a3f820025be3 (Universal Router) - https://defipunkd.com/address/81457/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Tempo: 0x33620f62c5b9b2086dd6b62f4a297a9f30347029 (chain not supported by the read API) - Tempo: 0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77 (chain not supported by the read API) - Tempo: 0x3fc79444f8eacc1894775493ff3fa41f1e35ce11 (chain not supported by the read API) - Tempo: 0x20e6487c371a2086f841ef453f85378223df4f4e (chain not supported by the read API) - Tempo: 0x21b954fba3f5ddebe77ef2d47a3100c066908b2a (chain not supported by the read API) - Tempo: 0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91 (chain not supported by the read API) - Tempo: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Ink: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Ink: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Ink: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Ink: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Ink: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Ink: 0x112908dac86e20e7241b0927479ea3bf935d1fa0 (chain not supported by the read API) - Ink: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Zora: 0x0575338e4c17006ae181b47900a84404247ca30f (chain not supported by the read API) - Zora: 0x7d64630bbb4993b5578dbd65e400961c9e68d55a (chain not supported by the read API) - Zora: 0xf66c7b99e2040f0d9b326b3b7c152e9663543d63 (chain not supported by the read API) - Zora: 0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6 (chain not supported by the read API) - Zora: 0x385785af07d63b50d0a0ea57c4ff89d06adf7328 (chain not supported by the read API) - Zora: 0x3315ef7ca28db74abadc6c44570efdf06b04b020 (chain not supported by the read API) - Zora: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/1/0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 (UNI governance token) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: DISCOVERY You are a cataloguer, not a judge. Your job is to surface every contract address that could plausibly belong to this protocol's control or fund-holding surface, each backed by a citation. `grade` is ALWAYS `"unknown"` for discovery submissions — there is no green/orange/red rubric here. The five evaluation slices that run after you (control, ability-to-exit, autonomy, open-access, verifiability) consume your output via the addressBook ratchet — every address you record becomes a pre-built surfacer URL on the next run; every address you miss costs them a tool call. Width beats depth. A `role: "other"` entry with one cited URL beats omitting it. Downstream slices will discard out-of-scope entries; they cannot rediscover what you fail to enumerate without paying the same cost again. (Step 0 capability probe lives in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every D-code below must appear in evidence[] OR unknowns[]) - **D1. Block-explorer name-tag search per chain.** For each chain in `protocol.chains`, search the canonical block explorer for the protocol's name tag — `https://etherscan.io/searchHandler?term=<query>` and the per-chain explorers (basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network). When direct fetch is blocked, use `site:<explorer> <protocol_name>` via search grounding. Record every address that surfaces with the protocol's tag, plus neighbouring "Token Contract" / "Multisig" / "Timelock" labels. - **D2. Official deployments doc.** From `protocol.website` and the docs site, locate the canonical "Deployed contracts" / "Addresses" / "Contracts" / "Deployments" page (often at `/docs/deployments`, `/docs/addresses`, `/dashboard/contracts`). Cite the URL, record every address listed with its named role, and set `protocol_metadata.deployed_contracts_doc` to this URL. - **D3. Audit PDFs.** From `protocol.audit_links` (and any audits surfaced by D2), open each. Most reports include a "Scope" / "Contracts in scope" address table in the first 5 pages. Extract every in-scope address with its labelled role. If the audit predates the current deployment, record the addresses anyway with role suffixed `(audit-era)` so downstream slices know to re-verify. - **D4. GitHub deployment artifacts.** From `protocol.github`, walk the repo at a pinned commit SHA looking for: Foundry `broadcast/<script>/<chainId>/run-latest.json` (`transactions[].contractAddress` per chainId); hardhat-deploy `deployments/<network>/<Contract>.json` (`address` field); manual indexes (`deployments.json`, `addresses.json`, `contracts.json`, `networks.json`); markdown indexes (`docs/deployments.md`, `README.md` tables). Cite the file URL with the commit SHA; pin SHAs (`?ref=<sha>`) so the citation is content-addressed. - **D5. Multi-chain enumeration.** If `protocol.chains.length > 1`, repeat D1–D4 per chain. Cross-chain deployments of the same logical contract get SEPARATE `admin_addresses[]` entries — one per chain. The chain field is part of the identity; do not collapse. If a chain has zero results, record `"D5: chain <name>: zero addresses surfaced from <sources tried>"` in unknowns[]. - **D6. Factory-discovered children.** For factory addresses surfaced in D1–D4, fetch the enumeration view via the read API (`/api/contract/read?...&method=allPools` / `getPool` / `getMarket` / `getVault`) and record each child with role like `"pool (from factory <0xFactory>)"`. **Cap at 50 children per factory.** Protocols with thousands of pools (Uniswap, Sushi) need dedicated ingestion — record the factory + the cap notice in unknowns[]. - **D7. Role taxonomy.** Every `admin_addresses[]` entry's `role` uses this controlled vocabulary (free-text suffixes OK for disambiguation, e.g. `"multisig (treasury)"`, but the leading token must match): `owner | admin | proxy_admin | governor | timelock | guardian | multisig | treasury | oracle | factory | router | token | pool | vault | other` Tentative classifications are encouraged. `actor_class` ∈ `eoa | multisig | timelock | governance | unknown` — use `unknown` when you found the address but didn't read its bytecode. - **D8. Ratchet output integrity.** Every address in `admin_addresses[]` must trace to ≥1 fetched URL in evidence[]. Snippet-only sightings go in unknowns[] with a `D8` code, NOT in admin_addresses[]. ### Discovery rationale framing - `rationale.findings`: one entry per D-code, terse, factual. Per-address detail belongs in evidence[] and admin_addresses[], not here. Example: `"D1: 8 addresses surfaced from etherscan.io name-tag search for 'Aave V3'"`. - `rationale.steelman`: ALWAYS null. - `rationale.verdict`: one short line summarizing what corpora were walked and how many addresses were catalogued. - `headline`: factual and quantitative — `"24 contracts catalogued across Ethereum, Arbitrum, and Base; 6 governance/admin and 18 protocol contracts."`. - `short_headline`: under 60 chars — `"24 contracts across 3 chains"`. ### What discovery is NOT - Not a verdict slice. `grade` must be `"unknown"`. - Not exhaustive enumeration of leaf assets — record the factory + cap and move on (see D6). - Not classification of trust assumptions — whether a multisig threshold is safe / timelock delay is sufficient / proxy admin is an EOA is the control slice's job. - Not address-book reconciliation: when addressBook is non-empty, EXTEND it (find addresses prior runs missed) rather than re-cite the same addresses; re-cite only when you have new evidence for a refined role. ### protocol_metadata side-effects While walking the corpora, populate every `protocol_metadata` field you can support with citations: `github`, `docs_url`, `audits` (one per D3 audit walked), `governance_forum`, `bug_bounty_url`, `security_contact`, `deployed_contracts_doc` (URL from D2), `upgradeability` (best-effort), and `about` (2–4 sentences sourced from docs/website, not memory). Discovery is the natural home for these — evaluation slices should not have to rediscover them. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "discovery", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Verifiability
✓ 5/5 models agree
AI-only
weak green — only 0/5 sources have a public chat share link; total support weight 0.92 below confidence floor (1.5) Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v4 - protocol.name: Uniswap V4 - protocol.chains: Ethereum, Base, Arbitrum, Polygon, Binance, Unichain, Monad, Soneium, Optimism, Tempo, Avalanche, World Chain, X Layer, Blast, Ink, Zora - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/Uniswap/v4-core/tree/main/docs/security/audits, https://github.com/Uniswap/v4-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-07-uniswap-v4-core-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x1a9C8182C09F50C8318d769245beA52c32BE35BC", "role": "PoolManager owner (Timelock, 2-day minimum delay)" }, { "chain": "Ethereum", "address": "0x408ED6354d4973f66138C91495F2f2FCbd8724C3", "role": "GovernorBravo proxy (admin of the Timelock)" }, { "chain": "Ethereum", "address": "0x3e51b68a157b573303155300a6593224f009990a", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497D0Cd94564c118C661384", "role": "Uniswap DAO Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497d0Cd94564c118039df83", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503475d9f9244252322473c9Cd", "role": "Uniswap Governance Timelock" }, { "chain": "Base", "address": "0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9", "role": "Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Optimism", "address": "0xa1dD330d602c32622AA270Ea73d078B803Cb3518", "role": "Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Blast", "address": "0x2339C0d23b60739B3E5ABF201F05903D24A26C77", "role": "Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Binance", "address": "0x341c1511141022cf8eE20824Ae0fFA3491F1302b", "role": "BSC PoolManager owner; Uniswap Wormhole Message Receiver linked to an Ethereum sender owned by the Uniswap timelock" }, { "chain": "Avalanche", "address": "0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc", "role": "Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint" }, { "chain": "Ethereum", "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "role": "PoolManager" }, { "chain": "Ethereum", "address": "0xd1428ba554f4c8450b763a0b2040a4935c63f06c", "role": "PositionDescriptor" }, { "chain": "Ethereum", "address": "0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e", "role": "PositionManager" }, { "chain": "Ethereum", "address": "0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203", "role": "Quoter" }, { "chain": "Ethereum", "address": "0x7ffe42c4a5deea5b0fec41c94c136cf115597227", "role": "StateView" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "Universal Router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Arbitrum", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Arbitrum", "address": "0xe2023f3fa515cf070e07fd9d51c1d236e07843f4", "role": "PositionDescriptor" }, { "chain": "Arbitrum", "address": "0xd88f38f930b7952f2db2432cb002e7abbf3dd869", "role": "PositionManager" }, { "chain": "Arbitrum", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Arbitrum", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "Universal Router" }, { "chain": "Arbitrum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Base", "address": "0x498581ff718922c3f8e6a244956af099b2652b2b", "role": "PoolManager" }, { "chain": "Base", "address": "0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5", "role": "PositionDescriptor" }, { "chain": "Base", "address": "0x7c5f5a4bbd8fd63184577525326123b519429bdc", "role": "PositionManager" }, { "chain": "Base", "address": "0x0d5e0f971ed27fbff6c2837bf31316121532048d", "role": "Quoter" }, { "chain": "Base", "address": "0xa3c0c9b65bad0b08107aa264b0f3db444b867a71", "role": "StateView" }, { "chain": "Base", "address": "0x6ff5693b99212da76ad316178a184ab56d299b43", "role": "Universal Router" }, { "chain": "Base", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Optimism", "address": "0x9a13f98cb987694c9f086b1f5eb990eea8264ec3", "role": "PoolManager" }, { "chain": "Optimism", "address": "0xedd81496169c46df161b8513a52ffecaaaa66743", "role": "PositionDescriptor" }, { "chain": "Optimism", "address": "0x3c3ea4b57a46241e54610e5f022e5c45859a1017", "role": "PositionManager" }, { "chain": "Optimism", "address": "0x1f3131a13296fb91c90870043742c3cdbff1a8d7", "role": "Quoter" }, { "chain": "Optimism", "address": "0xc18a3169788f4f75a170290584eca6395c75ecdb", "role": "StateView" }, { "chain": "Optimism", "address": "0x851116d9223fabed8e56c0e6b8ad0c31d98b3507", "role": "Universal Router" }, { "chain": "Optimism", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Polygon", "address": "0x67366782805870060151383f4bbff9dab53e5cd6", "role": "PoolManager" }, { "chain": "Polygon", "address": "0x0892771f0c1b78ad6013d6e5536007e1c16e6794", "role": "PositionDescriptor" }, { "chain": "Polygon", "address": "0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9", "role": "PositionManager" }, { "chain": "Polygon", "address": "0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9", "role": "Quoter" }, { "chain": "Polygon", "address": "0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a", "role": "StateView" }, { "chain": "Polygon", "address": "0x1095692a6237d83c6a72f3f5efedb9a670c49223", "role": "Universal Router" }, { "chain": "Polygon", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000004", "role": "PoolManager" }, { "chain": "Unichain", "address": "0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722", "role": "PositionDescriptor" }, { "chain": "Unichain", "address": "0x4529a01c7a0410167c5740c487a8de60232617bf", "role": "PositionManager" }, { "chain": "Unichain", "address": "0x333e3c607b141b18ff6de9f258db6e77fe7491e0", "role": "Quoter" }, { "chain": "Unichain", "address": "0x86e8631a016f9068c3f085faf484ee3f5fdee8f2", "role": "StateView" }, { "chain": "Unichain", "address": "0xef740bf23acae26f6492b10de645d6b98dc8eaf3", "role": "Universal Router" }, { "chain": "Unichain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Monad", "address": "0x188d586ddcf52439676ca21a244753fa19f9ea8e", "role": "PoolManager" }, { "chain": "Monad", "address": "0x5770d2914355a6d0a39a70aeea9bcce55df4201b", "role": "PositionDescriptor" }, { "chain": "Monad", "address": "0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016", "role": "PositionManager" }, { "chain": "Monad", "address": "0xa222dd357a9076d1091ed6aa2e16c9742dd26891", "role": "Quoter" }, { "chain": "Monad", "address": "0x77395f3b2e73ae90843717371294fa97cc419d64", "role": "StateView" }, { "chain": "Monad", "address": "0x0d97dc33264bfc1c226207428a79b26757fb9dc3", "role": "Universal Router" }, { "chain": "Monad", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Binance", "address": "0x28e2ea090877bf75740558f6bfb36a5ffee9e9df", "role": "PoolManager" }, { "chain": "Binance", "address": "0xf0432f360703ec3d33931a8356a75a77d8d380e1", "role": "PositionDescriptor" }, { "chain": "Binance", "address": "0x7a4a5c919ae2541aed11041a1aeee68f1287f95b", "role": "PositionManager" }, { "chain": "Binance", "address": "0x9f75dd27d6664c475b90e105573e550ff69437b0", "role": "Quoter" }, { "chain": "Binance", "address": "0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4", "role": "StateView" }, { "chain": "Binance", "address": "0x1906c1d672b88cd1b9ac7593301ca990f94eae07", "role": "Universal Router" }, { "chain": "Binance", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Soneium", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Soneium", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Soneium", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Soneium", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Soneium", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Soneium", "address": "0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df", "role": "Universal Router" }, { "chain": "Soneium", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Avalanche", "address": "0x06380c0e0912312b5150364b9dc4542ba0dbbc85", "role": "PoolManager" }, { "chain": "Avalanche", "address": "0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9", "role": "PositionDescriptor" }, { "chain": "Avalanche", "address": "0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd", "role": "PositionManager" }, { "chain": "Avalanche", "address": "0xbe40675bb704506a3c2ccfb762dcfd1e979845c2", "role": "Quoter" }, { "chain": "Avalanche", "address": "0xc3c9e198c735a4b97e3e683f391ccbdd60b69286", "role": "StateView" }, { "chain": "Avalanche", "address": "0x94b75331ae8d42c1b61065089b7d48fe14aa73b7", "role": "Universal Router" }, { "chain": "Avalanche", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "World Chain", "address": "0xb1860d529182ac3bc1f51fa2abd56662b7d13f33", "role": "PoolManager" }, { "chain": "World Chain", "address": "0x7da419153bd420b689f312363756d76836aeace4", "role": "PositionDescriptor" }, { "chain": "World Chain", "address": "0xc585e0f504613b5fbf874f21af14c65260fb41fa", "role": "PositionManager" }, { "chain": "World Chain", "address": "0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0", "role": "Quoter" }, { "chain": "World Chain", "address": "0x51d394718bc09297262e368c1a481217fdeb71eb", "role": "StateView" }, { "chain": "World Chain", "address": "0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743", "role": "Universal Router" }, { "chain": "World Chain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "X Layer", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Blast", "address": "0x1631559198a9e474033433b2958dabc135ab6446", "role": "PoolManager" }, { "chain": "Blast", "address": "0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97", "role": "PositionDescriptor" }, { "chain": "Blast", "address": "0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad", "role": "PositionManager" }, { "chain": "Blast", "address": "0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf", "role": "Quoter" }, { "chain": "Blast", "address": "0x12a88ae16f46dce4e8b15368008ab3380885df30", "role": "StateView" }, { "chain": "Blast", "address": "0xeabbcb3e8e415306207ef514f660a3f820025be3", "role": "Universal Router" }, { "chain": "Blast", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Tempo", "address": "0x33620f62c5b9b2086dd6b62f4a297a9f30347029", "role": "PoolManager" }, { "chain": "Tempo", "address": "0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77", "role": "PositionDescriptor" }, { "chain": "Tempo", "address": "0x3fc79444f8eacc1894775493ff3fa41f1e35ce11", "role": "PositionManager" }, { "chain": "Tempo", "address": "0x20e6487c371a2086f841ef453f85378223df4f4e", "role": "Quoter" }, { "chain": "Tempo", "address": "0x21b954fba3f5ddebe77ef2d47a3100c066908b2a", "role": "StateView" }, { "chain": "Tempo", "address": "0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91", "role": "Universal Router" }, { "chain": "Tempo", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ink", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Ink", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Ink", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Ink", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Ink", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Ink", "address": "0x112908dac86e20e7241b0927479ea3bf935d1fa0", "role": "Universal Router" }, { "chain": "Ink", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Zora", "address": "0x0575338e4c17006ae181b47900a84404247ca30f", "role": "PoolManager" }, { "chain": "Zora", "address": "0x7d64630bbb4993b5578dbd65e400961c9e68d55a", "role": "PositionDescriptor" }, { "chain": "Zora", "address": "0xf66c7b99e2040f0d9b326b3b7c152e9663543d63", "role": "PositionManager" }, { "chain": "Zora", "address": "0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6", "role": "Quoter" }, { "chain": "Zora", "address": "0x385785af07d63b50d0a0ea57c4ff89d06adf7328", "role": "StateView" }, { "chain": "Zora", "address": "0x3315ef7ca28db74abadc6c44570efdf06b04b020", "role": "Universal Router" }, { "chain": "Zora", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ethereum", "address": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "role": "UNI governance token" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x1a9C8182C09F50C8318d769245beA52c32BE35BC (PoolManager owner (Timelock, 2-day minimum delay)) - https://defipunkd.com/address/1/0x408ED6354d4973f66138C91495F2f2FCbd8724C3 (GovernorBravo proxy (admin of the Timelock)) - https://defipunkd.com/address/1/0x3e51b68a157b573303155300a6593224f009990a (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497D0Cd94564c118C661384 (Uniswap DAO Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497d0Cd94564c118039df83 (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503475d9f9244252322473c9Cd (Uniswap Governance Timelock) - https://defipunkd.com/address/8453/0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9 (Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/10/0xa1dD330d602c32622AA270Ea73d078B803Cb3518 (Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/81457/0x2339C0d23b60739B3E5ABF201F05903D24A26C77 (Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - Binance: 0x341c1511141022cf8eE20824Ae0fFA3491F1302b (chain not supported by the read API) - https://defipunkd.com/address/43114/0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc (Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint) - https://defipunkd.com/address/1/0x000000000004444c5dc75cB358380D2e3dE08A90 (PoolManager) - https://defipunkd.com/address/1/0xd1428ba554f4c8450b763a0b2040a4935c63f06c (PositionDescriptor) - https://defipunkd.com/address/1/0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e (PositionManager) - https://defipunkd.com/address/1/0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203 (Quoter) - https://defipunkd.com/address/1/0x7ffe42c4a5deea5b0fec41c94c136cf115597227 (StateView) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (Universal Router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/42161/0x360e68faccca8ca495c1b759fd9eee466db9fb32 (PoolManager) - https://defipunkd.com/address/42161/0xe2023f3fa515cf070e07fd9d51c1d236e07843f4 (PositionDescriptor) - https://defipunkd.com/address/42161/0xd88f38f930b7952f2db2432cb002e7abbf3dd869 (PositionManager) - https://defipunkd.com/address/42161/0x3972c00f7ed4885e145823eb7c655375d275a1c5 (Quoter) - https://defipunkd.com/address/42161/0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (StateView) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (Universal Router) - https://defipunkd.com/address/42161/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/8453/0x498581ff718922c3f8e6a244956af099b2652b2b (PoolManager) - https://defipunkd.com/address/8453/0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5 (PositionDescriptor) - https://defipunkd.com/address/8453/0x7c5f5a4bbd8fd63184577525326123b519429bdc (PositionManager) - https://defipunkd.com/address/8453/0x0d5e0f971ed27fbff6c2837bf31316121532048d (Quoter) - https://defipunkd.com/address/8453/0xa3c0c9b65bad0b08107aa264b0f3db444b867a71 (StateView) - https://defipunkd.com/address/8453/0x6ff5693b99212da76ad316178a184ab56d299b43 (Universal Router) - https://defipunkd.com/address/8453/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/10/0x9a13f98cb987694c9f086b1f5eb990eea8264ec3 (PoolManager) - https://defipunkd.com/address/10/0xedd81496169c46df161b8513a52ffecaaaa66743 (PositionDescriptor) - https://defipunkd.com/address/10/0x3c3ea4b57a46241e54610e5f022e5c45859a1017 (PositionManager) - https://defipunkd.com/address/10/0x1f3131a13296fb91c90870043742c3cdbff1a8d7 (Quoter) - https://defipunkd.com/address/10/0xc18a3169788f4f75a170290584eca6395c75ecdb (StateView) - https://defipunkd.com/address/10/0x851116d9223fabed8e56c0e6b8ad0c31d98b3507 (Universal Router) - https://defipunkd.com/address/10/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/137/0x67366782805870060151383f4bbff9dab53e5cd6 (PoolManager) - https://defipunkd.com/address/137/0x0892771f0c1b78ad6013d6e5536007e1c16e6794 (PositionDescriptor) - https://defipunkd.com/address/137/0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9 (PositionManager) - https://defipunkd.com/address/137/0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9 (Quoter) - https://defipunkd.com/address/137/0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a (StateView) - https://defipunkd.com/address/137/0x1095692a6237d83c6a72f3f5efedb9a670c49223 (Universal Router) - https://defipunkd.com/address/137/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000004 (PoolManager) - https://defipunkd.com/address/130/0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722 (PositionDescriptor) - https://defipunkd.com/address/130/0x4529a01c7a0410167c5740c487a8de60232617bf (PositionManager) - https://defipunkd.com/address/130/0x333e3c607b141b18ff6de9f258db6e77fe7491e0 (Quoter) - https://defipunkd.com/address/130/0x86e8631a016f9068c3f085faf484ee3f5fdee8f2 (StateView) - https://defipunkd.com/address/130/0xef740bf23acae26f6492b10de645d6b98dc8eaf3 (Universal Router) - https://defipunkd.com/address/130/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Monad: 0x188d586ddcf52439676ca21a244753fa19f9ea8e (chain not supported by the read API) - Monad: 0x5770d2914355a6d0a39a70aeea9bcce55df4201b (chain not supported by the read API) - Monad: 0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016 (chain not supported by the read API) - Monad: 0xa222dd357a9076d1091ed6aa2e16c9742dd26891 (chain not supported by the read API) - Monad: 0x77395f3b2e73ae90843717371294fa97cc419d64 (chain not supported by the read API) - Monad: 0x0d97dc33264bfc1c226207428a79b26757fb9dc3 (chain not supported by the read API) - Monad: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Binance: 0x28e2ea090877bf75740558f6bfb36a5ffee9e9df (chain not supported by the read API) - Binance: 0xf0432f360703ec3d33931a8356a75a77d8d380e1 (chain not supported by the read API) - Binance: 0x7a4a5c919ae2541aed11041a1aeee68f1287f95b (chain not supported by the read API) - Binance: 0x9f75dd27d6664c475b90e105573e550ff69437b0 (chain not supported by the read API) - Binance: 0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4 (chain not supported by the read API) - Binance: 0x1906c1d672b88cd1b9ac7593301ca990f94eae07 (chain not supported by the read API) - Binance: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Soneium: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Soneium: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Soneium: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Soneium: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Soneium: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Soneium: 0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df (chain not supported by the read API) - Soneium: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/43114/0x06380c0e0912312b5150364b9dc4542ba0dbbc85 (PoolManager) - https://defipunkd.com/address/43114/0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9 (PositionDescriptor) - https://defipunkd.com/address/43114/0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd (PositionManager) - https://defipunkd.com/address/43114/0xbe40675bb704506a3c2ccfb762dcfd1e979845c2 (Quoter) - https://defipunkd.com/address/43114/0xc3c9e198c735a4b97e3e683f391ccbdd60b69286 (StateView) - https://defipunkd.com/address/43114/0x94b75331ae8d42c1b61065089b7d48fe14aa73b7 (Universal Router) - https://defipunkd.com/address/43114/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - World Chain: 0xb1860d529182ac3bc1f51fa2abd56662b7d13f33 (chain not supported by the read API) - World Chain: 0x7da419153bd420b689f312363756d76836aeace4 (chain not supported by the read API) - World Chain: 0xc585e0f504613b5fbf874f21af14c65260fb41fa (chain not supported by the read API) - World Chain: 0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0 (chain not supported by the read API) - World Chain: 0x51d394718bc09297262e368c1a481217fdeb71eb (chain not supported by the read API) - World Chain: 0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743 (chain not supported by the read API) - World Chain: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - X Layer: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - https://defipunkd.com/address/81457/0x1631559198a9e474033433b2958dabc135ab6446 (PoolManager) - https://defipunkd.com/address/81457/0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97 (PositionDescriptor) - https://defipunkd.com/address/81457/0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad (PositionManager) - https://defipunkd.com/address/81457/0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf (Quoter) - https://defipunkd.com/address/81457/0x12a88ae16f46dce4e8b15368008ab3380885df30 (StateView) - https://defipunkd.com/address/81457/0xeabbcb3e8e415306207ef514f660a3f820025be3 (Universal Router) - https://defipunkd.com/address/81457/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Tempo: 0x33620f62c5b9b2086dd6b62f4a297a9f30347029 (chain not supported by the read API) - Tempo: 0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77 (chain not supported by the read API) - Tempo: 0x3fc79444f8eacc1894775493ff3fa41f1e35ce11 (chain not supported by the read API) - Tempo: 0x20e6487c371a2086f841ef453f85378223df4f4e (chain not supported by the read API) - Tempo: 0x21b954fba3f5ddebe77ef2d47a3100c066908b2a (chain not supported by the read API) - Tempo: 0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91 (chain not supported by the read API) - Tempo: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Ink: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Ink: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Ink: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Ink: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Ink: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Ink: 0x112908dac86e20e7241b0927479ea3bf935d1fa0 (chain not supported by the read API) - Ink: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Zora: 0x0575338e4c17006ae181b47900a84404247ca30f (chain not supported by the read API) - Zora: 0x7d64630bbb4993b5578dbd65e400961c9e68d55a (chain not supported by the read API) - Zora: 0xf66c7b99e2040f0d9b326b3b7c152e9663543d63 (chain not supported by the read API) - Zora: 0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6 (chain not supported by the read API) - Zora: 0x385785af07d63b50d0a0ea57c4ff89d06adf7328 (chain not supported by the read API) - Zora: 0x3315ef7ca28db74abadc6c44570efdf06b04b020 (chain not supported by the read API) - Zora: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/1/0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 (UNI governance token) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: VERIFIABILITY Evaluate whether an outsider can independently confirm what the deployed code does. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - V1. For each address you assess: is the bytecode verified on the chain's block explorer? Record the "Contract Source Code Verified" indicator. https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... returns this as a top-level "verified" boolean plus "abiSource" ("etherscan" / "sourcify") and an inline ABI — useful when the explorer page is rate-limited. If the contract is a proxy, verify BOTH the proxy contract AND the current implementation contract. The same /api/contract/abi response auto-resolves proxies and includes a "proxy.implementation" address when present, so one call covers V1 + V6 in one shot. An explorer "Similar Match" on a well-known proxy pattern (Aragon AppProxyUpgradeable, ERC1967Proxy, OssifiableProxy, OZ TransparentUpgradeableProxy) is expected for that pattern and does NOT count as a verification gap on its own — what matters is that the implementation is independently verified. - V2. Source-to-repo correspondence: for each verified contract, attempt to find a matching commit in the linked GitHub repos. Record evidence[].commit on a match. Independent compile/bytecode-match is NOT required for green — a recognized public repo whose structure and file contents correspond to the explorer-visible source is sufficient. If you did not pin a commit SHA or run a bytecode diff, record that plainly in unknowns[] and proceed; it is a scope limit, not a downgrade signal. - V3. Audit coverage: for each URL in protocol.audit_links, open it and record: auditor name, audit date, the specific contracts / commit in scope. Flag audits that predate the current deployment by >6 months without a follow-up review. - V4. Auditor recognition: the following firms are broadly recognized in Solidity: Trail of Bits, Zellic, Spearbit, OpenZeppelin, ConsenSys Diligence, Certora (formal verification), Quantstamp, Halborn, Peckshield, Sigma Prime, ChainSecurity, Ackee Blockchain, MixBytes, Statemind. Unknown firms are orange-at-best for any green-grade claim. Name the firm explicitly in evidence[]. - V5. Post-audit drift: compare the most recent in-scope audit(s) against the currently-deployed source, weighted by what each contract does and by what the changes actually contain. SCOPE — drift only downgrades the grade when ALL of the following hold: (i) the drifting contract is fund-custody / settlement / accounting-critical (NOT a peripheral router, lens, quoter, or pure-view contract that holds no balances); (ii) the changes are material — new functions, modified access control, modified accounting, modified fund flow — and not refactors / struct relocations / import reorgs / build or CI fixes / formatting; (iii) no later audit, fix-audit, or differential audit from a recognized firm covers the changed files (audits often pin a pre-fix commit while a follow-up reviews the delta — match by file scope, not by commit-hash equality). When you cite drift as a downgrade reason, name the specific behavior change (function added, role granted, accounting formula altered) — "N commits ahead" or "+X/-Y LOC" alone is not evidence of material drift. If you have not sampled the diff content (e.g. via the GitHub compare view or the top commits in the window), record drift as an unknowns[] entry rather than auto-downgrading; commit-count and LOC are starting signals, not findings. - V6. Implementation vs proxy: a verified proxy with an unverified implementation is effectively unverified. State whether the implementation is verified separately. EVIDENCE DISCIPLINE (read before writing findings[]): - Do not assert a specific deploy-commit SHA, bytecode equivalence, or "identical to audited commit" unless you actually fetched the artifact that shows it (e.g., a deployed-addresses JSON you opened, an explorer page you read). Inferred or plausible matches belong in unknowns[], never in findings[] or evidence[]. - Evidence[] entries must correspond to pages/files you actually retrieved this run. A URL you did not open is not evidence. Then write the steel-man section per Hard Rule 11. Grade rules: - green = deployed bytecode verified on the explorer (proxy AND implementation if proxied; "Similar Match" on a standard proxy pattern is fine per V1), a public source repo exists whose contents correspond to the explorer-visible source, AND ≥1 audit from a recognized firm covering the currently-deployed contracts (≤6 months of drift OR drift was re-audited). A missing local compile-match is not a downgrade — record it in unknowns[] and still grade green if the other conditions hold. - orange = verified but with visible drift from the public repo, OR audit scope is stale relative to deployment, OR only minor / unknown-firm audits exist, OR only some of the main contracts are verified, OR proxy verified but implementation only partially verified. - red = unverified bytecode (or verified proxy with unverified implementation), OR no audit in protocol.audit_links, OR no public repo. - unknown = reserved for when the protocol's verifiability posture genuinely cannot be assessed (e.g., explorer and repo both inaccessible for this protocol). Do NOT use unknown merely because you, the analyst, could not run a particular check such as a bytecode diff — that goes in unknowns[] while the grade is still assigned from the evidence you do have. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "verifiability", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Control
✓ 5/5 models agree
AI-only
weak green — only 0/5 sources have a public chat share link; total support weight 0.68 below confidence floor (1.5) Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v4 - protocol.name: Uniswap V4 - protocol.chains: Ethereum, Base, Arbitrum, Polygon, Binance, Unichain, Monad, Soneium, Optimism, Tempo, Avalanche, World Chain, X Layer, Blast, Ink, Zora - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/Uniswap/v4-core/tree/main/docs/security/audits, https://github.com/Uniswap/v4-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-07-uniswap-v4-core-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x1a9C8182C09F50C8318d769245beA52c32BE35BC", "role": "PoolManager owner (Timelock, 2-day minimum delay)" }, { "chain": "Ethereum", "address": "0x408ED6354d4973f66138C91495F2f2FCbd8724C3", "role": "GovernorBravo proxy (admin of the Timelock)" }, { "chain": "Ethereum", "address": "0x3e51b68a157b573303155300a6593224f009990a", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497D0Cd94564c118C661384", "role": "Uniswap DAO Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497d0Cd94564c118039df83", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503475d9f9244252322473c9Cd", "role": "Uniswap Governance Timelock" }, { "chain": "Base", "address": "0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9", "role": "Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Optimism", "address": "0xa1dD330d602c32622AA270Ea73d078B803Cb3518", "role": "Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Blast", "address": "0x2339C0d23b60739B3E5ABF201F05903D24A26C77", "role": "Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Binance", "address": "0x341c1511141022cf8eE20824Ae0fFA3491F1302b", "role": "BSC PoolManager owner; Uniswap Wormhole Message Receiver linked to an Ethereum sender owned by the Uniswap timelock" }, { "chain": "Avalanche", "address": "0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc", "role": "Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint" }, { "chain": "Ethereum", "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "role": "PoolManager" }, { "chain": "Ethereum", "address": "0xd1428ba554f4c8450b763a0b2040a4935c63f06c", "role": "PositionDescriptor" }, { "chain": "Ethereum", "address": "0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e", "role": "PositionManager" }, { "chain": "Ethereum", "address": "0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203", "role": "Quoter" }, { "chain": "Ethereum", "address": "0x7ffe42c4a5deea5b0fec41c94c136cf115597227", "role": "StateView" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "Universal Router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Arbitrum", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Arbitrum", "address": "0xe2023f3fa515cf070e07fd9d51c1d236e07843f4", "role": "PositionDescriptor" }, { "chain": "Arbitrum", "address": "0xd88f38f930b7952f2db2432cb002e7abbf3dd869", "role": "PositionManager" }, { "chain": "Arbitrum", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Arbitrum", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "Universal Router" }, { "chain": "Arbitrum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Base", "address": "0x498581ff718922c3f8e6a244956af099b2652b2b", "role": "PoolManager" }, { "chain": "Base", "address": "0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5", "role": "PositionDescriptor" }, { "chain": "Base", "address": "0x7c5f5a4bbd8fd63184577525326123b519429bdc", "role": "PositionManager" }, { "chain": "Base", "address": "0x0d5e0f971ed27fbff6c2837bf31316121532048d", "role": "Quoter" }, { "chain": "Base", "address": "0xa3c0c9b65bad0b08107aa264b0f3db444b867a71", "role": "StateView" }, { "chain": "Base", "address": "0x6ff5693b99212da76ad316178a184ab56d299b43", "role": "Universal Router" }, { "chain": "Base", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Optimism", "address": "0x9a13f98cb987694c9f086b1f5eb990eea8264ec3", "role": "PoolManager" }, { "chain": "Optimism", "address": "0xedd81496169c46df161b8513a52ffecaaaa66743", "role": "PositionDescriptor" }, { "chain": "Optimism", "address": "0x3c3ea4b57a46241e54610e5f022e5c45859a1017", "role": "PositionManager" }, { "chain": "Optimism", "address": "0x1f3131a13296fb91c90870043742c3cdbff1a8d7", "role": "Quoter" }, { "chain": "Optimism", "address": "0xc18a3169788f4f75a170290584eca6395c75ecdb", "role": "StateView" }, { "chain": "Optimism", "address": "0x851116d9223fabed8e56c0e6b8ad0c31d98b3507", "role": "Universal Router" }, { "chain": "Optimism", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Polygon", "address": "0x67366782805870060151383f4bbff9dab53e5cd6", "role": "PoolManager" }, { "chain": "Polygon", "address": "0x0892771f0c1b78ad6013d6e5536007e1c16e6794", "role": "PositionDescriptor" }, { "chain": "Polygon", "address": "0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9", "role": "PositionManager" }, { "chain": "Polygon", "address": "0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9", "role": "Quoter" }, { "chain": "Polygon", "address": "0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a", "role": "StateView" }, { "chain": "Polygon", "address": "0x1095692a6237d83c6a72f3f5efedb9a670c49223", "role": "Universal Router" }, { "chain": "Polygon", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000004", "role": "PoolManager" }, { "chain": "Unichain", "address": "0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722", "role": "PositionDescriptor" }, { "chain": "Unichain", "address": "0x4529a01c7a0410167c5740c487a8de60232617bf", "role": "PositionManager" }, { "chain": "Unichain", "address": "0x333e3c607b141b18ff6de9f258db6e77fe7491e0", "role": "Quoter" }, { "chain": "Unichain", "address": "0x86e8631a016f9068c3f085faf484ee3f5fdee8f2", "role": "StateView" }, { "chain": "Unichain", "address": "0xef740bf23acae26f6492b10de645d6b98dc8eaf3", "role": "Universal Router" }, { "chain": "Unichain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Monad", "address": "0x188d586ddcf52439676ca21a244753fa19f9ea8e", "role": "PoolManager" }, { "chain": "Monad", "address": "0x5770d2914355a6d0a39a70aeea9bcce55df4201b", "role": "PositionDescriptor" }, { "chain": "Monad", "address": "0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016", "role": "PositionManager" }, { "chain": "Monad", "address": "0xa222dd357a9076d1091ed6aa2e16c9742dd26891", "role": "Quoter" }, { "chain": "Monad", "address": "0x77395f3b2e73ae90843717371294fa97cc419d64", "role": "StateView" }, { "chain": "Monad", "address": "0x0d97dc33264bfc1c226207428a79b26757fb9dc3", "role": "Universal Router" }, { "chain": "Monad", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Binance", "address": "0x28e2ea090877bf75740558f6bfb36a5ffee9e9df", "role": "PoolManager" }, { "chain": "Binance", "address": "0xf0432f360703ec3d33931a8356a75a77d8d380e1", "role": "PositionDescriptor" }, { "chain": "Binance", "address": "0x7a4a5c919ae2541aed11041a1aeee68f1287f95b", "role": "PositionManager" }, { "chain": "Binance", "address": "0x9f75dd27d6664c475b90e105573e550ff69437b0", "role": "Quoter" }, { "chain": "Binance", "address": "0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4", "role": "StateView" }, { "chain": "Binance", "address": "0x1906c1d672b88cd1b9ac7593301ca990f94eae07", "role": "Universal Router" }, { "chain": "Binance", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Soneium", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Soneium", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Soneium", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Soneium", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Soneium", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Soneium", "address": "0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df", "role": "Universal Router" }, { "chain": "Soneium", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Avalanche", "address": "0x06380c0e0912312b5150364b9dc4542ba0dbbc85", "role": "PoolManager" }, { "chain": "Avalanche", "address": "0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9", "role": "PositionDescriptor" }, { "chain": "Avalanche", "address": "0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd", "role": "PositionManager" }, { "chain": "Avalanche", "address": "0xbe40675bb704506a3c2ccfb762dcfd1e979845c2", "role": "Quoter" }, { "chain": "Avalanche", "address": "0xc3c9e198c735a4b97e3e683f391ccbdd60b69286", "role": "StateView" }, { "chain": "Avalanche", "address": "0x94b75331ae8d42c1b61065089b7d48fe14aa73b7", "role": "Universal Router" }, { "chain": "Avalanche", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "World Chain", "address": "0xb1860d529182ac3bc1f51fa2abd56662b7d13f33", "role": "PoolManager" }, { "chain": "World Chain", "address": "0x7da419153bd420b689f312363756d76836aeace4", "role": "PositionDescriptor" }, { "chain": "World Chain", "address": "0xc585e0f504613b5fbf874f21af14c65260fb41fa", "role": "PositionManager" }, { "chain": "World Chain", "address": "0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0", "role": "Quoter" }, { "chain": "World Chain", "address": "0x51d394718bc09297262e368c1a481217fdeb71eb", "role": "StateView" }, { "chain": "World Chain", "address": "0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743", "role": "Universal Router" }, { "chain": "World Chain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "X Layer", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Blast", "address": "0x1631559198a9e474033433b2958dabc135ab6446", "role": "PoolManager" }, { "chain": "Blast", "address": "0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97", "role": "PositionDescriptor" }, { "chain": "Blast", "address": "0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad", "role": "PositionManager" }, { "chain": "Blast", "address": "0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf", "role": "Quoter" }, { "chain": "Blast", "address": "0x12a88ae16f46dce4e8b15368008ab3380885df30", "role": "StateView" }, { "chain": "Blast", "address": "0xeabbcb3e8e415306207ef514f660a3f820025be3", "role": "Universal Router" }, { "chain": "Blast", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Tempo", "address": "0x33620f62c5b9b2086dd6b62f4a297a9f30347029", "role": "PoolManager" }, { "chain": "Tempo", "address": "0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77", "role": "PositionDescriptor" }, { "chain": "Tempo", "address": "0x3fc79444f8eacc1894775493ff3fa41f1e35ce11", "role": "PositionManager" }, { "chain": "Tempo", "address": "0x20e6487c371a2086f841ef453f85378223df4f4e", "role": "Quoter" }, { "chain": "Tempo", "address": "0x21b954fba3f5ddebe77ef2d47a3100c066908b2a", "role": "StateView" }, { "chain": "Tempo", "address": "0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91", "role": "Universal Router" }, { "chain": "Tempo", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ink", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Ink", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Ink", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Ink", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Ink", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Ink", "address": "0x112908dac86e20e7241b0927479ea3bf935d1fa0", "role": "Universal Router" }, { "chain": "Ink", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Zora", "address": "0x0575338e4c17006ae181b47900a84404247ca30f", "role": "PoolManager" }, { "chain": "Zora", "address": "0x7d64630bbb4993b5578dbd65e400961c9e68d55a", "role": "PositionDescriptor" }, { "chain": "Zora", "address": "0xf66c7b99e2040f0d9b326b3b7c152e9663543d63", "role": "PositionManager" }, { "chain": "Zora", "address": "0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6", "role": "Quoter" }, { "chain": "Zora", "address": "0x385785af07d63b50d0a0ea57c4ff89d06adf7328", "role": "StateView" }, { "chain": "Zora", "address": "0x3315ef7ca28db74abadc6c44570efdf06b04b020", "role": "Universal Router" }, { "chain": "Zora", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ethereum", "address": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "role": "UNI governance token" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x1a9C8182C09F50C8318d769245beA52c32BE35BC (PoolManager owner (Timelock, 2-day minimum delay)) - https://defipunkd.com/address/1/0x408ED6354d4973f66138C91495F2f2FCbd8724C3 (GovernorBravo proxy (admin of the Timelock)) - https://defipunkd.com/address/1/0x3e51b68a157b573303155300a6593224f009990a (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497D0Cd94564c118C661384 (Uniswap DAO Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497d0Cd94564c118039df83 (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503475d9f9244252322473c9Cd (Uniswap Governance Timelock) - https://defipunkd.com/address/8453/0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9 (Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/10/0xa1dD330d602c32622AA270Ea73d078B803Cb3518 (Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/81457/0x2339C0d23b60739B3E5ABF201F05903D24A26C77 (Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - Binance: 0x341c1511141022cf8eE20824Ae0fFA3491F1302b (chain not supported by the read API) - https://defipunkd.com/address/43114/0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc (Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint) - https://defipunkd.com/address/1/0x000000000004444c5dc75cB358380D2e3dE08A90 (PoolManager) - https://defipunkd.com/address/1/0xd1428ba554f4c8450b763a0b2040a4935c63f06c (PositionDescriptor) - https://defipunkd.com/address/1/0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e (PositionManager) - https://defipunkd.com/address/1/0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203 (Quoter) - https://defipunkd.com/address/1/0x7ffe42c4a5deea5b0fec41c94c136cf115597227 (StateView) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (Universal Router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/42161/0x360e68faccca8ca495c1b759fd9eee466db9fb32 (PoolManager) - https://defipunkd.com/address/42161/0xe2023f3fa515cf070e07fd9d51c1d236e07843f4 (PositionDescriptor) - https://defipunkd.com/address/42161/0xd88f38f930b7952f2db2432cb002e7abbf3dd869 (PositionManager) - https://defipunkd.com/address/42161/0x3972c00f7ed4885e145823eb7c655375d275a1c5 (Quoter) - https://defipunkd.com/address/42161/0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (StateView) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (Universal Router) - https://defipunkd.com/address/42161/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/8453/0x498581ff718922c3f8e6a244956af099b2652b2b (PoolManager) - https://defipunkd.com/address/8453/0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5 (PositionDescriptor) - https://defipunkd.com/address/8453/0x7c5f5a4bbd8fd63184577525326123b519429bdc (PositionManager) - https://defipunkd.com/address/8453/0x0d5e0f971ed27fbff6c2837bf31316121532048d (Quoter) - https://defipunkd.com/address/8453/0xa3c0c9b65bad0b08107aa264b0f3db444b867a71 (StateView) - https://defipunkd.com/address/8453/0x6ff5693b99212da76ad316178a184ab56d299b43 (Universal Router) - https://defipunkd.com/address/8453/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/10/0x9a13f98cb987694c9f086b1f5eb990eea8264ec3 (PoolManager) - https://defipunkd.com/address/10/0xedd81496169c46df161b8513a52ffecaaaa66743 (PositionDescriptor) - https://defipunkd.com/address/10/0x3c3ea4b57a46241e54610e5f022e5c45859a1017 (PositionManager) - https://defipunkd.com/address/10/0x1f3131a13296fb91c90870043742c3cdbff1a8d7 (Quoter) - https://defipunkd.com/address/10/0xc18a3169788f4f75a170290584eca6395c75ecdb (StateView) - https://defipunkd.com/address/10/0x851116d9223fabed8e56c0e6b8ad0c31d98b3507 (Universal Router) - https://defipunkd.com/address/10/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/137/0x67366782805870060151383f4bbff9dab53e5cd6 (PoolManager) - https://defipunkd.com/address/137/0x0892771f0c1b78ad6013d6e5536007e1c16e6794 (PositionDescriptor) - https://defipunkd.com/address/137/0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9 (PositionManager) - https://defipunkd.com/address/137/0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9 (Quoter) - https://defipunkd.com/address/137/0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a (StateView) - https://defipunkd.com/address/137/0x1095692a6237d83c6a72f3f5efedb9a670c49223 (Universal Router) - https://defipunkd.com/address/137/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000004 (PoolManager) - https://defipunkd.com/address/130/0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722 (PositionDescriptor) - https://defipunkd.com/address/130/0x4529a01c7a0410167c5740c487a8de60232617bf (PositionManager) - https://defipunkd.com/address/130/0x333e3c607b141b18ff6de9f258db6e77fe7491e0 (Quoter) - https://defipunkd.com/address/130/0x86e8631a016f9068c3f085faf484ee3f5fdee8f2 (StateView) - https://defipunkd.com/address/130/0xef740bf23acae26f6492b10de645d6b98dc8eaf3 (Universal Router) - https://defipunkd.com/address/130/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Monad: 0x188d586ddcf52439676ca21a244753fa19f9ea8e (chain not supported by the read API) - Monad: 0x5770d2914355a6d0a39a70aeea9bcce55df4201b (chain not supported by the read API) - Monad: 0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016 (chain not supported by the read API) - Monad: 0xa222dd357a9076d1091ed6aa2e16c9742dd26891 (chain not supported by the read API) - Monad: 0x77395f3b2e73ae90843717371294fa97cc419d64 (chain not supported by the read API) - Monad: 0x0d97dc33264bfc1c226207428a79b26757fb9dc3 (chain not supported by the read API) - Monad: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Binance: 0x28e2ea090877bf75740558f6bfb36a5ffee9e9df (chain not supported by the read API) - Binance: 0xf0432f360703ec3d33931a8356a75a77d8d380e1 (chain not supported by the read API) - Binance: 0x7a4a5c919ae2541aed11041a1aeee68f1287f95b (chain not supported by the read API) - Binance: 0x9f75dd27d6664c475b90e105573e550ff69437b0 (chain not supported by the read API) - Binance: 0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4 (chain not supported by the read API) - Binance: 0x1906c1d672b88cd1b9ac7593301ca990f94eae07 (chain not supported by the read API) - Binance: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Soneium: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Soneium: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Soneium: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Soneium: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Soneium: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Soneium: 0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df (chain not supported by the read API) - Soneium: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/43114/0x06380c0e0912312b5150364b9dc4542ba0dbbc85 (PoolManager) - https://defipunkd.com/address/43114/0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9 (PositionDescriptor) - https://defipunkd.com/address/43114/0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd (PositionManager) - https://defipunkd.com/address/43114/0xbe40675bb704506a3c2ccfb762dcfd1e979845c2 (Quoter) - https://defipunkd.com/address/43114/0xc3c9e198c735a4b97e3e683f391ccbdd60b69286 (StateView) - https://defipunkd.com/address/43114/0x94b75331ae8d42c1b61065089b7d48fe14aa73b7 (Universal Router) - https://defipunkd.com/address/43114/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - World Chain: 0xb1860d529182ac3bc1f51fa2abd56662b7d13f33 (chain not supported by the read API) - World Chain: 0x7da419153bd420b689f312363756d76836aeace4 (chain not supported by the read API) - World Chain: 0xc585e0f504613b5fbf874f21af14c65260fb41fa (chain not supported by the read API) - World Chain: 0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0 (chain not supported by the read API) - World Chain: 0x51d394718bc09297262e368c1a481217fdeb71eb (chain not supported by the read API) - World Chain: 0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743 (chain not supported by the read API) - World Chain: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - X Layer: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - https://defipunkd.com/address/81457/0x1631559198a9e474033433b2958dabc135ab6446 (PoolManager) - https://defipunkd.com/address/81457/0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97 (PositionDescriptor) - https://defipunkd.com/address/81457/0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad (PositionManager) - https://defipunkd.com/address/81457/0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf (Quoter) - https://defipunkd.com/address/81457/0x12a88ae16f46dce4e8b15368008ab3380885df30 (StateView) - https://defipunkd.com/address/81457/0xeabbcb3e8e415306207ef514f660a3f820025be3 (Universal Router) - https://defipunkd.com/address/81457/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Tempo: 0x33620f62c5b9b2086dd6b62f4a297a9f30347029 (chain not supported by the read API) - Tempo: 0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77 (chain not supported by the read API) - Tempo: 0x3fc79444f8eacc1894775493ff3fa41f1e35ce11 (chain not supported by the read API) - Tempo: 0x20e6487c371a2086f841ef453f85378223df4f4e (chain not supported by the read API) - Tempo: 0x21b954fba3f5ddebe77ef2d47a3100c066908b2a (chain not supported by the read API) - Tempo: 0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91 (chain not supported by the read API) - Tempo: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Ink: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Ink: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Ink: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Ink: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Ink: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Ink: 0x112908dac86e20e7241b0927479ea3bf935d1fa0 (chain not supported by the read API) - Ink: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Zora: 0x0575338e4c17006ae181b47900a84404247ca30f (chain not supported by the read API) - Zora: 0x7d64630bbb4993b5578dbd65e400961c9e68d55a (chain not supported by the read API) - Zora: 0xf66c7b99e2040f0d9b326b3b7c152e9663543d63 (chain not supported by the read API) - Zora: 0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6 (chain not supported by the read API) - Zora: 0x385785af07d63b50d0a0ea57c4ff89d06adf7328 (chain not supported by the read API) - Zora: 0x3315ef7ca28db74abadc6c44570efdf06b04b020 (chain not supported by the read API) - Zora: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/1/0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 (UNI governance token) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: CONTROL Evaluate who can change the protocol's rules, how fast, and how broadly. (Step 0 capability probe and the off-chain-only fallback live in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]) - **C1.** For each address you assess: who is the contract owner / admin / pendingAdmin / governor — read these via the block explorer's "Read Contract" tab OR `https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=owner` (BARE method names: `&method=owner`, `&method=admin`, `&method=pendingOwner`, `&method=governor`). For Safes use `/api/safe/owners?chainId=<id>&address=0x...`. When a protocol has multiple major versions deployed (v2/v3/v4), perform C1 reads on the NEWEST deployment separately — newer deployments often have weaker control surfaces than the legacy core. - **C2.** Upgrade mechanism: transparent proxy / UUPS / Beacon / Diamond / immutable. Identify the proxy admin address. Check upgradeability of GOVERNANCE contracts too — a Governor / Aragon Voting / OZ Governor is often itself a proxy whose admin is the Timelock. Asymmetry: when fund-holding cores are immutable AND governance has no admin path that reaches them, an upgradable Governor/Timelock is T3-only and must NOT drag the verdict below green on that basis alone (see grade rules and the "immutable cores" caveat). Only call upgradability "mixed" if you can name a concrete function on the upgradable surface that reaches T1 or T2 on user funds. - **C3.** EXECUTION PATH (enumerate every stage, in order, with delays in seconds). The operative path is usually a chain (voting → scheduler → timelock → executor; or governor → queue → execute; or Aragon Voting → DualGovernance → EmergencyProtectedTimelock → AdminExecutor). For each stage, record (a) the contract address, (b) the delay constant name + value in seconds, (c) the URL you read it from (block-explorer Read Contract OR `/api/contract/read?...&method=MIN_DELAY&block=<n>`). Do NOT stop at the first timelock-shaped contract — if its admin is itself called by another contract, keep walking. The grading delay is the SUM OF DELAYS ON THE UNCONTESTED FAST PATH (shortest time a proposal with no opposition can go from submission to executable). Dynamic / contested extensions (veto signaling, rage quit, escrow delay) are modifiers, not the basis — note them separately. - **C4.** Enumerate EVERY multisig with reachable control — main proxy admin, emergency activation, emergency execution, reseal / pause, gate-seal committees, tiebreaker, per-module admins. For each Safe, fetch threshold + owners + version via `/api/safe/owners?chainId=<id>&address=0x...` (response includes raw eth_call data, so the URL is citable evidence). Enumerate ops/council/incentives multisigs even when off the upgrade path — record their scope so a reader can see they are NOT on the upgrade path. For each: (a) address, (b) threshold / total signers, (c) signer identities classified as insider (team, paid auditors under ongoing engagement, mandated service providers) vs non-insider (independent community members, unaffiliated researchers), (d) the specific power held (upgrade, pause, parameter, etc.). - **C5.** On-chain governance: Governor / GovernorBravo / OZ Governor / Aragon Voting with token-weighted voting? Record proposal threshold, voting period, quorum, and the timelock delay between queue and execute. Every numeric constant must come from a Read Contract call you can link to, or be in unknowns[] with the C-code. If votingDelay / votingPeriod are denominated in BLOCKS, convert to seconds at the chain's CURRENT block time (Ethereum mainnet ≈ 12s post-Merge, not the 15s in older Compound/Bravo deployments) — cite both block count and converted seconds. - **C6.** EMERGENCY POWERS: separate emergency-pause / guardian role with a different time cap or different actor than the main upgrade authority? Record it explicitly. - **C7.** POWER TIER (blast radius). For each privileged path in C3–C6, classify the WORST thing that path can do, choosing the highest applicable tier. Cite the specific function name and any on-chain bound — tier claims without a named function are unsupported. - **T1 — FUND-CRITICAL**: replace implementation of contracts holding user funds; change AMM math / accounting / collateral logic; mint unbacked debt or shares; pause withdrawals; drain user-fund treasury; change oracle to attacker-controlled source; replace upgrade admin with EOA. - **T2 — ECONOMICALLY MATERIAL**: change fee parameters within bounded ranges; redirect protocol fees; add/remove markets / collateral types; bounded inflation or token mint within hard-capped schedule; spend protocol-owned (non-user) treasury. - **T3 — GOVERNANCE-INTERNAL**: change voting rules, quorum, voting period, proposal threshold; upgrade the Governor itself; rotate Timelock admin; mint governance tokens within a capped annual schedule. - **T4 — OPERATIONAL**: incentives distribution, grants, ENS / frontend canonicalization, deployment coordination, periphery router deprecation. The grade is set by the HIGHEST tier reachable on the uncontested fast path, not the median. State the tier and the binding function in the verdict. ### Read Contract discipline (applies to C3, C4, C5) Every numeric constant cited (timelock delays, voting periods, multisig thresholds, quorum percentages) must come from EITHER (a) a block-explorer Read Contract URL, OR (b) a DeFiPunkd `/api/contract/read` or `/api/safe/owners` URL (preferred with `&block=<n>` for content-addressed evidence), OR (c) an unknowns[] entry with the C-code. Docs / blog posts are corroboration only — they cannot be the sole citation for a value that is also readable on-chain. ### Off-chain-only substitute hierarchy (when grading_basis="off-chain-only" — see preamble Rule 16) When on-chain reads were genuinely unreachable this run, eligible off-chain substitutes in priority order: 1. Linked audit PDFs (admin roles, multisig members, timelock delays usually enumerated). 2. Governance forum posts that quote constants from a successful on-chain proposal (cite post URL + linked execution-tx URL). 3. Official protocol docs pages with named addresses and roles (must be on a domain owned by the protocol). 4. GitHub README / SECURITY.md / governance/*.md at a pinned commit SHA. Forbidden substitutes: third-party blog posts, X / Twitter threads, search-result snippets, model memory. Required degradation: any C-code citing a numeric constant from docs/forum/audit prose ONLY must also carry an `unknowns[]` entry with `-offchain` suffix noting "value not re-read on-chain in this run; corroboration only". ### Grade rules (apply the timelock bar conditional on the highest C7 tier reachable on the fast path) Security Council standard (used below): a multisig qualifies as "Security Council" only if ALL of: ≥7 signers, ≥51% threshold, ≥50% non-insider signers, every signer publicly announced. Failing any criterion = NOT a Security Council, regardless of signer reputation. - **green**: highest reachable tier is T3 or T4 regardless of timelock; OR T2 reachable with uncontested-fast-path delay ≥7 days; OR T1 reachable only via immutable contracts (T1 is unreachable); OR T1 reachable with uncontested-fast-path delay ≥7 days combined with a Security Council multisig; OR T1 reachable with uncontested-fast-path delay ≥7 days through active on-chain governance with broad token distribution. - **orange**: T2 reachable with uncontested-fast-path delay >0 but <7 days; OR T1 reachable with uncontested-fast-path delay >0 but <7 days; OR a multisig failing one or more Security Council criteria sits on a T1/T2 path; OR unclear upgrade authority on a T1/T2 path; OR governance with very short timelock or low quorum on a T1/T2 path. - **red**: T1 reachable with no timelock by a single EOA or 2-of-3 multisig; OR a T1 upgrade admin that is not a smart contract you can audit. - **unknown**: completed the checklist but still cannot determine the upgrade authority OR cannot classify the highest tier reachable on the main contracts. Tiering caveats: - "Bounded" must be enforced ON-CHAIN to count as T2. A function that sets fees with no upper-bound check is T1 — cite the bound check. - Recurring T2 economic extraction (e.g. fee redirect with no rate limit) approaches T1 over time. A single proposal that can permanently redirect all future revenue is T1. - T3 assumes the governance contract cannot itself authorize a T1/T2 action without going through the same timelock. If governance can self-upgrade to bypass the timelock, T3 collapses into T1. - Do not downgrade tier by hand-waving ("realistically governance would never…"). Tier on what the contract permits, not what feels likely. Notes: - **Dynamic / dual-governance timelocks** (Lido, Compound escrow veto): the rubric grades on the uncontested path because that is the path most upgrades take. A dynamic extension that fires only under stake-weighted opposition is a real protection — name it in the green steel-man, but it does not lift an orange fast path into green; state the tension in the verdict. - **Immutable cores with upgradable governance** (Uniswap-style): if fund-holding contracts are immutable and have no admin-reachable function moving / freezing / re-routing user funds, the highest reachable tier on the upgrade path is T3 — green regardless of timelock. Don't grade this orange just because the Governor is a proxy — that's a C2 fact, not a downgrade. Downgrade only applies if you can cite a concrete function on the upgradable surface that reaches T1 or T2 (privileged hook, upgradable factory controlling fund-routing, fee-switch redirecting protocol revenue without bound). - **The 7-day bar** reflects the exit-window standard — users need notice after a queued upgrade to withdraw if they disagree. The ability-to-exit slice grades the exit side; this slice grades the delay side; both must hold for users to actually benefit from the delay. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "control", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Ability to exit
✓ 5/5 models agree
AI-only
weak green — only 0/5 sources have a public chat share link; total support weight 0.66 below confidence floor (1.5) Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v4 - protocol.name: Uniswap V4 - protocol.chains: Ethereum, Base, Arbitrum, Polygon, Binance, Unichain, Monad, Soneium, Optimism, Tempo, Avalanche, World Chain, X Layer, Blast, Ink, Zora - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/Uniswap/v4-core/tree/main/docs/security/audits, https://github.com/Uniswap/v4-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-07-uniswap-v4-core-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x1a9C8182C09F50C8318d769245beA52c32BE35BC", "role": "PoolManager owner (Timelock, 2-day minimum delay)" }, { "chain": "Ethereum", "address": "0x408ED6354d4973f66138C91495F2f2FCbd8724C3", "role": "GovernorBravo proxy (admin of the Timelock)" }, { "chain": "Ethereum", "address": "0x3e51b68a157b573303155300a6593224f009990a", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497D0Cd94564c118C661384", "role": "Uniswap DAO Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497d0Cd94564c118039df83", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503475d9f9244252322473c9Cd", "role": "Uniswap Governance Timelock" }, { "chain": "Base", "address": "0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9", "role": "Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Optimism", "address": "0xa1dD330d602c32622AA270Ea73d078B803Cb3518", "role": "Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Blast", "address": "0x2339C0d23b60739B3E5ABF201F05903D24A26C77", "role": "Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Binance", "address": "0x341c1511141022cf8eE20824Ae0fFA3491F1302b", "role": "BSC PoolManager owner; Uniswap Wormhole Message Receiver linked to an Ethereum sender owned by the Uniswap timelock" }, { "chain": "Avalanche", "address": "0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc", "role": "Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint" }, { "chain": "Ethereum", "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "role": "PoolManager" }, { "chain": "Ethereum", "address": "0xd1428ba554f4c8450b763a0b2040a4935c63f06c", "role": "PositionDescriptor" }, { "chain": "Ethereum", "address": "0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e", "role": "PositionManager" }, { "chain": "Ethereum", "address": "0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203", "role": "Quoter" }, { "chain": "Ethereum", "address": "0x7ffe42c4a5deea5b0fec41c94c136cf115597227", "role": "StateView" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "Universal Router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Arbitrum", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Arbitrum", "address": "0xe2023f3fa515cf070e07fd9d51c1d236e07843f4", "role": "PositionDescriptor" }, { "chain": "Arbitrum", "address": "0xd88f38f930b7952f2db2432cb002e7abbf3dd869", "role": "PositionManager" }, { "chain": "Arbitrum", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Arbitrum", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "Universal Router" }, { "chain": "Arbitrum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Base", "address": "0x498581ff718922c3f8e6a244956af099b2652b2b", "role": "PoolManager" }, { "chain": "Base", "address": "0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5", "role": "PositionDescriptor" }, { "chain": "Base", "address": "0x7c5f5a4bbd8fd63184577525326123b519429bdc", "role": "PositionManager" }, { "chain": "Base", "address": "0x0d5e0f971ed27fbff6c2837bf31316121532048d", "role": "Quoter" }, { "chain": "Base", "address": "0xa3c0c9b65bad0b08107aa264b0f3db444b867a71", "role": "StateView" }, { "chain": "Base", "address": "0x6ff5693b99212da76ad316178a184ab56d299b43", "role": "Universal Router" }, { "chain": "Base", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Optimism", "address": "0x9a13f98cb987694c9f086b1f5eb990eea8264ec3", "role": "PoolManager" }, { "chain": "Optimism", "address": "0xedd81496169c46df161b8513a52ffecaaaa66743", "role": "PositionDescriptor" }, { "chain": "Optimism", "address": "0x3c3ea4b57a46241e54610e5f022e5c45859a1017", "role": "PositionManager" }, { "chain": "Optimism", "address": "0x1f3131a13296fb91c90870043742c3cdbff1a8d7", "role": "Quoter" }, { "chain": "Optimism", "address": "0xc18a3169788f4f75a170290584eca6395c75ecdb", "role": "StateView" }, { "chain": "Optimism", "address": "0x851116d9223fabed8e56c0e6b8ad0c31d98b3507", "role": "Universal Router" }, { "chain": "Optimism", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Polygon", "address": "0x67366782805870060151383f4bbff9dab53e5cd6", "role": "PoolManager" }, { "chain": "Polygon", "address": "0x0892771f0c1b78ad6013d6e5536007e1c16e6794", "role": "PositionDescriptor" }, { "chain": "Polygon", "address": "0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9", "role": "PositionManager" }, { "chain": "Polygon", "address": "0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9", "role": "Quoter" }, { "chain": "Polygon", "address": "0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a", "role": "StateView" }, { "chain": "Polygon", "address": "0x1095692a6237d83c6a72f3f5efedb9a670c49223", "role": "Universal Router" }, { "chain": "Polygon", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000004", "role": "PoolManager" }, { "chain": "Unichain", "address": "0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722", "role": "PositionDescriptor" }, { "chain": "Unichain", "address": "0x4529a01c7a0410167c5740c487a8de60232617bf", "role": "PositionManager" }, { "chain": "Unichain", "address": "0x333e3c607b141b18ff6de9f258db6e77fe7491e0", "role": "Quoter" }, { "chain": "Unichain", "address": "0x86e8631a016f9068c3f085faf484ee3f5fdee8f2", "role": "StateView" }, { "chain": "Unichain", "address": "0xef740bf23acae26f6492b10de645d6b98dc8eaf3", "role": "Universal Router" }, { "chain": "Unichain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Monad", "address": "0x188d586ddcf52439676ca21a244753fa19f9ea8e", "role": "PoolManager" }, { "chain": "Monad", "address": "0x5770d2914355a6d0a39a70aeea9bcce55df4201b", "role": "PositionDescriptor" }, { "chain": "Monad", "address": "0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016", "role": "PositionManager" }, { "chain": "Monad", "address": "0xa222dd357a9076d1091ed6aa2e16c9742dd26891", "role": "Quoter" }, { "chain": "Monad", "address": "0x77395f3b2e73ae90843717371294fa97cc419d64", "role": "StateView" }, { "chain": "Monad", "address": "0x0d97dc33264bfc1c226207428a79b26757fb9dc3", "role": "Universal Router" }, { "chain": "Monad", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Binance", "address": "0x28e2ea090877bf75740558f6bfb36a5ffee9e9df", "role": "PoolManager" }, { "chain": "Binance", "address": "0xf0432f360703ec3d33931a8356a75a77d8d380e1", "role": "PositionDescriptor" }, { "chain": "Binance", "address": "0x7a4a5c919ae2541aed11041a1aeee68f1287f95b", "role": "PositionManager" }, { "chain": "Binance", "address": "0x9f75dd27d6664c475b90e105573e550ff69437b0", "role": "Quoter" }, { "chain": "Binance", "address": "0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4", "role": "StateView" }, { "chain": "Binance", "address": "0x1906c1d672b88cd1b9ac7593301ca990f94eae07", "role": "Universal Router" }, { "chain": "Binance", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Soneium", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Soneium", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Soneium", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Soneium", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Soneium", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Soneium", "address": "0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df", "role": "Universal Router" }, { "chain": "Soneium", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Avalanche", "address": "0x06380c0e0912312b5150364b9dc4542ba0dbbc85", "role": "PoolManager" }, { "chain": "Avalanche", "address": "0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9", "role": "PositionDescriptor" }, { "chain": "Avalanche", "address": "0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd", "role": "PositionManager" }, { "chain": "Avalanche", "address": "0xbe40675bb704506a3c2ccfb762dcfd1e979845c2", "role": "Quoter" }, { "chain": "Avalanche", "address": "0xc3c9e198c735a4b97e3e683f391ccbdd60b69286", "role": "StateView" }, { "chain": "Avalanche", "address": "0x94b75331ae8d42c1b61065089b7d48fe14aa73b7", "role": "Universal Router" }, { "chain": "Avalanche", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "World Chain", "address": "0xb1860d529182ac3bc1f51fa2abd56662b7d13f33", "role": "PoolManager" }, { "chain": "World Chain", "address": "0x7da419153bd420b689f312363756d76836aeace4", "role": "PositionDescriptor" }, { "chain": "World Chain", "address": "0xc585e0f504613b5fbf874f21af14c65260fb41fa", "role": "PositionManager" }, { "chain": "World Chain", "address": "0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0", "role": "Quoter" }, { "chain": "World Chain", "address": "0x51d394718bc09297262e368c1a481217fdeb71eb", "role": "StateView" }, { "chain": "World Chain", "address": "0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743", "role": "Universal Router" }, { "chain": "World Chain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "X Layer", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Blast", "address": "0x1631559198a9e474033433b2958dabc135ab6446", "role": "PoolManager" }, { "chain": "Blast", "address": "0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97", "role": "PositionDescriptor" }, { "chain": "Blast", "address": "0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad", "role": "PositionManager" }, { "chain": "Blast", "address": "0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf", "role": "Quoter" }, { "chain": "Blast", "address": "0x12a88ae16f46dce4e8b15368008ab3380885df30", "role": "StateView" }, { "chain": "Blast", "address": "0xeabbcb3e8e415306207ef514f660a3f820025be3", "role": "Universal Router" }, { "chain": "Blast", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Tempo", "address": "0x33620f62c5b9b2086dd6b62f4a297a9f30347029", "role": "PoolManager" }, { "chain": "Tempo", "address": "0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77", "role": "PositionDescriptor" }, { "chain": "Tempo", "address": "0x3fc79444f8eacc1894775493ff3fa41f1e35ce11", "role": "PositionManager" }, { "chain": "Tempo", "address": "0x20e6487c371a2086f841ef453f85378223df4f4e", "role": "Quoter" }, { "chain": "Tempo", "address": "0x21b954fba3f5ddebe77ef2d47a3100c066908b2a", "role": "StateView" }, { "chain": "Tempo", "address": "0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91", "role": "Universal Router" }, { "chain": "Tempo", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ink", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Ink", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Ink", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Ink", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Ink", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Ink", "address": "0x112908dac86e20e7241b0927479ea3bf935d1fa0", "role": "Universal Router" }, { "chain": "Ink", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Zora", "address": "0x0575338e4c17006ae181b47900a84404247ca30f", "role": "PoolManager" }, { "chain": "Zora", "address": "0x7d64630bbb4993b5578dbd65e400961c9e68d55a", "role": "PositionDescriptor" }, { "chain": "Zora", "address": "0xf66c7b99e2040f0d9b326b3b7c152e9663543d63", "role": "PositionManager" }, { "chain": "Zora", "address": "0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6", "role": "Quoter" }, { "chain": "Zora", "address": "0x385785af07d63b50d0a0ea57c4ff89d06adf7328", "role": "StateView" }, { "chain": "Zora", "address": "0x3315ef7ca28db74abadc6c44570efdf06b04b020", "role": "Universal Router" }, { "chain": "Zora", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ethereum", "address": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "role": "UNI governance token" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x1a9C8182C09F50C8318d769245beA52c32BE35BC (PoolManager owner (Timelock, 2-day minimum delay)) - https://defipunkd.com/address/1/0x408ED6354d4973f66138C91495F2f2FCbd8724C3 (GovernorBravo proxy (admin of the Timelock)) - https://defipunkd.com/address/1/0x3e51b68a157b573303155300a6593224f009990a (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497D0Cd94564c118C661384 (Uniswap DAO Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497d0Cd94564c118039df83 (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503475d9f9244252322473c9Cd (Uniswap Governance Timelock) - https://defipunkd.com/address/8453/0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9 (Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/10/0xa1dD330d602c32622AA270Ea73d078B803Cb3518 (Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/81457/0x2339C0d23b60739B3E5ABF201F05903D24A26C77 (Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - Binance: 0x341c1511141022cf8eE20824Ae0fFA3491F1302b (chain not supported by the read API) - https://defipunkd.com/address/43114/0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc (Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint) - https://defipunkd.com/address/1/0x000000000004444c5dc75cB358380D2e3dE08A90 (PoolManager) - https://defipunkd.com/address/1/0xd1428ba554f4c8450b763a0b2040a4935c63f06c (PositionDescriptor) - https://defipunkd.com/address/1/0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e (PositionManager) - https://defipunkd.com/address/1/0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203 (Quoter) - https://defipunkd.com/address/1/0x7ffe42c4a5deea5b0fec41c94c136cf115597227 (StateView) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (Universal Router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/42161/0x360e68faccca8ca495c1b759fd9eee466db9fb32 (PoolManager) - https://defipunkd.com/address/42161/0xe2023f3fa515cf070e07fd9d51c1d236e07843f4 (PositionDescriptor) - https://defipunkd.com/address/42161/0xd88f38f930b7952f2db2432cb002e7abbf3dd869 (PositionManager) - https://defipunkd.com/address/42161/0x3972c00f7ed4885e145823eb7c655375d275a1c5 (Quoter) - https://defipunkd.com/address/42161/0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (StateView) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (Universal Router) - https://defipunkd.com/address/42161/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/8453/0x498581ff718922c3f8e6a244956af099b2652b2b (PoolManager) - https://defipunkd.com/address/8453/0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5 (PositionDescriptor) - https://defipunkd.com/address/8453/0x7c5f5a4bbd8fd63184577525326123b519429bdc (PositionManager) - https://defipunkd.com/address/8453/0x0d5e0f971ed27fbff6c2837bf31316121532048d (Quoter) - https://defipunkd.com/address/8453/0xa3c0c9b65bad0b08107aa264b0f3db444b867a71 (StateView) - https://defipunkd.com/address/8453/0x6ff5693b99212da76ad316178a184ab56d299b43 (Universal Router) - https://defipunkd.com/address/8453/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/10/0x9a13f98cb987694c9f086b1f5eb990eea8264ec3 (PoolManager) - https://defipunkd.com/address/10/0xedd81496169c46df161b8513a52ffecaaaa66743 (PositionDescriptor) - https://defipunkd.com/address/10/0x3c3ea4b57a46241e54610e5f022e5c45859a1017 (PositionManager) - https://defipunkd.com/address/10/0x1f3131a13296fb91c90870043742c3cdbff1a8d7 (Quoter) - https://defipunkd.com/address/10/0xc18a3169788f4f75a170290584eca6395c75ecdb (StateView) - https://defipunkd.com/address/10/0x851116d9223fabed8e56c0e6b8ad0c31d98b3507 (Universal Router) - https://defipunkd.com/address/10/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/137/0x67366782805870060151383f4bbff9dab53e5cd6 (PoolManager) - https://defipunkd.com/address/137/0x0892771f0c1b78ad6013d6e5536007e1c16e6794 (PositionDescriptor) - https://defipunkd.com/address/137/0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9 (PositionManager) - https://defipunkd.com/address/137/0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9 (Quoter) - https://defipunkd.com/address/137/0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a (StateView) - https://defipunkd.com/address/137/0x1095692a6237d83c6a72f3f5efedb9a670c49223 (Universal Router) - https://defipunkd.com/address/137/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000004 (PoolManager) - https://defipunkd.com/address/130/0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722 (PositionDescriptor) - https://defipunkd.com/address/130/0x4529a01c7a0410167c5740c487a8de60232617bf (PositionManager) - https://defipunkd.com/address/130/0x333e3c607b141b18ff6de9f258db6e77fe7491e0 (Quoter) - https://defipunkd.com/address/130/0x86e8631a016f9068c3f085faf484ee3f5fdee8f2 (StateView) - https://defipunkd.com/address/130/0xef740bf23acae26f6492b10de645d6b98dc8eaf3 (Universal Router) - https://defipunkd.com/address/130/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Monad: 0x188d586ddcf52439676ca21a244753fa19f9ea8e (chain not supported by the read API) - Monad: 0x5770d2914355a6d0a39a70aeea9bcce55df4201b (chain not supported by the read API) - Monad: 0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016 (chain not supported by the read API) - Monad: 0xa222dd357a9076d1091ed6aa2e16c9742dd26891 (chain not supported by the read API) - Monad: 0x77395f3b2e73ae90843717371294fa97cc419d64 (chain not supported by the read API) - Monad: 0x0d97dc33264bfc1c226207428a79b26757fb9dc3 (chain not supported by the read API) - Monad: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Binance: 0x28e2ea090877bf75740558f6bfb36a5ffee9e9df (chain not supported by the read API) - Binance: 0xf0432f360703ec3d33931a8356a75a77d8d380e1 (chain not supported by the read API) - Binance: 0x7a4a5c919ae2541aed11041a1aeee68f1287f95b (chain not supported by the read API) - Binance: 0x9f75dd27d6664c475b90e105573e550ff69437b0 (chain not supported by the read API) - Binance: 0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4 (chain not supported by the read API) - Binance: 0x1906c1d672b88cd1b9ac7593301ca990f94eae07 (chain not supported by the read API) - Binance: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Soneium: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Soneium: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Soneium: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Soneium: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Soneium: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Soneium: 0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df (chain not supported by the read API) - Soneium: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/43114/0x06380c0e0912312b5150364b9dc4542ba0dbbc85 (PoolManager) - https://defipunkd.com/address/43114/0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9 (PositionDescriptor) - https://defipunkd.com/address/43114/0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd (PositionManager) - https://defipunkd.com/address/43114/0xbe40675bb704506a3c2ccfb762dcfd1e979845c2 (Quoter) - https://defipunkd.com/address/43114/0xc3c9e198c735a4b97e3e683f391ccbdd60b69286 (StateView) - https://defipunkd.com/address/43114/0x94b75331ae8d42c1b61065089b7d48fe14aa73b7 (Universal Router) - https://defipunkd.com/address/43114/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - World Chain: 0xb1860d529182ac3bc1f51fa2abd56662b7d13f33 (chain not supported by the read API) - World Chain: 0x7da419153bd420b689f312363756d76836aeace4 (chain not supported by the read API) - World Chain: 0xc585e0f504613b5fbf874f21af14c65260fb41fa (chain not supported by the read API) - World Chain: 0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0 (chain not supported by the read API) - World Chain: 0x51d394718bc09297262e368c1a481217fdeb71eb (chain not supported by the read API) - World Chain: 0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743 (chain not supported by the read API) - World Chain: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - X Layer: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - https://defipunkd.com/address/81457/0x1631559198a9e474033433b2958dabc135ab6446 (PoolManager) - https://defipunkd.com/address/81457/0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97 (PositionDescriptor) - https://defipunkd.com/address/81457/0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad (PositionManager) - https://defipunkd.com/address/81457/0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf (Quoter) - https://defipunkd.com/address/81457/0x12a88ae16f46dce4e8b15368008ab3380885df30 (StateView) - https://defipunkd.com/address/81457/0xeabbcb3e8e415306207ef514f660a3f820025be3 (Universal Router) - https://defipunkd.com/address/81457/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Tempo: 0x33620f62c5b9b2086dd6b62f4a297a9f30347029 (chain not supported by the read API) - Tempo: 0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77 (chain not supported by the read API) - Tempo: 0x3fc79444f8eacc1894775493ff3fa41f1e35ce11 (chain not supported by the read API) - Tempo: 0x20e6487c371a2086f841ef453f85378223df4f4e (chain not supported by the read API) - Tempo: 0x21b954fba3f5ddebe77ef2d47a3100c066908b2a (chain not supported by the read API) - Tempo: 0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91 (chain not supported by the read API) - Tempo: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Ink: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Ink: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Ink: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Ink: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Ink: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Ink: 0x112908dac86e20e7241b0927479ea3bf935d1fa0 (chain not supported by the read API) - Ink: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Zora: 0x0575338e4c17006ae181b47900a84404247ca30f (chain not supported by the read API) - Zora: 0x7d64630bbb4993b5578dbd65e400961c9e68d55a (chain not supported by the read API) - Zora: 0xf66c7b99e2040f0d9b326b3b7c152e9663543d63 (chain not supported by the read API) - Zora: 0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6 (chain not supported by the read API) - Zora: 0x385785af07d63b50d0a0ea57c4ff89d06adf7328 (chain not supported by the read API) - Zora: 0x3315ef7ca28db74abadc6c44570efdf06b04b020 (chain not supported by the read API) - Zora: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/1/0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 (UNI governance token) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: ABILITY-TO-EXIT Evaluate whether users can withdraw their funds on their own terms, even under adversarial admin conditions. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - E1. Enumerate every user-facing exit function in the main contracts: withdraw, redeem, burn, requestWithdrawal, claim, exit, etc. List them by name. Do NOT treat the contract as a monolith. - E2. For EACH exit function in E1: identify its access modifiers and any pause guards (e.g. _checkResumed, whenNotPaused, onlyRole). Functions that gate REQUEST PLACEMENT often differ from functions that CLAIM FINALIZED FUNDS — check both separately. - E3. For each pause guard: identify the role holder (which address holds PAUSE_ROLE / GUARDIAN / etc.) and the maximum pause duration. Specifically check whether PAUSE_INFINITELY (or equivalent uncapped pause) is callable, and which actor can call it (single multisig vs governance vote). For role-holder reads use https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=hasRole&args=0x...,0x... or &method=getRoleAdmin&args=0x.... For "is currently paused" checks use &method=paused or &method=isPaused&args=<resume-code>. Use the BARE method name (no parens). Cite the URL with &block=<n> in evidence[]. - E4. EMERGENCY vs GOVERNANCE pause distinction: many protocols have a fast-acting emergency pause capped at N days and a slow governance pause that can be indefinite. Record both paths separately if present, with their time caps and actor classes. - E5. Queued redemption: documented maximum queue duration, daily withdrawal caps, whether the queue itself is pausable. - E6. Forced-exit / escape-hatch / permissionless emergency-exit mechanism for adversarial-admin scenarios. - E7. Frontend dependency: confirm exit functions are directly callable on-chain (e.g. via Etherscan write tab or a generic wallet) without the project's frontend. Then write the steel-man section per Hard Rule 11. Common red-vs-orange tension on this slice: indefinite pause exists (suggests red) BUT the realistic emergency path is time-capped AND claims of already-finalized exits are not pause-gated (suggests orange). Resolve this by stating who can do what for how long, not by stopping at the worst-case sentence. Grade rules: - green = permissionless exit; pause is either absent, narrowly scoped to clearly-described emergencies with auto-expiry, or capped at ≤7 days; no frontend dependency for exit; claims of already-finalized exits are not pause-gated under any path. - orange = pausable with broad scope OR indefinite pause is reachable only through governance vote (not unilateral admin action), OR queued redemption with documented max > 7 days, OR claims-of-finalized are exempt but new-request placement can be paused indefinitely by governance. - red = exit requires admin signature, OR ANY actor (including governance) can pause CLAIMS of finalized exits indefinitely, OR there is no on-chain exit function at all (purely custodial), OR pause is held by a single EOA / 2-of-3 multisig with no time cap. - unknown = checklist incomplete after checking the sources above. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "ability-to-exit", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Autonomy
✓ 5/5 models agree
AI-only
weak green — only 0/5 sources have a public chat share link; total support weight 0.61 below confidence floor (1.5) Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v4 - protocol.name: Uniswap V4 - protocol.chains: Ethereum, Base, Arbitrum, Polygon, Binance, Unichain, Monad, Soneium, Optimism, Tempo, Avalanche, World Chain, X Layer, Blast, Ink, Zora - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/Uniswap/v4-core/tree/main/docs/security/audits, https://github.com/Uniswap/v4-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-07-uniswap-v4-core-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x1a9C8182C09F50C8318d769245beA52c32BE35BC", "role": "PoolManager owner (Timelock, 2-day minimum delay)" }, { "chain": "Ethereum", "address": "0x408ED6354d4973f66138C91495F2f2FCbd8724C3", "role": "GovernorBravo proxy (admin of the Timelock)" }, { "chain": "Ethereum", "address": "0x3e51b68a157b573303155300a6593224f009990a", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497D0Cd94564c118C661384", "role": "Uniswap DAO Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497d0Cd94564c118039df83", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503475d9f9244252322473c9Cd", "role": "Uniswap Governance Timelock" }, { "chain": "Base", "address": "0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9", "role": "Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Optimism", "address": "0xa1dD330d602c32622AA270Ea73d078B803Cb3518", "role": "Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Blast", "address": "0x2339C0d23b60739B3E5ABF201F05903D24A26C77", "role": "Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Binance", "address": "0x341c1511141022cf8eE20824Ae0fFA3491F1302b", "role": "BSC PoolManager owner; Uniswap Wormhole Message Receiver linked to an Ethereum sender owned by the Uniswap timelock" }, { "chain": "Avalanche", "address": "0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc", "role": "Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint" }, { "chain": "Ethereum", "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "role": "PoolManager" }, { "chain": "Ethereum", "address": "0xd1428ba554f4c8450b763a0b2040a4935c63f06c", "role": "PositionDescriptor" }, { "chain": "Ethereum", "address": "0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e", "role": "PositionManager" }, { "chain": "Ethereum", "address": "0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203", "role": "Quoter" }, { "chain": "Ethereum", "address": "0x7ffe42c4a5deea5b0fec41c94c136cf115597227", "role": "StateView" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "Universal Router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Arbitrum", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Arbitrum", "address": "0xe2023f3fa515cf070e07fd9d51c1d236e07843f4", "role": "PositionDescriptor" }, { "chain": "Arbitrum", "address": "0xd88f38f930b7952f2db2432cb002e7abbf3dd869", "role": "PositionManager" }, { "chain": "Arbitrum", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Arbitrum", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "Universal Router" }, { "chain": "Arbitrum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Base", "address": "0x498581ff718922c3f8e6a244956af099b2652b2b", "role": "PoolManager" }, { "chain": "Base", "address": "0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5", "role": "PositionDescriptor" }, { "chain": "Base", "address": "0x7c5f5a4bbd8fd63184577525326123b519429bdc", "role": "PositionManager" }, { "chain": "Base", "address": "0x0d5e0f971ed27fbff6c2837bf31316121532048d", "role": "Quoter" }, { "chain": "Base", "address": "0xa3c0c9b65bad0b08107aa264b0f3db444b867a71", "role": "StateView" }, { "chain": "Base", "address": "0x6ff5693b99212da76ad316178a184ab56d299b43", "role": "Universal Router" }, { "chain": "Base", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Optimism", "address": "0x9a13f98cb987694c9f086b1f5eb990eea8264ec3", "role": "PoolManager" }, { "chain": "Optimism", "address": "0xedd81496169c46df161b8513a52ffecaaaa66743", "role": "PositionDescriptor" }, { "chain": "Optimism", "address": "0x3c3ea4b57a46241e54610e5f022e5c45859a1017", "role": "PositionManager" }, { "chain": "Optimism", "address": "0x1f3131a13296fb91c90870043742c3cdbff1a8d7", "role": "Quoter" }, { "chain": "Optimism", "address": "0xc18a3169788f4f75a170290584eca6395c75ecdb", "role": "StateView" }, { "chain": "Optimism", "address": "0x851116d9223fabed8e56c0e6b8ad0c31d98b3507", "role": "Universal Router" }, { "chain": "Optimism", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Polygon", "address": "0x67366782805870060151383f4bbff9dab53e5cd6", "role": "PoolManager" }, { "chain": "Polygon", "address": "0x0892771f0c1b78ad6013d6e5536007e1c16e6794", "role": "PositionDescriptor" }, { "chain": "Polygon", "address": "0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9", "role": "PositionManager" }, { "chain": "Polygon", "address": "0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9", "role": "Quoter" }, { "chain": "Polygon", "address": "0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a", "role": "StateView" }, { "chain": "Polygon", "address": "0x1095692a6237d83c6a72f3f5efedb9a670c49223", "role": "Universal Router" }, { "chain": "Polygon", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000004", "role": "PoolManager" }, { "chain": "Unichain", "address": "0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722", "role": "PositionDescriptor" }, { "chain": "Unichain", "address": "0x4529a01c7a0410167c5740c487a8de60232617bf", "role": "PositionManager" }, { "chain": "Unichain", "address": "0x333e3c607b141b18ff6de9f258db6e77fe7491e0", "role": "Quoter" }, { "chain": "Unichain", "address": "0x86e8631a016f9068c3f085faf484ee3f5fdee8f2", "role": "StateView" }, { "chain": "Unichain", "address": "0xef740bf23acae26f6492b10de645d6b98dc8eaf3", "role": "Universal Router" }, { "chain": "Unichain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Monad", "address": "0x188d586ddcf52439676ca21a244753fa19f9ea8e", "role": "PoolManager" }, { "chain": "Monad", "address": "0x5770d2914355a6d0a39a70aeea9bcce55df4201b", "role": "PositionDescriptor" }, { "chain": "Monad", "address": "0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016", "role": "PositionManager" }, { "chain": "Monad", "address": "0xa222dd357a9076d1091ed6aa2e16c9742dd26891", "role": "Quoter" }, { "chain": "Monad", "address": "0x77395f3b2e73ae90843717371294fa97cc419d64", "role": "StateView" }, { "chain": "Monad", "address": "0x0d97dc33264bfc1c226207428a79b26757fb9dc3", "role": "Universal Router" }, { "chain": "Monad", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Binance", "address": "0x28e2ea090877bf75740558f6bfb36a5ffee9e9df", "role": "PoolManager" }, { "chain": "Binance", "address": "0xf0432f360703ec3d33931a8356a75a77d8d380e1", "role": "PositionDescriptor" }, { "chain": "Binance", "address": "0x7a4a5c919ae2541aed11041a1aeee68f1287f95b", "role": "PositionManager" }, { "chain": "Binance", "address": "0x9f75dd27d6664c475b90e105573e550ff69437b0", "role": "Quoter" }, { "chain": "Binance", "address": "0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4", "role": "StateView" }, { "chain": "Binance", "address": "0x1906c1d672b88cd1b9ac7593301ca990f94eae07", "role": "Universal Router" }, { "chain": "Binance", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Soneium", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Soneium", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Soneium", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Soneium", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Soneium", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Soneium", "address": "0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df", "role": "Universal Router" }, { "chain": "Soneium", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Avalanche", "address": "0x06380c0e0912312b5150364b9dc4542ba0dbbc85", "role": "PoolManager" }, { "chain": "Avalanche", "address": "0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9", "role": "PositionDescriptor" }, { "chain": "Avalanche", "address": "0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd", "role": "PositionManager" }, { "chain": "Avalanche", "address": "0xbe40675bb704506a3c2ccfb762dcfd1e979845c2", "role": "Quoter" }, { "chain": "Avalanche", "address": "0xc3c9e198c735a4b97e3e683f391ccbdd60b69286", "role": "StateView" }, { "chain": "Avalanche", "address": "0x94b75331ae8d42c1b61065089b7d48fe14aa73b7", "role": "Universal Router" }, { "chain": "Avalanche", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "World Chain", "address": "0xb1860d529182ac3bc1f51fa2abd56662b7d13f33", "role": "PoolManager" }, { "chain": "World Chain", "address": "0x7da419153bd420b689f312363756d76836aeace4", "role": "PositionDescriptor" }, { "chain": "World Chain", "address": "0xc585e0f504613b5fbf874f21af14c65260fb41fa", "role": "PositionManager" }, { "chain": "World Chain", "address": "0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0", "role": "Quoter" }, { "chain": "World Chain", "address": "0x51d394718bc09297262e368c1a481217fdeb71eb", "role": "StateView" }, { "chain": "World Chain", "address": "0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743", "role": "Universal Router" }, { "chain": "World Chain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "X Layer", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Blast", "address": "0x1631559198a9e474033433b2958dabc135ab6446", "role": "PoolManager" }, { "chain": "Blast", "address": "0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97", "role": "PositionDescriptor" }, { "chain": "Blast", "address": "0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad", "role": "PositionManager" }, { "chain": "Blast", "address": "0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf", "role": "Quoter" }, { "chain": "Blast", "address": "0x12a88ae16f46dce4e8b15368008ab3380885df30", "role": "StateView" }, { "chain": "Blast", "address": "0xeabbcb3e8e415306207ef514f660a3f820025be3", "role": "Universal Router" }, { "chain": "Blast", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Tempo", "address": "0x33620f62c5b9b2086dd6b62f4a297a9f30347029", "role": "PoolManager" }, { "chain": "Tempo", "address": "0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77", "role": "PositionDescriptor" }, { "chain": "Tempo", "address": "0x3fc79444f8eacc1894775493ff3fa41f1e35ce11", "role": "PositionManager" }, { "chain": "Tempo", "address": "0x20e6487c371a2086f841ef453f85378223df4f4e", "role": "Quoter" }, { "chain": "Tempo", "address": "0x21b954fba3f5ddebe77ef2d47a3100c066908b2a", "role": "StateView" }, { "chain": "Tempo", "address": "0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91", "role": "Universal Router" }, { "chain": "Tempo", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ink", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Ink", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Ink", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Ink", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Ink", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Ink", "address": "0x112908dac86e20e7241b0927479ea3bf935d1fa0", "role": "Universal Router" }, { "chain": "Ink", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Zora", "address": "0x0575338e4c17006ae181b47900a84404247ca30f", "role": "PoolManager" }, { "chain": "Zora", "address": "0x7d64630bbb4993b5578dbd65e400961c9e68d55a", "role": "PositionDescriptor" }, { "chain": "Zora", "address": "0xf66c7b99e2040f0d9b326b3b7c152e9663543d63", "role": "PositionManager" }, { "chain": "Zora", "address": "0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6", "role": "Quoter" }, { "chain": "Zora", "address": "0x385785af07d63b50d0a0ea57c4ff89d06adf7328", "role": "StateView" }, { "chain": "Zora", "address": "0x3315ef7ca28db74abadc6c44570efdf06b04b020", "role": "Universal Router" }, { "chain": "Zora", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ethereum", "address": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "role": "UNI governance token" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x1a9C8182C09F50C8318d769245beA52c32BE35BC (PoolManager owner (Timelock, 2-day minimum delay)) - https://defipunkd.com/address/1/0x408ED6354d4973f66138C91495F2f2FCbd8724C3 (GovernorBravo proxy (admin of the Timelock)) - https://defipunkd.com/address/1/0x3e51b68a157b573303155300a6593224f009990a (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497D0Cd94564c118C661384 (Uniswap DAO Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497d0Cd94564c118039df83 (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503475d9f9244252322473c9Cd (Uniswap Governance Timelock) - https://defipunkd.com/address/8453/0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9 (Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/10/0xa1dD330d602c32622AA270Ea73d078B803Cb3518 (Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/81457/0x2339C0d23b60739B3E5ABF201F05903D24A26C77 (Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - Binance: 0x341c1511141022cf8eE20824Ae0fFA3491F1302b (chain not supported by the read API) - https://defipunkd.com/address/43114/0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc (Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint) - https://defipunkd.com/address/1/0x000000000004444c5dc75cB358380D2e3dE08A90 (PoolManager) - https://defipunkd.com/address/1/0xd1428ba554f4c8450b763a0b2040a4935c63f06c (PositionDescriptor) - https://defipunkd.com/address/1/0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e (PositionManager) - https://defipunkd.com/address/1/0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203 (Quoter) - https://defipunkd.com/address/1/0x7ffe42c4a5deea5b0fec41c94c136cf115597227 (StateView) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (Universal Router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/42161/0x360e68faccca8ca495c1b759fd9eee466db9fb32 (PoolManager) - https://defipunkd.com/address/42161/0xe2023f3fa515cf070e07fd9d51c1d236e07843f4 (PositionDescriptor) - https://defipunkd.com/address/42161/0xd88f38f930b7952f2db2432cb002e7abbf3dd869 (PositionManager) - https://defipunkd.com/address/42161/0x3972c00f7ed4885e145823eb7c655375d275a1c5 (Quoter) - https://defipunkd.com/address/42161/0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (StateView) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (Universal Router) - https://defipunkd.com/address/42161/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/8453/0x498581ff718922c3f8e6a244956af099b2652b2b (PoolManager) - https://defipunkd.com/address/8453/0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5 (PositionDescriptor) - https://defipunkd.com/address/8453/0x7c5f5a4bbd8fd63184577525326123b519429bdc (PositionManager) - https://defipunkd.com/address/8453/0x0d5e0f971ed27fbff6c2837bf31316121532048d (Quoter) - https://defipunkd.com/address/8453/0xa3c0c9b65bad0b08107aa264b0f3db444b867a71 (StateView) - https://defipunkd.com/address/8453/0x6ff5693b99212da76ad316178a184ab56d299b43 (Universal Router) - https://defipunkd.com/address/8453/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/10/0x9a13f98cb987694c9f086b1f5eb990eea8264ec3 (PoolManager) - https://defipunkd.com/address/10/0xedd81496169c46df161b8513a52ffecaaaa66743 (PositionDescriptor) - https://defipunkd.com/address/10/0x3c3ea4b57a46241e54610e5f022e5c45859a1017 (PositionManager) - https://defipunkd.com/address/10/0x1f3131a13296fb91c90870043742c3cdbff1a8d7 (Quoter) - https://defipunkd.com/address/10/0xc18a3169788f4f75a170290584eca6395c75ecdb (StateView) - https://defipunkd.com/address/10/0x851116d9223fabed8e56c0e6b8ad0c31d98b3507 (Universal Router) - https://defipunkd.com/address/10/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/137/0x67366782805870060151383f4bbff9dab53e5cd6 (PoolManager) - https://defipunkd.com/address/137/0x0892771f0c1b78ad6013d6e5536007e1c16e6794 (PositionDescriptor) - https://defipunkd.com/address/137/0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9 (PositionManager) - https://defipunkd.com/address/137/0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9 (Quoter) - https://defipunkd.com/address/137/0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a (StateView) - https://defipunkd.com/address/137/0x1095692a6237d83c6a72f3f5efedb9a670c49223 (Universal Router) - https://defipunkd.com/address/137/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000004 (PoolManager) - https://defipunkd.com/address/130/0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722 (PositionDescriptor) - https://defipunkd.com/address/130/0x4529a01c7a0410167c5740c487a8de60232617bf (PositionManager) - https://defipunkd.com/address/130/0x333e3c607b141b18ff6de9f258db6e77fe7491e0 (Quoter) - https://defipunkd.com/address/130/0x86e8631a016f9068c3f085faf484ee3f5fdee8f2 (StateView) - https://defipunkd.com/address/130/0xef740bf23acae26f6492b10de645d6b98dc8eaf3 (Universal Router) - https://defipunkd.com/address/130/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Monad: 0x188d586ddcf52439676ca21a244753fa19f9ea8e (chain not supported by the read API) - Monad: 0x5770d2914355a6d0a39a70aeea9bcce55df4201b (chain not supported by the read API) - Monad: 0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016 (chain not supported by the read API) - Monad: 0xa222dd357a9076d1091ed6aa2e16c9742dd26891 (chain not supported by the read API) - Monad: 0x77395f3b2e73ae90843717371294fa97cc419d64 (chain not supported by the read API) - Monad: 0x0d97dc33264bfc1c226207428a79b26757fb9dc3 (chain not supported by the read API) - Monad: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Binance: 0x28e2ea090877bf75740558f6bfb36a5ffee9e9df (chain not supported by the read API) - Binance: 0xf0432f360703ec3d33931a8356a75a77d8d380e1 (chain not supported by the read API) - Binance: 0x7a4a5c919ae2541aed11041a1aeee68f1287f95b (chain not supported by the read API) - Binance: 0x9f75dd27d6664c475b90e105573e550ff69437b0 (chain not supported by the read API) - Binance: 0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4 (chain not supported by the read API) - Binance: 0x1906c1d672b88cd1b9ac7593301ca990f94eae07 (chain not supported by the read API) - Binance: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Soneium: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Soneium: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Soneium: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Soneium: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Soneium: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Soneium: 0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df (chain not supported by the read API) - Soneium: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/43114/0x06380c0e0912312b5150364b9dc4542ba0dbbc85 (PoolManager) - https://defipunkd.com/address/43114/0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9 (PositionDescriptor) - https://defipunkd.com/address/43114/0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd (PositionManager) - https://defipunkd.com/address/43114/0xbe40675bb704506a3c2ccfb762dcfd1e979845c2 (Quoter) - https://defipunkd.com/address/43114/0xc3c9e198c735a4b97e3e683f391ccbdd60b69286 (StateView) - https://defipunkd.com/address/43114/0x94b75331ae8d42c1b61065089b7d48fe14aa73b7 (Universal Router) - https://defipunkd.com/address/43114/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - World Chain: 0xb1860d529182ac3bc1f51fa2abd56662b7d13f33 (chain not supported by the read API) - World Chain: 0x7da419153bd420b689f312363756d76836aeace4 (chain not supported by the read API) - World Chain: 0xc585e0f504613b5fbf874f21af14c65260fb41fa (chain not supported by the read API) - World Chain: 0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0 (chain not supported by the read API) - World Chain: 0x51d394718bc09297262e368c1a481217fdeb71eb (chain not supported by the read API) - World Chain: 0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743 (chain not supported by the read API) - World Chain: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - X Layer: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - https://defipunkd.com/address/81457/0x1631559198a9e474033433b2958dabc135ab6446 (PoolManager) - https://defipunkd.com/address/81457/0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97 (PositionDescriptor) - https://defipunkd.com/address/81457/0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad (PositionManager) - https://defipunkd.com/address/81457/0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf (Quoter) - https://defipunkd.com/address/81457/0x12a88ae16f46dce4e8b15368008ab3380885df30 (StateView) - https://defipunkd.com/address/81457/0xeabbcb3e8e415306207ef514f660a3f820025be3 (Universal Router) - https://defipunkd.com/address/81457/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Tempo: 0x33620f62c5b9b2086dd6b62f4a297a9f30347029 (chain not supported by the read API) - Tempo: 0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77 (chain not supported by the read API) - Tempo: 0x3fc79444f8eacc1894775493ff3fa41f1e35ce11 (chain not supported by the read API) - Tempo: 0x20e6487c371a2086f841ef453f85378223df4f4e (chain not supported by the read API) - Tempo: 0x21b954fba3f5ddebe77ef2d47a3100c066908b2a (chain not supported by the read API) - Tempo: 0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91 (chain not supported by the read API) - Tempo: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Ink: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Ink: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Ink: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Ink: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Ink: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Ink: 0x112908dac86e20e7241b0927479ea3bf935d1fa0 (chain not supported by the read API) - Ink: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Zora: 0x0575338e4c17006ae181b47900a84404247ca30f (chain not supported by the read API) - Zora: 0x7d64630bbb4993b5578dbd65e400961c9e68d55a (chain not supported by the read API) - Zora: 0xf66c7b99e2040f0d9b326b3b7c152e9663543d63 (chain not supported by the read API) - Zora: 0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6 (chain not supported by the read API) - Zora: 0x385785af07d63b50d0a0ea57c4ff89d06adf7328 (chain not supported by the read API) - Zora: 0x3315ef7ca28db74abadc6c44570efdf06b04b020 (chain not supported by the read API) - Zora: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/1/0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 (UNI governance token) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: AUTONOMY Evaluate this protocol's autonomy: can a failure of anything outside its own contracts cause theft or loss of user principal, loss of unclaimed yield, or materially change the protocol's expected performance? "Autonomy" is not "has zero external touchpoints" — it is "external failures are either survivable or recoverable without user loss". This slice adapts DefiScan v1's Autonomy dimension; dependencies are one of several criteria, not the whole frame. GUARDRAILS (read before grading): - Category alone (Liquid Staking, Bridge, RWA Lending, Restaking, …) does NOT force a grade. A category is a hint about where to look; the grade must come from the concrete A1–A9 findings below. - Base-chain consensus (Ethereum PoS, the chain's validator set, the canonical Deposit Contract at 0x00000000219ab540356cBB839Cbe05303d7705Fa) is the SUBSTRATE, not a dependency, for any protocol deployed on that chain. Do not list "depends on Ethereum" as a finding. - Oracles or other integrations used by DOWNSTREAM protocols that happen to read this protocol's token (e.g. Chainlink stETH/USD consumed by Aave) are NOT this protocol's dependencies. Count only what THIS protocol's contracts call or trust on-chain. If a feed or contract appears in the protocol's docs only as reference material for third-party integrators, EXCLUDE IT ENTIRELY — do not log it as a finding even with a "peripheral" or "referenced only" caveat. - "Upgradeable admin can change things" belongs to the CONTROL slice; only count it here when the upgrade surface lets governance silently swap an external dependency (see A9). - Underlying-asset risk in opt-in, isolated markets is NOT autonomy-red on its own. When a protocol wraps third-party yield-bearing assets (LSTs, LRTs, ERC-4626 vaults, lending receipts, restaked tokens) into per-market silos that users explicitly choose, a failure of one underlying does NOT propagate to other markets and is risk the user opted into per-market. Record it under A4 with depth and propagation scope, but do not let it alone drive a red verdict — red requires an external dependency that cross-cuts the protocol or that the user did not opt into at deposit time. A failure mode that is "if the LRT you deposited is hacked, your principal in that LRT-backed market is impaired" is the underlying's autonomy story, not this protocol's; grade it on whether THIS protocol introduces additional dependencies on top. - Sub-module enumeration is mandatory before grading. If the protocol ships distinct product lines or modules (e.g., a v2 core AMM plus a newer perps/funding-rate module, a lending pool plus a separate vault layer, an L1 core plus a cross-chain extension), enumerate each in findings and grade against the WORST module weighted by its share of TVS or its blast radius. A green core does not rescue an orange/red sub-module; conversely, a small red sub-module with capped TVS may bound the overall grade to orange. Name each module by its on-chain factory or router address. If you do not know whether a module exists, that is an unknowns[] entry, not silence. EXPLICIT TVS WEIGHTING: in the verdict, state each module's approximate share of total protocol TVS (use "~X%" if exact figures unavailable; check DeFiLlama or block-explorer balances on the module's main contract) and how that share informs the weighted grade. Format: "Module A holds ~X% of TVS (grade: <g>); Module B holds ~Y% (grade: <g>); weighted overall = <grade> because <reason>." If a red sub-module holds <5% of total TVS and is capped, the overall grade may be orange; if it holds >25%, the overall grade is red. Do not let qualitative reasoning substitute for the percentages — write the numbers. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. External contract calls. Enumerate every external contract the core contracts call or read from (oracles, price feeds, AMM pools, lending pools, staking/deposit contracts, yield wrappers). For each, identify the address, the provider, and what user-facing function of this protocol would break or mis-price if that external contract paused, mis-reported, or behaved adversarially. Grep for "oracle", "aggregator", "getPrice", "latestAnswer", "chainlink", "pyth", "redstone" as a starting point. To verify an oracle is live and what it currently reports, hit https://defipunkd.com/api/contract/read?chainId=<id>&address=<oracle>&method=latestAnswer (or &method=latestRoundData, &method=getPrice, &method=description; use the BARE method name without parens) and cite the URL — the response includes blockNumber/blockHash and rawReturnData, which is stronger evidence than a docs page about which feed "should" be used. - A2. Off-chain actor committees reporting INTO the protocol. Oracle committees, guardian multisigs, DAO-selected validator sets acting as protocol reporters, exit-bus signers, fraud-proof challengers. For each, record committee size, quorum, who picks the members, and what mis-reporting could do (mint, burn, finalize withdrawal, freeze). Distinguish this from governance admins (control slice). NOTE ON STAKING PROTOCOLS: validator slashing and node-operator misbehavior are properties of the base-chain substrate, NOT external dependencies, when the operator set is diversified enough that a coordinated failure caps at <5% principal loss. Count validator/operator risk under A2 ONLY if the operator set is small, non-diversified, or lacks bonding / slashing-insurance / diversification mitigations. A curated set of 30+ independent operators with documented diversification falls under the mitigated path; a 3-operator LST does not. Do not cite the protocol's own risk disclosure as evidence that operator failure = principal loss unless you also check the diversification and bond mitigations. - A3. Bridge / cross-chain messaging dependencies. Only count bridges that carry material TVL or are required for a core user flow. For each, name the bridge operator (canonical L1↔L2, LayerZero, Wormhole, Axelar, custom multisig), the trust model (canonical, optimistic, light-client, guardian set), and what fraction of TVL or users ride on it. "wstETH exists on 15 chains" is not a finding unless material TVL sits there. Before listing any non-primary chain deployment as a dependency, verify it is still operational as of analysis_date — retired or sunset deployments (e.g., Lido-on-Terra, Lido-on-Solana) belong in unknowns[] or should be omitted, never cited as a current dependency. - A4. Nested collateral / restaking chains. For restaking / LRT / receipt-of-receipt designs: record the depth of the collateral chain, every actor with slashing or freezing power at each level, and whether a failure N levels deep propagates to user principal here. - A5. Fork lineage (silent check). If DeFiLlama's forkedFrom is non-empty, record it as one finding and move on. If empty, do NOT add a placeholder finding; it adds noise. - A6. Fallback mechanisms and circuit breakers. What catches an external failure? Sanity-check contracts on oracle reports, rebase bounds, pause paths triggered by bad prices, second-opinion oracles, max-per-block throughput caps, withdrawal queues that absorb bad reports. Record which A1–A4 risks are mitigated by which fallback, and which are unmitigated. For EACH fallback you cite, state its activation status explicitly: (i) LIVE and enforcing on-chain today, (ii) DEPLOYED but not yet wired / activated (e.g., interface exists but the address is zero or the role is unassigned), or (iii) DOCUMENTED / PROPOSED only (forum post, LIP draft, audit pending). Only (i) counts as mitigation for the grade. A fallback in state (ii) or (iii) should be noted but must not reduce the risk in your steel-man or verdict. If you cannot determine activation status, add an unknowns[] entry rather than assume it is live. - A7. Sequencer / L1-liveness dependency BEYOND the base-chain substrate. SCOPE — sequencer risk only counts here when the protocol IS its own L2/L3 appchain or app-rollup, where the sequencer is part of the protocol's own stack and a freeze is a protocol-level outage. A protocol permissionlessly deployed on a third-party L2 inherits that L2's sequencer as substrate, not an A7 dependency. Record the sequencer/DA trust model when A7 applies. - A8. Keeper / relayer / off-chain bot liveness. Protocols that need permissionless-but-necessary off-chain actors (liquidation bots, auto-compounders, deposit relayers, intent solvers). Record whether the role is permissionless, what degrades if nobody runs it (yield paused, bad debt accumulates, positions go stale), and whether the failure mode is graceful or catastrophic. - A9. Governance-mutable dependency surface. Can an admin or DAO action silently INTRODUCE a NEW EXTERNAL dependency — swap the oracle address to a different provider, register a new staking module that calls an untrusted contract, add a new bridge, route SY through a new external vault — without an exit window for users? Check the upgrade / router / module-registry contracts. Answer: which EXTERNAL dependencies are governance-mutable, who holds that power, and whether there is a timelock or exit window. SCOPE LIMIT — read carefully: A9 is about the *external dependency surface*, not the upgrade surface in general. "The proxyAdmin / EOA can upgrade the router implementation to arbitrary bytecode" is a CONTROL-slice finding (admin can rug), NOT an autonomy-A9 finding. A9 fires only when the upgrade specifically swaps out or adds a contract that THIS protocol calls or trusts (e.g., changing the oracle address from Chainlink to a malicious feed, registering a new SY adapter that points to a third-party vault, redirecting a bridge endpoint). If the only finding is "admin can change implementation," do not log it under A9 and do not let it drive the autonomy grade — note it under control instead. The autonomy-relevant version of the same upgrade key is "admin can swap [specific external address X] without timelock"; that requires identifying the specific external dependency that becomes mutable. STEEL-MAN (per Hard Rule 13): write one-sentence strongest arguments for red, orange, and green using the A1–A9 findings. IMPACTED TVS ESTIMATE: the headline MUST include a rough impacted-TVS figure — the fraction of protocol TVS that could be lost or frozen if the worst-unmitigated dependency you identified failed. Use "~X%" if exact numbers are unavailable, "<1%" for de minimis, "unclear" only if A1–A9 left the question genuinely open (in which case grade=unknown is usually correct). Do NOT substitute qualitative phrases like "significant" — give a number or bracket. GRADE ANCHORS (mapped to DefiScan v1 stages): - green = Stage 2 equivalent. Failure of any external dependency cannot cause loss of user principal or unclaimed yield. Either there are no material external dependencies, or every critical one has a documented fallback (A6) that keeps users whole. Governance cannot silently introduce new dependencies without an exit window (A9). Impacted TVS under any single-dependency failure: effectively 0. - orange = Stage 1 equivalent. Failure of some external dependency can cause loss of unclaimed yield, or can materially change expected performance (pause withdrawals, freeze positions, degrade price quality), but cannot cause loss of principal. Committee-based oracles with sanity checks, canonical-only bridges, fallback paths that exist but are incomplete, or governance-mutable dependencies protected by a ≥7-day timelock. Impacted TVS is bounded and recoverable. - red = Stage 0 equivalent. Failure of an external dependency CAN cause theft or loss of principal. Examples: single-provider oracle with no sanity check or fallback, material TVL on a non-canonical bridge with a guardian multisig, governance can hot-swap oracles or add staking modules with no timelock or exit window, unmitigated keeper-liveness dependency where positions become insolvent if bots stop. Impacted TVS is material. - unknown = checklist incomplete after inspecting source + verified contracts. Prefer unknown over guessing when A1/A6 could not be reconstructed. RESERVE unknown for cases where the CORE ARCHITECTURE itself is unverifiable — not for cases where you merely cannot enumerate every per-market dependency in a multi-market protocol. If the core router/factory/oracle architecture is verifiable on-chain and you can determine whether the core requires external dependencies, grade the architecture even when an exhaustive per-market external-dependency census is infeasible. Acknowledge the per-market gap in unknowns[] but still issue a grade. Refusing to grade a multi-market protocol because you cannot list every SY/vault/market is over-use of unknown; grade the architecture and say so. PROMPT-META CHECK (per Hard Rule 17): before finalizing, verify the verdict cites concrete contract addresses, docs, or code — not the rubric itself. If your verdict says "the protocol belongs to a category the rubric marks red", rewrite it with the A1–A9 finding that actually justifies the grade, or drop to grade=unknown. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "autonomy", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Open Access
✓ 5/5 models agree
AI-only
weak green — only 0/5 sources have a public chat share link; total support weight 0.60 below confidence floor (1.5) Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v4 - protocol.name: Uniswap V4 - protocol.chains: Ethereum, Base, Arbitrum, Polygon, Binance, Unichain, Monad, Soneium, Optimism, Tempo, Avalanche, World Chain, X Layer, Blast, Ink, Zora - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/Uniswap/v4-core/tree/main/docs/security/audits, https://github.com/Uniswap/v4-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-07-uniswap-v4-core-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x1a9C8182C09F50C8318d769245beA52c32BE35BC", "role": "PoolManager owner (Timelock, 2-day minimum delay)" }, { "chain": "Ethereum", "address": "0x408ED6354d4973f66138C91495F2f2FCbd8724C3", "role": "GovernorBravo proxy (admin of the Timelock)" }, { "chain": "Ethereum", "address": "0x3e51b68a157b573303155300a6593224f009990a", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497D0Cd94564c118C661384", "role": "Uniswap DAO Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497d0Cd94564c118039df83", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503475d9f9244252322473c9Cd", "role": "Uniswap Governance Timelock" }, { "chain": "Base", "address": "0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9", "role": "Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Optimism", "address": "0xa1dD330d602c32622AA270Ea73d078B803Cb3518", "role": "Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Blast", "address": "0x2339C0d23b60739B3E5ABF201F05903D24A26C77", "role": "Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Binance", "address": "0x341c1511141022cf8eE20824Ae0fFA3491F1302b", "role": "BSC PoolManager owner; Uniswap Wormhole Message Receiver linked to an Ethereum sender owned by the Uniswap timelock" }, { "chain": "Avalanche", "address": "0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc", "role": "Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint" }, { "chain": "Ethereum", "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "role": "PoolManager" }, { "chain": "Ethereum", "address": "0xd1428ba554f4c8450b763a0b2040a4935c63f06c", "role": "PositionDescriptor" }, { "chain": "Ethereum", "address": "0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e", "role": "PositionManager" }, { "chain": "Ethereum", "address": "0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203", "role": "Quoter" }, { "chain": "Ethereum", "address": "0x7ffe42c4a5deea5b0fec41c94c136cf115597227", "role": "StateView" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "Universal Router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Arbitrum", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Arbitrum", "address": "0xe2023f3fa515cf070e07fd9d51c1d236e07843f4", "role": "PositionDescriptor" }, { "chain": "Arbitrum", "address": "0xd88f38f930b7952f2db2432cb002e7abbf3dd869", "role": "PositionManager" }, { "chain": "Arbitrum", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Arbitrum", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "Universal Router" }, { "chain": "Arbitrum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Base", "address": "0x498581ff718922c3f8e6a244956af099b2652b2b", "role": "PoolManager" }, { "chain": "Base", "address": "0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5", "role": "PositionDescriptor" }, { "chain": "Base", "address": "0x7c5f5a4bbd8fd63184577525326123b519429bdc", "role": "PositionManager" }, { "chain": "Base", "address": "0x0d5e0f971ed27fbff6c2837bf31316121532048d", "role": "Quoter" }, { "chain": "Base", "address": "0xa3c0c9b65bad0b08107aa264b0f3db444b867a71", "role": "StateView" }, { "chain": "Base", "address": "0x6ff5693b99212da76ad316178a184ab56d299b43", "role": "Universal Router" }, { "chain": "Base", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Optimism", "address": "0x9a13f98cb987694c9f086b1f5eb990eea8264ec3", "role": "PoolManager" }, { "chain": "Optimism", "address": "0xedd81496169c46df161b8513a52ffecaaaa66743", "role": "PositionDescriptor" }, { "chain": "Optimism", "address": "0x3c3ea4b57a46241e54610e5f022e5c45859a1017", "role": "PositionManager" }, { "chain": "Optimism", "address": "0x1f3131a13296fb91c90870043742c3cdbff1a8d7", "role": "Quoter" }, { "chain": "Optimism", "address": "0xc18a3169788f4f75a170290584eca6395c75ecdb", "role": "StateView" }, { "chain": "Optimism", "address": "0x851116d9223fabed8e56c0e6b8ad0c31d98b3507", "role": "Universal Router" }, { "chain": "Optimism", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Polygon", "address": "0x67366782805870060151383f4bbff9dab53e5cd6", "role": "PoolManager" }, { "chain": "Polygon", "address": "0x0892771f0c1b78ad6013d6e5536007e1c16e6794", "role": "PositionDescriptor" }, { "chain": "Polygon", "address": "0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9", "role": "PositionManager" }, { "chain": "Polygon", "address": "0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9", "role": "Quoter" }, { "chain": "Polygon", "address": "0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a", "role": "StateView" }, { "chain": "Polygon", "address": "0x1095692a6237d83c6a72f3f5efedb9a670c49223", "role": "Universal Router" }, { "chain": "Polygon", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000004", "role": "PoolManager" }, { "chain": "Unichain", "address": "0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722", "role": "PositionDescriptor" }, { "chain": "Unichain", "address": "0x4529a01c7a0410167c5740c487a8de60232617bf", "role": "PositionManager" }, { "chain": "Unichain", "address": "0x333e3c607b141b18ff6de9f258db6e77fe7491e0", "role": "Quoter" }, { "chain": "Unichain", "address": "0x86e8631a016f9068c3f085faf484ee3f5fdee8f2", "role": "StateView" }, { "chain": "Unichain", "address": "0xef740bf23acae26f6492b10de645d6b98dc8eaf3", "role": "Universal Router" }, { "chain": "Unichain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Monad", "address": "0x188d586ddcf52439676ca21a244753fa19f9ea8e", "role": "PoolManager" }, { "chain": "Monad", "address": "0x5770d2914355a6d0a39a70aeea9bcce55df4201b", "role": "PositionDescriptor" }, { "chain": "Monad", "address": "0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016", "role": "PositionManager" }, { "chain": "Monad", "address": "0xa222dd357a9076d1091ed6aa2e16c9742dd26891", "role": "Quoter" }, { "chain": "Monad", "address": "0x77395f3b2e73ae90843717371294fa97cc419d64", "role": "StateView" }, { "chain": "Monad", "address": "0x0d97dc33264bfc1c226207428a79b26757fb9dc3", "role": "Universal Router" }, { "chain": "Monad", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Binance", "address": "0x28e2ea090877bf75740558f6bfb36a5ffee9e9df", "role": "PoolManager" }, { "chain": "Binance", "address": "0xf0432f360703ec3d33931a8356a75a77d8d380e1", "role": "PositionDescriptor" }, { "chain": "Binance", "address": "0x7a4a5c919ae2541aed11041a1aeee68f1287f95b", "role": "PositionManager" }, { "chain": "Binance", "address": "0x9f75dd27d6664c475b90e105573e550ff69437b0", "role": "Quoter" }, { "chain": "Binance", "address": "0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4", "role": "StateView" }, { "chain": "Binance", "address": "0x1906c1d672b88cd1b9ac7593301ca990f94eae07", "role": "Universal Router" }, { "chain": "Binance", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Soneium", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Soneium", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Soneium", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Soneium", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Soneium", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Soneium", "address": "0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df", "role": "Universal Router" }, { "chain": "Soneium", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Avalanche", "address": "0x06380c0e0912312b5150364b9dc4542ba0dbbc85", "role": "PoolManager" }, { "chain": "Avalanche", "address": "0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9", "role": "PositionDescriptor" }, { "chain": "Avalanche", "address": "0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd", "role": "PositionManager" }, { "chain": "Avalanche", "address": "0xbe40675bb704506a3c2ccfb762dcfd1e979845c2", "role": "Quoter" }, { "chain": "Avalanche", "address": "0xc3c9e198c735a4b97e3e683f391ccbdd60b69286", "role": "StateView" }, { "chain": "Avalanche", "address": "0x94b75331ae8d42c1b61065089b7d48fe14aa73b7", "role": "Universal Router" }, { "chain": "Avalanche", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "World Chain", "address": "0xb1860d529182ac3bc1f51fa2abd56662b7d13f33", "role": "PoolManager" }, { "chain": "World Chain", "address": "0x7da419153bd420b689f312363756d76836aeace4", "role": "PositionDescriptor" }, { "chain": "World Chain", "address": "0xc585e0f504613b5fbf874f21af14c65260fb41fa", "role": "PositionManager" }, { "chain": "World Chain", "address": "0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0", "role": "Quoter" }, { "chain": "World Chain", "address": "0x51d394718bc09297262e368c1a481217fdeb71eb", "role": "StateView" }, { "chain": "World Chain", "address": "0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743", "role": "Universal Router" }, { "chain": "World Chain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "X Layer", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Blast", "address": "0x1631559198a9e474033433b2958dabc135ab6446", "role": "PoolManager" }, { "chain": "Blast", "address": "0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97", "role": "PositionDescriptor" }, { "chain": "Blast", "address": "0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad", "role": "PositionManager" }, { "chain": "Blast", "address": "0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf", "role": "Quoter" }, { "chain": "Blast", "address": "0x12a88ae16f46dce4e8b15368008ab3380885df30", "role": "StateView" }, { "chain": "Blast", "address": "0xeabbcb3e8e415306207ef514f660a3f820025be3", "role": "Universal Router" }, { "chain": "Blast", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Tempo", "address": "0x33620f62c5b9b2086dd6b62f4a297a9f30347029", "role": "PoolManager" }, { "chain": "Tempo", "address": "0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77", "role": "PositionDescriptor" }, { "chain": "Tempo", "address": "0x3fc79444f8eacc1894775493ff3fa41f1e35ce11", "role": "PositionManager" }, { "chain": "Tempo", "address": "0x20e6487c371a2086f841ef453f85378223df4f4e", "role": "Quoter" }, { "chain": "Tempo", "address": "0x21b954fba3f5ddebe77ef2d47a3100c066908b2a", "role": "StateView" }, { "chain": "Tempo", "address": "0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91", "role": "Universal Router" }, { "chain": "Tempo", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ink", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Ink", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Ink", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Ink", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Ink", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Ink", "address": "0x112908dac86e20e7241b0927479ea3bf935d1fa0", "role": "Universal Router" }, { "chain": "Ink", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Zora", "address": "0x0575338e4c17006ae181b47900a84404247ca30f", "role": "PoolManager" }, { "chain": "Zora", "address": "0x7d64630bbb4993b5578dbd65e400961c9e68d55a", "role": "PositionDescriptor" }, { "chain": "Zora", "address": "0xf66c7b99e2040f0d9b326b3b7c152e9663543d63", "role": "PositionManager" }, { "chain": "Zora", "address": "0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6", "role": "Quoter" }, { "chain": "Zora", "address": "0x385785af07d63b50d0a0ea57c4ff89d06adf7328", "role": "StateView" }, { "chain": "Zora", "address": "0x3315ef7ca28db74abadc6c44570efdf06b04b020", "role": "Universal Router" }, { "chain": "Zora", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ethereum", "address": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "role": "UNI governance token" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x1a9C8182C09F50C8318d769245beA52c32BE35BC (PoolManager owner (Timelock, 2-day minimum delay)) - https://defipunkd.com/address/1/0x408ED6354d4973f66138C91495F2f2FCbd8724C3 (GovernorBravo proxy (admin of the Timelock)) - https://defipunkd.com/address/1/0x3e51b68a157b573303155300a6593224f009990a (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497D0Cd94564c118C661384 (Uniswap DAO Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497d0Cd94564c118039df83 (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503475d9f9244252322473c9Cd (Uniswap Governance Timelock) - https://defipunkd.com/address/8453/0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9 (Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/10/0xa1dD330d602c32622AA270Ea73d078B803Cb3518 (Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/81457/0x2339C0d23b60739B3E5ABF201F05903D24A26C77 (Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - Binance: 0x341c1511141022cf8eE20824Ae0fFA3491F1302b (chain not supported by the read API) - https://defipunkd.com/address/43114/0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc (Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint) - https://defipunkd.com/address/1/0x000000000004444c5dc75cB358380D2e3dE08A90 (PoolManager) - https://defipunkd.com/address/1/0xd1428ba554f4c8450b763a0b2040a4935c63f06c (PositionDescriptor) - https://defipunkd.com/address/1/0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e (PositionManager) - https://defipunkd.com/address/1/0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203 (Quoter) - https://defipunkd.com/address/1/0x7ffe42c4a5deea5b0fec41c94c136cf115597227 (StateView) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (Universal Router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/42161/0x360e68faccca8ca495c1b759fd9eee466db9fb32 (PoolManager) - https://defipunkd.com/address/42161/0xe2023f3fa515cf070e07fd9d51c1d236e07843f4 (PositionDescriptor) - https://defipunkd.com/address/42161/0xd88f38f930b7952f2db2432cb002e7abbf3dd869 (PositionManager) - https://defipunkd.com/address/42161/0x3972c00f7ed4885e145823eb7c655375d275a1c5 (Quoter) - https://defipunkd.com/address/42161/0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (StateView) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (Universal Router) - https://defipunkd.com/address/42161/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/8453/0x498581ff718922c3f8e6a244956af099b2652b2b (PoolManager) - https://defipunkd.com/address/8453/0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5 (PositionDescriptor) - https://defipunkd.com/address/8453/0x7c5f5a4bbd8fd63184577525326123b519429bdc (PositionManager) - https://defipunkd.com/address/8453/0x0d5e0f971ed27fbff6c2837bf31316121532048d (Quoter) - https://defipunkd.com/address/8453/0xa3c0c9b65bad0b08107aa264b0f3db444b867a71 (StateView) - https://defipunkd.com/address/8453/0x6ff5693b99212da76ad316178a184ab56d299b43 (Universal Router) - https://defipunkd.com/address/8453/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/10/0x9a13f98cb987694c9f086b1f5eb990eea8264ec3 (PoolManager) - https://defipunkd.com/address/10/0xedd81496169c46df161b8513a52ffecaaaa66743 (PositionDescriptor) - https://defipunkd.com/address/10/0x3c3ea4b57a46241e54610e5f022e5c45859a1017 (PositionManager) - https://defipunkd.com/address/10/0x1f3131a13296fb91c90870043742c3cdbff1a8d7 (Quoter) - https://defipunkd.com/address/10/0xc18a3169788f4f75a170290584eca6395c75ecdb (StateView) - https://defipunkd.com/address/10/0x851116d9223fabed8e56c0e6b8ad0c31d98b3507 (Universal Router) - https://defipunkd.com/address/10/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/137/0x67366782805870060151383f4bbff9dab53e5cd6 (PoolManager) - https://defipunkd.com/address/137/0x0892771f0c1b78ad6013d6e5536007e1c16e6794 (PositionDescriptor) - https://defipunkd.com/address/137/0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9 (PositionManager) - https://defipunkd.com/address/137/0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9 (Quoter) - https://defipunkd.com/address/137/0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a (StateView) - https://defipunkd.com/address/137/0x1095692a6237d83c6a72f3f5efedb9a670c49223 (Universal Router) - https://defipunkd.com/address/137/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000004 (PoolManager) - https://defipunkd.com/address/130/0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722 (PositionDescriptor) - https://defipunkd.com/address/130/0x4529a01c7a0410167c5740c487a8de60232617bf (PositionManager) - https://defipunkd.com/address/130/0x333e3c607b141b18ff6de9f258db6e77fe7491e0 (Quoter) - https://defipunkd.com/address/130/0x86e8631a016f9068c3f085faf484ee3f5fdee8f2 (StateView) - https://defipunkd.com/address/130/0xef740bf23acae26f6492b10de645d6b98dc8eaf3 (Universal Router) - https://defipunkd.com/address/130/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Monad: 0x188d586ddcf52439676ca21a244753fa19f9ea8e (chain not supported by the read API) - Monad: 0x5770d2914355a6d0a39a70aeea9bcce55df4201b (chain not supported by the read API) - Monad: 0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016 (chain not supported by the read API) - Monad: 0xa222dd357a9076d1091ed6aa2e16c9742dd26891 (chain not supported by the read API) - Monad: 0x77395f3b2e73ae90843717371294fa97cc419d64 (chain not supported by the read API) - Monad: 0x0d97dc33264bfc1c226207428a79b26757fb9dc3 (chain not supported by the read API) - Monad: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Binance: 0x28e2ea090877bf75740558f6bfb36a5ffee9e9df (chain not supported by the read API) - Binance: 0xf0432f360703ec3d33931a8356a75a77d8d380e1 (chain not supported by the read API) - Binance: 0x7a4a5c919ae2541aed11041a1aeee68f1287f95b (chain not supported by the read API) - Binance: 0x9f75dd27d6664c475b90e105573e550ff69437b0 (chain not supported by the read API) - Binance: 0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4 (chain not supported by the read API) - Binance: 0x1906c1d672b88cd1b9ac7593301ca990f94eae07 (chain not supported by the read API) - Binance: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Soneium: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Soneium: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Soneium: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Soneium: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Soneium: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Soneium: 0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df (chain not supported by the read API) - Soneium: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/43114/0x06380c0e0912312b5150364b9dc4542ba0dbbc85 (PoolManager) - https://defipunkd.com/address/43114/0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9 (PositionDescriptor) - https://defipunkd.com/address/43114/0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd (PositionManager) - https://defipunkd.com/address/43114/0xbe40675bb704506a3c2ccfb762dcfd1e979845c2 (Quoter) - https://defipunkd.com/address/43114/0xc3c9e198c735a4b97e3e683f391ccbdd60b69286 (StateView) - https://defipunkd.com/address/43114/0x94b75331ae8d42c1b61065089b7d48fe14aa73b7 (Universal Router) - https://defipunkd.com/address/43114/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - World Chain: 0xb1860d529182ac3bc1f51fa2abd56662b7d13f33 (chain not supported by the read API) - World Chain: 0x7da419153bd420b689f312363756d76836aeace4 (chain not supported by the read API) - World Chain: 0xc585e0f504613b5fbf874f21af14c65260fb41fa (chain not supported by the read API) - World Chain: 0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0 (chain not supported by the read API) - World Chain: 0x51d394718bc09297262e368c1a481217fdeb71eb (chain not supported by the read API) - World Chain: 0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743 (chain not supported by the read API) - World Chain: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - X Layer: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - https://defipunkd.com/address/81457/0x1631559198a9e474033433b2958dabc135ab6446 (PoolManager) - https://defipunkd.com/address/81457/0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97 (PositionDescriptor) - https://defipunkd.com/address/81457/0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad (PositionManager) - https://defipunkd.com/address/81457/0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf (Quoter) - https://defipunkd.com/address/81457/0x12a88ae16f46dce4e8b15368008ab3380885df30 (StateView) - https://defipunkd.com/address/81457/0xeabbcb3e8e415306207ef514f660a3f820025be3 (Universal Router) - https://defipunkd.com/address/81457/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Tempo: 0x33620f62c5b9b2086dd6b62f4a297a9f30347029 (chain not supported by the read API) - Tempo: 0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77 (chain not supported by the read API) - Tempo: 0x3fc79444f8eacc1894775493ff3fa41f1e35ce11 (chain not supported by the read API) - Tempo: 0x20e6487c371a2086f841ef453f85378223df4f4e (chain not supported by the read API) - Tempo: 0x21b954fba3f5ddebe77ef2d47a3100c066908b2a (chain not supported by the read API) - Tempo: 0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91 (chain not supported by the read API) - Tempo: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Ink: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Ink: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Ink: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Ink: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Ink: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Ink: 0x112908dac86e20e7241b0927479ea3bf935d1fa0 (chain not supported by the read API) - Ink: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Zora: 0x0575338e4c17006ae181b47900a84404247ca30f (chain not supported by the read API) - Zora: 0x7d64630bbb4993b5578dbd65e400961c9e68d55a (chain not supported by the read API) - Zora: 0xf66c7b99e2040f0d9b326b3b7c152e9663543d63 (chain not supported by the read API) - Zora: 0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6 (chain not supported by the read API) - Zora: 0x385785af07d63b50d0a0ea57c4ff89d06adf7328 (chain not supported by the read API) - Zora: 0x3315ef7ca28db74abadc6c44570efdf06b04b020 (chain not supported by the read API) - Zora: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/1/0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 (UNI governance token) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: OPEN-ACCESS Evaluate who is allowed to use the protocol and whether any of that permission is granted off-chain. Scope: this slice is about ADMISSION — who can enter, exit, or transact. Operator LIVENESS (what breaks if keepers/oracles go offline) is assessed in the dependencies slice and is out of scope for the grade here. You may note operator dependencies as context, but do not let "the protocol halts if operator X disappears" drive the access grade on its own; that belongs in dependencies. Source verification / contract verification on block explorers is assessed in the verifiability slice and is out of scope here — do NOT let "contract is unverified" drive the access grade. Framing: the smart contracts are the access layer; frontends are UX. A permissionless contract is reachable by any client (SDK, third-party UI, aggregator, wallet integration). Frontend ToS, IP geo-blocking, and wallet screening are publisher policies on one specific client — they are reported as context but do NOT determine the grade. The grade hinges on (1) what the contract itself permits, and (2) whether the protocol is practically reachable without the official publisher's cooperation. Meta-check before finalizing: if your verdict cites phrases from this prompt as evidence ("the protocol meets the 'credible alternatives' condition", "this fits the 'documented fallback' rule"), redo the verdict. The prompt describes the rubric; evidence must come from the protocol. A verdict should cite what the protocol does, not what the rubric says. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. Whitelist / allowlist modifiers in user-facing entry points. Grep for "onlyWhitelisted", "onlyRole", "allowlist", "isAccredited", "isKYCed". Note which functions are gated and who can add/remove from the list. - A2. Off-chain operators in the admission path: keepers, sequencers, privileged relayers, oracle posters whose approval is required to admit a user action (not just to keep the protocol live). For each, identify whether the role is held by a single operator, a permissioned committee, or is permissionless. Enumerate per user-facing function class (deposit vs withdraw-request vs claim-finalized vs transfer) which ones require operator approval to be admitted, and which ones admit users unconditionally. A function whose placement is unconditional but whose downstream settlement depends on an operator is an admission-permissionless function — flag the liveness dependency as context and defer its grading weight to the dependencies slice. - A3. Frontend restrictions on the official interface — record as context, not as a grade lever. Distinguish: - A3-passive: boilerplate ToS clauses (sanctions attestation, restricted-territory self-certification, VPN-circumvention prohibition, "comply with applicable law" eligibility, age of majority). - A3-active: runtime enforcement — IP-based geo-blocking, wallet-address screening against a sanctions oracle (Chainalysis, TRM, Elliptic), KYC wall, rendering-blocking jurisdiction banner. Record findings under the correct tier. Quote ToS text or banner text in evidence[].shows. These findings populate the headline and rationale but do NOT move the grade by themselves; the grade is set by A1, A2, and the A3b path check below. - A3b. Independent access paths (the operative grade input). Enumerate paths that do not require the official publisher's cooperation: - Published SDK / library / CLI for direct contract interaction. - Third-party frontends operated by separate legal entities. - Wallet-integrated access (MetaMask Swaps, Safe apps, etc.). - DEX / lending / yield aggregators that route through the contracts. Record at least one concrete link per path that exists. The protocol does NOT have to self-document these — the test is existence, not UX cost. An A3b-i redistribution of the official UI bound by the same ToS does NOT count as an independent path. - A4. Sanctions / compliance tooling at the contract level: does the protocol check addresses against OFAC lists or similar on-chain blocklists in the contract itself? (Frontend-only screening belongs in A3.) - A5. Differentiate read access vs write access: many protocols are read-permissionless (anyone can view state) but write-gated (only certain addresses can deposit/borrow). Record both. - A6. ToS / Legal links: locate them on the website and produce a VERBATIM quote of any jurisdictional, sanctions, or eligibility clause in evidence[].shows. If you cannot extract the clause text verbatim (SPA render failure, paywall, dead link, etc.), do NOT paraphrase or infer from general knowledge — record the ToS URL in unknowns[] with the reason extraction failed. Assertions about ToS content without a verbatim quote will be downweighted by reviewers. Then write the steel-man section per Hard Rule 11. Grade rules (admission-focused; liveness concerns belong in dependencies; source verification belongs in verifiability): - green = no contract-level whitelist/KYC on user entry/exit; no operator approval required to admit a user action; AND at least one independent A3b path exists (published SDK, third-party frontend, wallet integration, or aggregator routing). Frontend ToS posture and A3-active enforcement on the official UI do NOT block green when contracts are permissionless and an independent path exists — they are reported as context. - orange = contracts admit users unconditionally, BUT the protocol is operationally captured by the official publisher: no published SDK, no third-party frontend, no wallet integration, no aggregator routing. The contract is theoretically open but practically reachable only through the official UI. Also applies when admission requires approval from a permissioned committee that is governance-managed with a documented replacement procedure. - red = contract-level whitelist / KYC on user entry/exit, OR admission of a core user action requires approval from a single privileged operator or a small committee with no documented replacement procedure, OR enforces an on-chain blocklist updatable by a single party. - unknown = checklist incomplete after checking the sources above. Default-grade guidance: when contracts are fully permissionless AND any A3b independent path exists, the default grade is green regardless of frontend ToS or A3-active enforcement on the official UI. Frontend geo-blocking, sanctions-oracle wallet screening, and ToS sanctions clauses are publisher policies on one client and are reported in findings/headline as context, not as grade levers. To grade orange on operational-capture grounds, the auditor must affirmatively show that ALL independent paths are absent or also gated. Guideline on committees: where admission depends on a multi-operator committee, the relevant axes are (a) set size, (b) whether replacement/rotation is governed on-chain, (c) whether the replacement procedure is publicly documented. A large set with on-chain governance replacement should not be graded as a single-party operator even if rotation is not instantaneous. A small set with informal replacement should be treated as a single-party operator. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "open-access", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Audit all 5 dimensions · one prompt Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v4 - protocol.name: Uniswap V4 - protocol.chains: Ethereum, Base, Arbitrum, Polygon, Binance, Unichain, Monad, Soneium, Optimism, Tempo, Avalanche, World Chain, X Layer, Blast, Ink, Zora - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/Uniswap/v4-core/tree/main/docs/security/audits, https://github.com/Uniswap/v4-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-07-uniswap-v4-core-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x1a9C8182C09F50C8318d769245beA52c32BE35BC", "role": "PoolManager owner (Timelock, 2-day minimum delay)" }, { "chain": "Ethereum", "address": "0x408ED6354d4973f66138C91495F2f2FCbd8724C3", "role": "GovernorBravo proxy (admin of the Timelock)" }, { "chain": "Ethereum", "address": "0x3e51b68a157b573303155300a6593224f009990a", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497D0Cd94564c118C661384", "role": "Uniswap DAO Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497d0Cd94564c118039df83", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503475d9f9244252322473c9Cd", "role": "Uniswap Governance Timelock" }, { "chain": "Base", "address": "0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9", "role": "Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Optimism", "address": "0xa1dD330d602c32622AA270Ea73d078B803Cb3518", "role": "Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Blast", "address": "0x2339C0d23b60739B3E5ABF201F05903D24A26C77", "role": "Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Binance", "address": "0x341c1511141022cf8eE20824Ae0fFA3491F1302b", "role": "BSC PoolManager owner; Uniswap Wormhole Message Receiver linked to an Ethereum sender owned by the Uniswap timelock" }, { "chain": "Avalanche", "address": "0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc", "role": "Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint" }, { "chain": "Ethereum", "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "role": "PoolManager" }, { "chain": "Ethereum", "address": "0xd1428ba554f4c8450b763a0b2040a4935c63f06c", "role": "PositionDescriptor" }, { "chain": "Ethereum", "address": "0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e", "role": "PositionManager" }, { "chain": "Ethereum", "address": "0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203", "role": "Quoter" }, { "chain": "Ethereum", "address": "0x7ffe42c4a5deea5b0fec41c94c136cf115597227", "role": "StateView" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "Universal Router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Arbitrum", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Arbitrum", "address": "0xe2023f3fa515cf070e07fd9d51c1d236e07843f4", "role": "PositionDescriptor" }, { "chain": "Arbitrum", "address": "0xd88f38f930b7952f2db2432cb002e7abbf3dd869", "role": "PositionManager" }, { "chain": "Arbitrum", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Arbitrum", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "Universal Router" }, { "chain": "Arbitrum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Base", "address": "0x498581ff718922c3f8e6a244956af099b2652b2b", "role": "PoolManager" }, { "chain": "Base", "address": "0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5", "role": "PositionDescriptor" }, { "chain": "Base", "address": "0x7c5f5a4bbd8fd63184577525326123b519429bdc", "role": "PositionManager" }, { "chain": "Base", "address": "0x0d5e0f971ed27fbff6c2837bf31316121532048d", "role": "Quoter" }, { "chain": "Base", "address": "0xa3c0c9b65bad0b08107aa264b0f3db444b867a71", "role": "StateView" }, { "chain": "Base", "address": "0x6ff5693b99212da76ad316178a184ab56d299b43", "role": "Universal Router" }, { "chain": "Base", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Optimism", "address": "0x9a13f98cb987694c9f086b1f5eb990eea8264ec3", "role": "PoolManager" }, { "chain": "Optimism", "address": "0xedd81496169c46df161b8513a52ffecaaaa66743", "role": "PositionDescriptor" }, { "chain": "Optimism", "address": "0x3c3ea4b57a46241e54610e5f022e5c45859a1017", "role": "PositionManager" }, { "chain": "Optimism", "address": "0x1f3131a13296fb91c90870043742c3cdbff1a8d7", "role": "Quoter" }, { "chain": "Optimism", "address": "0xc18a3169788f4f75a170290584eca6395c75ecdb", "role": "StateView" }, { "chain": "Optimism", "address": "0x851116d9223fabed8e56c0e6b8ad0c31d98b3507", "role": "Universal Router" }, { "chain": "Optimism", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Polygon", "address": "0x67366782805870060151383f4bbff9dab53e5cd6", "role": "PoolManager" }, { "chain": "Polygon", "address": "0x0892771f0c1b78ad6013d6e5536007e1c16e6794", "role": "PositionDescriptor" }, { "chain": "Polygon", "address": "0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9", "role": "PositionManager" }, { "chain": "Polygon", "address": "0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9", "role": "Quoter" }, { "chain": "Polygon", "address": "0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a", "role": "StateView" }, { "chain": "Polygon", "address": "0x1095692a6237d83c6a72f3f5efedb9a670c49223", "role": "Universal Router" }, { "chain": "Polygon", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000004", "role": "PoolManager" }, { "chain": "Unichain", "address": "0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722", "role": "PositionDescriptor" }, { "chain": "Unichain", "address": "0x4529a01c7a0410167c5740c487a8de60232617bf", "role": "PositionManager" }, { "chain": "Unichain", "address": "0x333e3c607b141b18ff6de9f258db6e77fe7491e0", "role": "Quoter" }, { "chain": "Unichain", "address": "0x86e8631a016f9068c3f085faf484ee3f5fdee8f2", "role": "StateView" }, { "chain": "Unichain", "address": "0xef740bf23acae26f6492b10de645d6b98dc8eaf3", "role": "Universal Router" }, { "chain": "Unichain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Monad", "address": "0x188d586ddcf52439676ca21a244753fa19f9ea8e", "role": "PoolManager" }, { "chain": "Monad", "address": "0x5770d2914355a6d0a39a70aeea9bcce55df4201b", "role": "PositionDescriptor" }, { "chain": "Monad", "address": "0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016", "role": "PositionManager" }, { "chain": "Monad", "address": "0xa222dd357a9076d1091ed6aa2e16c9742dd26891", "role": "Quoter" }, { "chain": "Monad", "address": "0x77395f3b2e73ae90843717371294fa97cc419d64", "role": "StateView" }, { "chain": "Monad", "address": "0x0d97dc33264bfc1c226207428a79b26757fb9dc3", "role": "Universal Router" }, { "chain": "Monad", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Binance", "address": "0x28e2ea090877bf75740558f6bfb36a5ffee9e9df", "role": "PoolManager" }, { "chain": "Binance", "address": "0xf0432f360703ec3d33931a8356a75a77d8d380e1", "role": "PositionDescriptor" }, { "chain": "Binance", "address": "0x7a4a5c919ae2541aed11041a1aeee68f1287f95b", "role": "PositionManager" }, { "chain": "Binance", "address": "0x9f75dd27d6664c475b90e105573e550ff69437b0", "role": "Quoter" }, { "chain": "Binance", "address": "0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4", "role": "StateView" }, { "chain": "Binance", "address": "0x1906c1d672b88cd1b9ac7593301ca990f94eae07", "role": "Universal Router" }, { "chain": "Binance", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Soneium", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Soneium", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Soneium", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Soneium", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Soneium", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Soneium", "address": "0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df", "role": "Universal Router" }, { "chain": "Soneium", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Avalanche", "address": "0x06380c0e0912312b5150364b9dc4542ba0dbbc85", "role": "PoolManager" }, { "chain": "Avalanche", "address": "0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9", "role": "PositionDescriptor" }, { "chain": "Avalanche", "address": "0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd", "role": "PositionManager" }, { "chain": "Avalanche", "address": "0xbe40675bb704506a3c2ccfb762dcfd1e979845c2", "role": "Quoter" }, { "chain": "Avalanche", "address": "0xc3c9e198c735a4b97e3e683f391ccbdd60b69286", "role": "StateView" }, { "chain": "Avalanche", "address": "0x94b75331ae8d42c1b61065089b7d48fe14aa73b7", "role": "Universal Router" }, { "chain": "Avalanche", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "World Chain", "address": "0xb1860d529182ac3bc1f51fa2abd56662b7d13f33", "role": "PoolManager" }, { "chain": "World Chain", "address": "0x7da419153bd420b689f312363756d76836aeace4", "role": "PositionDescriptor" }, { "chain": "World Chain", "address": "0xc585e0f504613b5fbf874f21af14c65260fb41fa", "role": "PositionManager" }, { "chain": "World Chain", "address": "0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0", "role": "Quoter" }, { "chain": "World Chain", "address": "0x51d394718bc09297262e368c1a481217fdeb71eb", "role": "StateView" }, { "chain": "World Chain", "address": "0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743", "role": "Universal Router" }, { "chain": "World Chain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "X Layer", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Blast", "address": "0x1631559198a9e474033433b2958dabc135ab6446", "role": "PoolManager" }, { "chain": "Blast", "address": "0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97", "role": "PositionDescriptor" }, { "chain": "Blast", "address": "0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad", "role": "PositionManager" }, { "chain": "Blast", "address": "0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf", "role": "Quoter" }, { "chain": "Blast", "address": "0x12a88ae16f46dce4e8b15368008ab3380885df30", "role": "StateView" }, { "chain": "Blast", "address": "0xeabbcb3e8e415306207ef514f660a3f820025be3", "role": "Universal Router" }, { "chain": "Blast", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Tempo", "address": "0x33620f62c5b9b2086dd6b62f4a297a9f30347029", "role": "PoolManager" }, { "chain": "Tempo", "address": "0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77", "role": "PositionDescriptor" }, { "chain": "Tempo", "address": "0x3fc79444f8eacc1894775493ff3fa41f1e35ce11", "role": "PositionManager" }, { "chain": "Tempo", "address": "0x20e6487c371a2086f841ef453f85378223df4f4e", "role": "Quoter" }, { "chain": "Tempo", "address": "0x21b954fba3f5ddebe77ef2d47a3100c066908b2a", "role": "StateView" }, { "chain": "Tempo", "address": "0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91", "role": "Universal Router" }, { "chain": "Tempo", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ink", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Ink", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Ink", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Ink", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Ink", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Ink", "address": "0x112908dac86e20e7241b0927479ea3bf935d1fa0", "role": "Universal Router" }, { "chain": "Ink", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Zora", "address": "0x0575338e4c17006ae181b47900a84404247ca30f", "role": "PoolManager" }, { "chain": "Zora", "address": "0x7d64630bbb4993b5578dbd65e400961c9e68d55a", "role": "PositionDescriptor" }, { "chain": "Zora", "address": "0xf66c7b99e2040f0d9b326b3b7c152e9663543d63", "role": "PositionManager" }, { "chain": "Zora", "address": "0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6", "role": "Quoter" }, { "chain": "Zora", "address": "0x385785af07d63b50d0a0ea57c4ff89d06adf7328", "role": "StateView" }, { "chain": "Zora", "address": "0x3315ef7ca28db74abadc6c44570efdf06b04b020", "role": "Universal Router" }, { "chain": "Zora", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ethereum", "address": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "role": "UNI governance token" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x1a9C8182C09F50C8318d769245beA52c32BE35BC (PoolManager owner (Timelock, 2-day minimum delay)) - https://defipunkd.com/address/1/0x408ED6354d4973f66138C91495F2f2FCbd8724C3 (GovernorBravo proxy (admin of the Timelock)) - https://defipunkd.com/address/1/0x3e51b68a157b573303155300a6593224f009990a (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497D0Cd94564c118C661384 (Uniswap DAO Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497d0Cd94564c118039df83 (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503475d9f9244252322473c9Cd (Uniswap Governance Timelock) - https://defipunkd.com/address/8453/0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9 (Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/10/0xa1dD330d602c32622AA270Ea73d078B803Cb3518 (Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/81457/0x2339C0d23b60739B3E5ABF201F05903D24A26C77 (Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - Binance: 0x341c1511141022cf8eE20824Ae0fFA3491F1302b (chain not supported by the read API) - https://defipunkd.com/address/43114/0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc (Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint) - https://defipunkd.com/address/1/0x000000000004444c5dc75cB358380D2e3dE08A90 (PoolManager) - https://defipunkd.com/address/1/0xd1428ba554f4c8450b763a0b2040a4935c63f06c (PositionDescriptor) - https://defipunkd.com/address/1/0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e (PositionManager) - https://defipunkd.com/address/1/0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203 (Quoter) - https://defipunkd.com/address/1/0x7ffe42c4a5deea5b0fec41c94c136cf115597227 (StateView) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (Universal Router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/42161/0x360e68faccca8ca495c1b759fd9eee466db9fb32 (PoolManager) - https://defipunkd.com/address/42161/0xe2023f3fa515cf070e07fd9d51c1d236e07843f4 (PositionDescriptor) - https://defipunkd.com/address/42161/0xd88f38f930b7952f2db2432cb002e7abbf3dd869 (PositionManager) - https://defipunkd.com/address/42161/0x3972c00f7ed4885e145823eb7c655375d275a1c5 (Quoter) - https://defipunkd.com/address/42161/0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (StateView) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (Universal Router) - https://defipunkd.com/address/42161/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/8453/0x498581ff718922c3f8e6a244956af099b2652b2b (PoolManager) - https://defipunkd.com/address/8453/0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5 (PositionDescriptor) - https://defipunkd.com/address/8453/0x7c5f5a4bbd8fd63184577525326123b519429bdc (PositionManager) - https://defipunkd.com/address/8453/0x0d5e0f971ed27fbff6c2837bf31316121532048d (Quoter) - https://defipunkd.com/address/8453/0xa3c0c9b65bad0b08107aa264b0f3db444b867a71 (StateView) - https://defipunkd.com/address/8453/0x6ff5693b99212da76ad316178a184ab56d299b43 (Universal Router) - https://defipunkd.com/address/8453/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/10/0x9a13f98cb987694c9f086b1f5eb990eea8264ec3 (PoolManager) - https://defipunkd.com/address/10/0xedd81496169c46df161b8513a52ffecaaaa66743 (PositionDescriptor) - https://defipunkd.com/address/10/0x3c3ea4b57a46241e54610e5f022e5c45859a1017 (PositionManager) - https://defipunkd.com/address/10/0x1f3131a13296fb91c90870043742c3cdbff1a8d7 (Quoter) - https://defipunkd.com/address/10/0xc18a3169788f4f75a170290584eca6395c75ecdb (StateView) - https://defipunkd.com/address/10/0x851116d9223fabed8e56c0e6b8ad0c31d98b3507 (Universal Router) - https://defipunkd.com/address/10/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/137/0x67366782805870060151383f4bbff9dab53e5cd6 (PoolManager) - https://defipunkd.com/address/137/0x0892771f0c1b78ad6013d6e5536007e1c16e6794 (PositionDescriptor) - https://defipunkd.com/address/137/0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9 (PositionManager) - https://defipunkd.com/address/137/0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9 (Quoter) - https://defipunkd.com/address/137/0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a (StateView) - https://defipunkd.com/address/137/0x1095692a6237d83c6a72f3f5efedb9a670c49223 (Universal Router) - https://defipunkd.com/address/137/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000004 (PoolManager) - https://defipunkd.com/address/130/0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722 (PositionDescriptor) - https://defipunkd.com/address/130/0x4529a01c7a0410167c5740c487a8de60232617bf (PositionManager) - https://defipunkd.com/address/130/0x333e3c607b141b18ff6de9f258db6e77fe7491e0 (Quoter) - https://defipunkd.com/address/130/0x86e8631a016f9068c3f085faf484ee3f5fdee8f2 (StateView) - https://defipunkd.com/address/130/0xef740bf23acae26f6492b10de645d6b98dc8eaf3 (Universal Router) - https://defipunkd.com/address/130/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Monad: 0x188d586ddcf52439676ca21a244753fa19f9ea8e (chain not supported by the read API) - Monad: 0x5770d2914355a6d0a39a70aeea9bcce55df4201b (chain not supported by the read API) - Monad: 0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016 (chain not supported by the read API) - Monad: 0xa222dd357a9076d1091ed6aa2e16c9742dd26891 (chain not supported by the read API) - Monad: 0x77395f3b2e73ae90843717371294fa97cc419d64 (chain not supported by the read API) - Monad: 0x0d97dc33264bfc1c226207428a79b26757fb9dc3 (chain not supported by the read API) - Monad: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Binance: 0x28e2ea090877bf75740558f6bfb36a5ffee9e9df (chain not supported by the read API) - Binance: 0xf0432f360703ec3d33931a8356a75a77d8d380e1 (chain not supported by the read API) - Binance: 0x7a4a5c919ae2541aed11041a1aeee68f1287f95b (chain not supported by the read API) - Binance: 0x9f75dd27d6664c475b90e105573e550ff69437b0 (chain not supported by the read API) - Binance: 0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4 (chain not supported by the read API) - Binance: 0x1906c1d672b88cd1b9ac7593301ca990f94eae07 (chain not supported by the read API) - Binance: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Soneium: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Soneium: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Soneium: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Soneium: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Soneium: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Soneium: 0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df (chain not supported by the read API) - Soneium: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/43114/0x06380c0e0912312b5150364b9dc4542ba0dbbc85 (PoolManager) - https://defipunkd.com/address/43114/0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9 (PositionDescriptor) - https://defipunkd.com/address/43114/0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd (PositionManager) - https://defipunkd.com/address/43114/0xbe40675bb704506a3c2ccfb762dcfd1e979845c2 (Quoter) - https://defipunkd.com/address/43114/0xc3c9e198c735a4b97e3e683f391ccbdd60b69286 (StateView) - https://defipunkd.com/address/43114/0x94b75331ae8d42c1b61065089b7d48fe14aa73b7 (Universal Router) - https://defipunkd.com/address/43114/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - World Chain: 0xb1860d529182ac3bc1f51fa2abd56662b7d13f33 (chain not supported by the read API) - World Chain: 0x7da419153bd420b689f312363756d76836aeace4 (chain not supported by the read API) - World Chain: 0xc585e0f504613b5fbf874f21af14c65260fb41fa (chain not supported by the read API) - World Chain: 0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0 (chain not supported by the read API) - World Chain: 0x51d394718bc09297262e368c1a481217fdeb71eb (chain not supported by the read API) - World Chain: 0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743 (chain not supported by the read API) - World Chain: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - X Layer: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - https://defipunkd.com/address/81457/0x1631559198a9e474033433b2958dabc135ab6446 (PoolManager) - https://defipunkd.com/address/81457/0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97 (PositionDescriptor) - https://defipunkd.com/address/81457/0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad (PositionManager) - https://defipunkd.com/address/81457/0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf (Quoter) - https://defipunkd.com/address/81457/0x12a88ae16f46dce4e8b15368008ab3380885df30 (StateView) - https://defipunkd.com/address/81457/0xeabbcb3e8e415306207ef514f660a3f820025be3 (Universal Router) - https://defipunkd.com/address/81457/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Tempo: 0x33620f62c5b9b2086dd6b62f4a297a9f30347029 (chain not supported by the read API) - Tempo: 0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77 (chain not supported by the read API) - Tempo: 0x3fc79444f8eacc1894775493ff3fa41f1e35ce11 (chain not supported by the read API) - Tempo: 0x20e6487c371a2086f841ef453f85378223df4f4e (chain not supported by the read API) - Tempo: 0x21b954fba3f5ddebe77ef2d47a3100c066908b2a (chain not supported by the read API) - Tempo: 0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91 (chain not supported by the read API) - Tempo: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Ink: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Ink: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Ink: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Ink: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Ink: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Ink: 0x112908dac86e20e7241b0927479ea3bf935d1fa0 (chain not supported by the read API) - Ink: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Zora: 0x0575338e4c17006ae181b47900a84404247ca30f (chain not supported by the read API) - Zora: 0x7d64630bbb4993b5578dbd65e400961c9e68d55a (chain not supported by the read API) - Zora: 0xf66c7b99e2040f0d9b326b3b7c152e9663543d63 (chain not supported by the read API) - Zora: 0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6 (chain not supported by the read API) - Zora: 0x385785af07d63b50d0a0ea57c4ff89d06adf7328 (chain not supported by the read API) - Zora: 0x3315ef7ca28db74abadc6c44570efdf06b04b020 (chain not supported by the read API) - Zora: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/1/0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 (UNI governance token) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: CONTROL Evaluate who can change the protocol's rules, how fast, and how broadly. (Step 0 capability probe and the off-chain-only fallback live in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]) - **C1.** For each address you assess: who is the contract owner / admin / pendingAdmin / governor — read these via the block explorer's "Read Contract" tab OR `https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=owner` (BARE method names: `&method=owner`, `&method=admin`, `&method=pendingOwner`, `&method=governor`). For Safes use `/api/safe/owners?chainId=<id>&address=0x...`. When a protocol has multiple major versions deployed (v2/v3/v4), perform C1 reads on the NEWEST deployment separately — newer deployments often have weaker control surfaces than the legacy core. - **C2.** Upgrade mechanism: transparent proxy / UUPS / Beacon / Diamond / immutable. Identify the proxy admin address. Check upgradeability of GOVERNANCE contracts too — a Governor / Aragon Voting / OZ Governor is often itself a proxy whose admin is the Timelock. Asymmetry: when fund-holding cores are immutable AND governance has no admin path that reaches them, an upgradable Governor/Timelock is T3-only and must NOT drag the verdict below green on that basis alone (see grade rules and the "immutable cores" caveat). Only call upgradability "mixed" if you can name a concrete function on the upgradable surface that reaches T1 or T2 on user funds. - **C3.** EXECUTION PATH (enumerate every stage, in order, with delays in seconds). The operative path is usually a chain (voting → scheduler → timelock → executor; or governor → queue → execute; or Aragon Voting → DualGovernance → EmergencyProtectedTimelock → AdminExecutor). For each stage, record (a) the contract address, (b) the delay constant name + value in seconds, (c) the URL you read it from (block-explorer Read Contract OR `/api/contract/read?...&method=MIN_DELAY&block=<n>`). Do NOT stop at the first timelock-shaped contract — if its admin is itself called by another contract, keep walking. The grading delay is the SUM OF DELAYS ON THE UNCONTESTED FAST PATH (shortest time a proposal with no opposition can go from submission to executable). Dynamic / contested extensions (veto signaling, rage quit, escrow delay) are modifiers, not the basis — note them separately. - **C4.** Enumerate EVERY multisig with reachable control — main proxy admin, emergency activation, emergency execution, reseal / pause, gate-seal committees, tiebreaker, per-module admins. For each Safe, fetch threshold + owners + version via `/api/safe/owners?chainId=<id>&address=0x...` (response includes raw eth_call data, so the URL is citable evidence). Enumerate ops/council/incentives multisigs even when off the upgrade path — record their scope so a reader can see they are NOT on the upgrade path. For each: (a) address, (b) threshold / total signers, (c) signer identities classified as insider (team, paid auditors under ongoing engagement, mandated service providers) vs non-insider (independent community members, unaffiliated researchers), (d) the specific power held (upgrade, pause, parameter, etc.). - **C5.** On-chain governance: Governor / GovernorBravo / OZ Governor / Aragon Voting with token-weighted voting? Record proposal threshold, voting period, quorum, and the timelock delay between queue and execute. Every numeric constant must come from a Read Contract call you can link to, or be in unknowns[] with the C-code. If votingDelay / votingPeriod are denominated in BLOCKS, convert to seconds at the chain's CURRENT block time (Ethereum mainnet ≈ 12s post-Merge, not the 15s in older Compound/Bravo deployments) — cite both block count and converted seconds. - **C6.** EMERGENCY POWERS: separate emergency-pause / guardian role with a different time cap or different actor than the main upgrade authority? Record it explicitly. - **C7.** POWER TIER (blast radius). For each privileged path in C3–C6, classify the WORST thing that path can do, choosing the highest applicable tier. Cite the specific function name and any on-chain bound — tier claims without a named function are unsupported. - **T1 — FUND-CRITICAL**: replace implementation of contracts holding user funds; change AMM math / accounting / collateral logic; mint unbacked debt or shares; pause withdrawals; drain user-fund treasury; change oracle to attacker-controlled source; replace upgrade admin with EOA. - **T2 — ECONOMICALLY MATERIAL**: change fee parameters within bounded ranges; redirect protocol fees; add/remove markets / collateral types; bounded inflation or token mint within hard-capped schedule; spend protocol-owned (non-user) treasury. - **T3 — GOVERNANCE-INTERNAL**: change voting rules, quorum, voting period, proposal threshold; upgrade the Governor itself; rotate Timelock admin; mint governance tokens within a capped annual schedule. - **T4 — OPERATIONAL**: incentives distribution, grants, ENS / frontend canonicalization, deployment coordination, periphery router deprecation. The grade is set by the HIGHEST tier reachable on the uncontested fast path, not the median. State the tier and the binding function in the verdict. ### Read Contract discipline (applies to C3, C4, C5) Every numeric constant cited (timelock delays, voting periods, multisig thresholds, quorum percentages) must come from EITHER (a) a block-explorer Read Contract URL, OR (b) a DeFiPunkd `/api/contract/read` or `/api/safe/owners` URL (preferred with `&block=<n>` for content-addressed evidence), OR (c) an unknowns[] entry with the C-code. Docs / blog posts are corroboration only — they cannot be the sole citation for a value that is also readable on-chain. ### Off-chain-only substitute hierarchy (when grading_basis="off-chain-only" — see preamble Rule 16) When on-chain reads were genuinely unreachable this run, eligible off-chain substitutes in priority order: 1. Linked audit PDFs (admin roles, multisig members, timelock delays usually enumerated). 2. Governance forum posts that quote constants from a successful on-chain proposal (cite post URL + linked execution-tx URL). 3. Official protocol docs pages with named addresses and roles (must be on a domain owned by the protocol). 4. GitHub README / SECURITY.md / governance/*.md at a pinned commit SHA. Forbidden substitutes: third-party blog posts, X / Twitter threads, search-result snippets, model memory. Required degradation: any C-code citing a numeric constant from docs/forum/audit prose ONLY must also carry an `unknowns[]` entry with `-offchain` suffix noting "value not re-read on-chain in this run; corroboration only". ### Grade rules (apply the timelock bar conditional on the highest C7 tier reachable on the fast path) Security Council standard (used below): a multisig qualifies as "Security Council" only if ALL of: ≥7 signers, ≥51% threshold, ≥50% non-insider signers, every signer publicly announced. Failing any criterion = NOT a Security Council, regardless of signer reputation. - **green**: highest reachable tier is T3 or T4 regardless of timelock; OR T2 reachable with uncontested-fast-path delay ≥7 days; OR T1 reachable only via immutable contracts (T1 is unreachable); OR T1 reachable with uncontested-fast-path delay ≥7 days combined with a Security Council multisig; OR T1 reachable with uncontested-fast-path delay ≥7 days through active on-chain governance with broad token distribution. - **orange**: T2 reachable with uncontested-fast-path delay >0 but <7 days; OR T1 reachable with uncontested-fast-path delay >0 but <7 days; OR a multisig failing one or more Security Council criteria sits on a T1/T2 path; OR unclear upgrade authority on a T1/T2 path; OR governance with very short timelock or low quorum on a T1/T2 path. - **red**: T1 reachable with no timelock by a single EOA or 2-of-3 multisig; OR a T1 upgrade admin that is not a smart contract you can audit. - **unknown**: completed the checklist but still cannot determine the upgrade authority OR cannot classify the highest tier reachable on the main contracts. Tiering caveats: - "Bounded" must be enforced ON-CHAIN to count as T2. A function that sets fees with no upper-bound check is T1 — cite the bound check. - Recurring T2 economic extraction (e.g. fee redirect with no rate limit) approaches T1 over time. A single proposal that can permanently redirect all future revenue is T1. - T3 assumes the governance contract cannot itself authorize a T1/T2 action without going through the same timelock. If governance can self-upgrade to bypass the timelock, T3 collapses into T1. - Do not downgrade tier by hand-waving ("realistically governance would never…"). Tier on what the contract permits, not what feels likely. Notes: - **Dynamic / dual-governance timelocks** (Lido, Compound escrow veto): the rubric grades on the uncontested path because that is the path most upgrades take. A dynamic extension that fires only under stake-weighted opposition is a real protection — name it in the green steel-man, but it does not lift an orange fast path into green; state the tension in the verdict. - **Immutable cores with upgradable governance** (Uniswap-style): if fund-holding contracts are immutable and have no admin-reachable function moving / freezing / re-routing user funds, the highest reachable tier on the upgrade path is T3 — green regardless of timelock. Don't grade this orange just because the Governor is a proxy — that's a C2 fact, not a downgrade. Downgrade only applies if you can cite a concrete function on the upgradable surface that reaches T1 or T2 (privileged hook, upgradable factory controlling fund-routing, fee-switch redirecting protocol revenue without bound). - **The 7-day bar** reflects the exit-window standard — users need notice after a queued upgrade to withdraw if they disagree. The ability-to-exit slice grades the exit side; this slice grades the delay side; both must hold for users to actually benefit from the delay. --- ### Slice: ABILITY-TO-EXIT Evaluate whether users can withdraw their funds on their own terms, even under adversarial admin conditions. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - E1. Enumerate every user-facing exit function in the main contracts: withdraw, redeem, burn, requestWithdrawal, claim, exit, etc. List them by name. Do NOT treat the contract as a monolith. - E2. For EACH exit function in E1: identify its access modifiers and any pause guards (e.g. _checkResumed, whenNotPaused, onlyRole). Functions that gate REQUEST PLACEMENT often differ from functions that CLAIM FINALIZED FUNDS — check both separately. - E3. For each pause guard: identify the role holder (which address holds PAUSE_ROLE / GUARDIAN / etc.) and the maximum pause duration. Specifically check whether PAUSE_INFINITELY (or equivalent uncapped pause) is callable, and which actor can call it (single multisig vs governance vote). For role-holder reads use https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=hasRole&args=0x...,0x... or &method=getRoleAdmin&args=0x.... For "is currently paused" checks use &method=paused or &method=isPaused&args=<resume-code>. Use the BARE method name (no parens). Cite the URL with &block=<n> in evidence[]. - E4. EMERGENCY vs GOVERNANCE pause distinction: many protocols have a fast-acting emergency pause capped at N days and a slow governance pause that can be indefinite. Record both paths separately if present, with their time caps and actor classes. - E5. Queued redemption: documented maximum queue duration, daily withdrawal caps, whether the queue itself is pausable. - E6. Forced-exit / escape-hatch / permissionless emergency-exit mechanism for adversarial-admin scenarios. - E7. Frontend dependency: confirm exit functions are directly callable on-chain (e.g. via Etherscan write tab or a generic wallet) without the project's frontend. Then write the steel-man section per Hard Rule 11. Common red-vs-orange tension on this slice: indefinite pause exists (suggests red) BUT the realistic emergency path is time-capped AND claims of already-finalized exits are not pause-gated (suggests orange). Resolve this by stating who can do what for how long, not by stopping at the worst-case sentence. Grade rules: - green = permissionless exit; pause is either absent, narrowly scoped to clearly-described emergencies with auto-expiry, or capped at ≤7 days; no frontend dependency for exit; claims of already-finalized exits are not pause-gated under any path. - orange = pausable with broad scope OR indefinite pause is reachable only through governance vote (not unilateral admin action), OR queued redemption with documented max > 7 days, OR claims-of-finalized are exempt but new-request placement can be paused indefinitely by governance. - red = exit requires admin signature, OR ANY actor (including governance) can pause CLAIMS of finalized exits indefinitely, OR there is no on-chain exit function at all (purely custodial), OR pause is held by a single EOA / 2-of-3 multisig with no time cap. - unknown = checklist incomplete after checking the sources above. --- ### Slice: AUTONOMY Evaluate this protocol's autonomy: can a failure of anything outside its own contracts cause theft or loss of user principal, loss of unclaimed yield, or materially change the protocol's expected performance? "Autonomy" is not "has zero external touchpoints" — it is "external failures are either survivable or recoverable without user loss". This slice adapts DefiScan v1's Autonomy dimension; dependencies are one of several criteria, not the whole frame. GUARDRAILS (read before grading): - Category alone (Liquid Staking, Bridge, RWA Lending, Restaking, …) does NOT force a grade. A category is a hint about where to look; the grade must come from the concrete A1–A9 findings below. - Base-chain consensus (Ethereum PoS, the chain's validator set, the canonical Deposit Contract at 0x00000000219ab540356cBB839Cbe05303d7705Fa) is the SUBSTRATE, not a dependency, for any protocol deployed on that chain. Do not list "depends on Ethereum" as a finding. - Oracles or other integrations used by DOWNSTREAM protocols that happen to read this protocol's token (e.g. Chainlink stETH/USD consumed by Aave) are NOT this protocol's dependencies. Count only what THIS protocol's contracts call or trust on-chain. If a feed or contract appears in the protocol's docs only as reference material for third-party integrators, EXCLUDE IT ENTIRELY — do not log it as a finding even with a "peripheral" or "referenced only" caveat. - "Upgradeable admin can change things" belongs to the CONTROL slice; only count it here when the upgrade surface lets governance silently swap an external dependency (see A9). - Underlying-asset risk in opt-in, isolated markets is NOT autonomy-red on its own. When a protocol wraps third-party yield-bearing assets (LSTs, LRTs, ERC-4626 vaults, lending receipts, restaked tokens) into per-market silos that users explicitly choose, a failure of one underlying does NOT propagate to other markets and is risk the user opted into per-market. Record it under A4 with depth and propagation scope, but do not let it alone drive a red verdict — red requires an external dependency that cross-cuts the protocol or that the user did not opt into at deposit time. A failure mode that is "if the LRT you deposited is hacked, your principal in that LRT-backed market is impaired" is the underlying's autonomy story, not this protocol's; grade it on whether THIS protocol introduces additional dependencies on top. - Sub-module enumeration is mandatory before grading. If the protocol ships distinct product lines or modules (e.g., a v2 core AMM plus a newer perps/funding-rate module, a lending pool plus a separate vault layer, an L1 core plus a cross-chain extension), enumerate each in findings and grade against the WORST module weighted by its share of TVS or its blast radius. A green core does not rescue an orange/red sub-module; conversely, a small red sub-module with capped TVS may bound the overall grade to orange. Name each module by its on-chain factory or router address. If you do not know whether a module exists, that is an unknowns[] entry, not silence. EXPLICIT TVS WEIGHTING: in the verdict, state each module's approximate share of total protocol TVS (use "~X%" if exact figures unavailable; check DeFiLlama or block-explorer balances on the module's main contract) and how that share informs the weighted grade. Format: "Module A holds ~X% of TVS (grade: <g>); Module B holds ~Y% (grade: <g>); weighted overall = <grade> because <reason>." If a red sub-module holds <5% of total TVS and is capped, the overall grade may be orange; if it holds >25%, the overall grade is red. Do not let qualitative reasoning substitute for the percentages — write the numbers. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. External contract calls. Enumerate every external contract the core contracts call or read from (oracles, price feeds, AMM pools, lending pools, staking/deposit contracts, yield wrappers). For each, identify the address, the provider, and what user-facing function of this protocol would break or mis-price if that external contract paused, mis-reported, or behaved adversarially. Grep for "oracle", "aggregator", "getPrice", "latestAnswer", "chainlink", "pyth", "redstone" as a starting point. To verify an oracle is live and what it currently reports, hit https://defipunkd.com/api/contract/read?chainId=<id>&address=<oracle>&method=latestAnswer (or &method=latestRoundData, &method=getPrice, &method=description; use the BARE method name without parens) and cite the URL — the response includes blockNumber/blockHash and rawReturnData, which is stronger evidence than a docs page about which feed "should" be used. - A2. Off-chain actor committees reporting INTO the protocol. Oracle committees, guardian multisigs, DAO-selected validator sets acting as protocol reporters, exit-bus signers, fraud-proof challengers. For each, record committee size, quorum, who picks the members, and what mis-reporting could do (mint, burn, finalize withdrawal, freeze). Distinguish this from governance admins (control slice). NOTE ON STAKING PROTOCOLS: validator slashing and node-operator misbehavior are properties of the base-chain substrate, NOT external dependencies, when the operator set is diversified enough that a coordinated failure caps at <5% principal loss. Count validator/operator risk under A2 ONLY if the operator set is small, non-diversified, or lacks bonding / slashing-insurance / diversification mitigations. A curated set of 30+ independent operators with documented diversification falls under the mitigated path; a 3-operator LST does not. Do not cite the protocol's own risk disclosure as evidence that operator failure = principal loss unless you also check the diversification and bond mitigations. - A3. Bridge / cross-chain messaging dependencies. Only count bridges that carry material TVL or are required for a core user flow. For each, name the bridge operator (canonical L1↔L2, LayerZero, Wormhole, Axelar, custom multisig), the trust model (canonical, optimistic, light-client, guardian set), and what fraction of TVL or users ride on it. "wstETH exists on 15 chains" is not a finding unless material TVL sits there. Before listing any non-primary chain deployment as a dependency, verify it is still operational as of analysis_date — retired or sunset deployments (e.g., Lido-on-Terra, Lido-on-Solana) belong in unknowns[] or should be omitted, never cited as a current dependency. - A4. Nested collateral / restaking chains. For restaking / LRT / receipt-of-receipt designs: record the depth of the collateral chain, every actor with slashing or freezing power at each level, and whether a failure N levels deep propagates to user principal here. - A5. Fork lineage (silent check). If DeFiLlama's forkedFrom is non-empty, record it as one finding and move on. If empty, do NOT add a placeholder finding; it adds noise. - A6. Fallback mechanisms and circuit breakers. What catches an external failure? Sanity-check contracts on oracle reports, rebase bounds, pause paths triggered by bad prices, second-opinion oracles, max-per-block throughput caps, withdrawal queues that absorb bad reports. Record which A1–A4 risks are mitigated by which fallback, and which are unmitigated. For EACH fallback you cite, state its activation status explicitly: (i) LIVE and enforcing on-chain today, (ii) DEPLOYED but not yet wired / activated (e.g., interface exists but the address is zero or the role is unassigned), or (iii) DOCUMENTED / PROPOSED only (forum post, LIP draft, audit pending). Only (i) counts as mitigation for the grade. A fallback in state (ii) or (iii) should be noted but must not reduce the risk in your steel-man or verdict. If you cannot determine activation status, add an unknowns[] entry rather than assume it is live. - A7. Sequencer / L1-liveness dependency BEYOND the base-chain substrate. SCOPE — sequencer risk only counts here when the protocol IS its own L2/L3 appchain or app-rollup, where the sequencer is part of the protocol's own stack and a freeze is a protocol-level outage. A protocol permissionlessly deployed on a third-party L2 inherits that L2's sequencer as substrate, not an A7 dependency. Record the sequencer/DA trust model when A7 applies. - A8. Keeper / relayer / off-chain bot liveness. Protocols that need permissionless-but-necessary off-chain actors (liquidation bots, auto-compounders, deposit relayers, intent solvers). Record whether the role is permissionless, what degrades if nobody runs it (yield paused, bad debt accumulates, positions go stale), and whether the failure mode is graceful or catastrophic. - A9. Governance-mutable dependency surface. Can an admin or DAO action silently INTRODUCE a NEW EXTERNAL dependency — swap the oracle address to a different provider, register a new staking module that calls an untrusted contract, add a new bridge, route SY through a new external vault — without an exit window for users? Check the upgrade / router / module-registry contracts. Answer: which EXTERNAL dependencies are governance-mutable, who holds that power, and whether there is a timelock or exit window. SCOPE LIMIT — read carefully: A9 is about the *external dependency surface*, not the upgrade surface in general. "The proxyAdmin / EOA can upgrade the router implementation to arbitrary bytecode" is a CONTROL-slice finding (admin can rug), NOT an autonomy-A9 finding. A9 fires only when the upgrade specifically swaps out or adds a contract that THIS protocol calls or trusts (e.g., changing the oracle address from Chainlink to a malicious feed, registering a new SY adapter that points to a third-party vault, redirecting a bridge endpoint). If the only finding is "admin can change implementation," do not log it under A9 and do not let it drive the autonomy grade — note it under control instead. The autonomy-relevant version of the same upgrade key is "admin can swap [specific external address X] without timelock"; that requires identifying the specific external dependency that becomes mutable. STEEL-MAN (per Hard Rule 13): write one-sentence strongest arguments for red, orange, and green using the A1–A9 findings. IMPACTED TVS ESTIMATE: the headline MUST include a rough impacted-TVS figure — the fraction of protocol TVS that could be lost or frozen if the worst-unmitigated dependency you identified failed. Use "~X%" if exact numbers are unavailable, "<1%" for de minimis, "unclear" only if A1–A9 left the question genuinely open (in which case grade=unknown is usually correct). Do NOT substitute qualitative phrases like "significant" — give a number or bracket. GRADE ANCHORS (mapped to DefiScan v1 stages): - green = Stage 2 equivalent. Failure of any external dependency cannot cause loss of user principal or unclaimed yield. Either there are no material external dependencies, or every critical one has a documented fallback (A6) that keeps users whole. Governance cannot silently introduce new dependencies without an exit window (A9). Impacted TVS under any single-dependency failure: effectively 0. - orange = Stage 1 equivalent. Failure of some external dependency can cause loss of unclaimed yield, or can materially change expected performance (pause withdrawals, freeze positions, degrade price quality), but cannot cause loss of principal. Committee-based oracles with sanity checks, canonical-only bridges, fallback paths that exist but are incomplete, or governance-mutable dependencies protected by a ≥7-day timelock. Impacted TVS is bounded and recoverable. - red = Stage 0 equivalent. Failure of an external dependency CAN cause theft or loss of principal. Examples: single-provider oracle with no sanity check or fallback, material TVL on a non-canonical bridge with a guardian multisig, governance can hot-swap oracles or add staking modules with no timelock or exit window, unmitigated keeper-liveness dependency where positions become insolvent if bots stop. Impacted TVS is material. - unknown = checklist incomplete after inspecting source + verified contracts. Prefer unknown over guessing when A1/A6 could not be reconstructed. RESERVE unknown for cases where the CORE ARCHITECTURE itself is unverifiable — not for cases where you merely cannot enumerate every per-market dependency in a multi-market protocol. If the core router/factory/oracle architecture is verifiable on-chain and you can determine whether the core requires external dependencies, grade the architecture even when an exhaustive per-market external-dependency census is infeasible. Acknowledge the per-market gap in unknowns[] but still issue a grade. Refusing to grade a multi-market protocol because you cannot list every SY/vault/market is over-use of unknown; grade the architecture and say so. PROMPT-META CHECK (per Hard Rule 17): before finalizing, verify the verdict cites concrete contract addresses, docs, or code — not the rubric itself. If your verdict says "the protocol belongs to a category the rubric marks red", rewrite it with the A1–A9 finding that actually justifies the grade, or drop to grade=unknown. --- ### Slice: OPEN-ACCESS Evaluate who is allowed to use the protocol and whether any of that permission is granted off-chain. Scope: this slice is about ADMISSION — who can enter, exit, or transact. Operator LIVENESS (what breaks if keepers/oracles go offline) is assessed in the dependencies slice and is out of scope for the grade here. You may note operator dependencies as context, but do not let "the protocol halts if operator X disappears" drive the access grade on its own; that belongs in dependencies. Source verification / contract verification on block explorers is assessed in the verifiability slice and is out of scope here — do NOT let "contract is unverified" drive the access grade. Framing: the smart contracts are the access layer; frontends are UX. A permissionless contract is reachable by any client (SDK, third-party UI, aggregator, wallet integration). Frontend ToS, IP geo-blocking, and wallet screening are publisher policies on one specific client — they are reported as context but do NOT determine the grade. The grade hinges on (1) what the contract itself permits, and (2) whether the protocol is practically reachable without the official publisher's cooperation. Meta-check before finalizing: if your verdict cites phrases from this prompt as evidence ("the protocol meets the 'credible alternatives' condition", "this fits the 'documented fallback' rule"), redo the verdict. The prompt describes the rubric; evidence must come from the protocol. A verdict should cite what the protocol does, not what the rubric says. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. Whitelist / allowlist modifiers in user-facing entry points. Grep for "onlyWhitelisted", "onlyRole", "allowlist", "isAccredited", "isKYCed". Note which functions are gated and who can add/remove from the list. - A2. Off-chain operators in the admission path: keepers, sequencers, privileged relayers, oracle posters whose approval is required to admit a user action (not just to keep the protocol live). For each, identify whether the role is held by a single operator, a permissioned committee, or is permissionless. Enumerate per user-facing function class (deposit vs withdraw-request vs claim-finalized vs transfer) which ones require operator approval to be admitted, and which ones admit users unconditionally. A function whose placement is unconditional but whose downstream settlement depends on an operator is an admission-permissionless function — flag the liveness dependency as context and defer its grading weight to the dependencies slice. - A3. Frontend restrictions on the official interface — record as context, not as a grade lever. Distinguish: - A3-passive: boilerplate ToS clauses (sanctions attestation, restricted-territory self-certification, VPN-circumvention prohibition, "comply with applicable law" eligibility, age of majority). - A3-active: runtime enforcement — IP-based geo-blocking, wallet-address screening against a sanctions oracle (Chainalysis, TRM, Elliptic), KYC wall, rendering-blocking jurisdiction banner. Record findings under the correct tier. Quote ToS text or banner text in evidence[].shows. These findings populate the headline and rationale but do NOT move the grade by themselves; the grade is set by A1, A2, and the A3b path check below. - A3b. Independent access paths (the operative grade input). Enumerate paths that do not require the official publisher's cooperation: - Published SDK / library / CLI for direct contract interaction. - Third-party frontends operated by separate legal entities. - Wallet-integrated access (MetaMask Swaps, Safe apps, etc.). - DEX / lending / yield aggregators that route through the contracts. Record at least one concrete link per path that exists. The protocol does NOT have to self-document these — the test is existence, not UX cost. An A3b-i redistribution of the official UI bound by the same ToS does NOT count as an independent path. - A4. Sanctions / compliance tooling at the contract level: does the protocol check addresses against OFAC lists or similar on-chain blocklists in the contract itself? (Frontend-only screening belongs in A3.) - A5. Differentiate read access vs write access: many protocols are read-permissionless (anyone can view state) but write-gated (only certain addresses can deposit/borrow). Record both. - A6. ToS / Legal links: locate them on the website and produce a VERBATIM quote of any jurisdictional, sanctions, or eligibility clause in evidence[].shows. If you cannot extract the clause text verbatim (SPA render failure, paywall, dead link, etc.), do NOT paraphrase or infer from general knowledge — record the ToS URL in unknowns[] with the reason extraction failed. Assertions about ToS content without a verbatim quote will be downweighted by reviewers. Then write the steel-man section per Hard Rule 11. Grade rules (admission-focused; liveness concerns belong in dependencies; source verification belongs in verifiability): - green = no contract-level whitelist/KYC on user entry/exit; no operator approval required to admit a user action; AND at least one independent A3b path exists (published SDK, third-party frontend, wallet integration, or aggregator routing). Frontend ToS posture and A3-active enforcement on the official UI do NOT block green when contracts are permissionless and an independent path exists — they are reported as context. - orange = contracts admit users unconditionally, BUT the protocol is operationally captured by the official publisher: no published SDK, no third-party frontend, no wallet integration, no aggregator routing. The contract is theoretically open but practically reachable only through the official UI. Also applies when admission requires approval from a permissioned committee that is governance-managed with a documented replacement procedure. - red = contract-level whitelist / KYC on user entry/exit, OR admission of a core user action requires approval from a single privileged operator or a small committee with no documented replacement procedure, OR enforces an on-chain blocklist updatable by a single party. - unknown = checklist incomplete after checking the sources above. Default-grade guidance: when contracts are fully permissionless AND any A3b independent path exists, the default grade is green regardless of frontend ToS or A3-active enforcement on the official UI. Frontend geo-blocking, sanctions-oracle wallet screening, and ToS sanctions clauses are publisher policies on one client and are reported in findings/headline as context, not as grade levers. To grade orange on operational-capture grounds, the auditor must affirmatively show that ALL independent paths are absent or also gated. Guideline on committees: where admission depends on a multi-operator committee, the relevant axes are (a) set size, (b) whether replacement/rotation is governed on-chain, (c) whether the replacement procedure is publicly documented. A large set with on-chain governance replacement should not be graded as a single-party operator even if rotation is not instantaneous. A small set with informal replacement should be treated as a single-party operator. --- ### Slice: VERIFIABILITY Evaluate whether an outsider can independently confirm what the deployed code does. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - V1. For each address you assess: is the bytecode verified on the chain's block explorer? Record the "Contract Source Code Verified" indicator. https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... returns this as a top-level "verified" boolean plus "abiSource" ("etherscan" / "sourcify") and an inline ABI — useful when the explorer page is rate-limited. If the contract is a proxy, verify BOTH the proxy contract AND the current implementation contract. The same /api/contract/abi response auto-resolves proxies and includes a "proxy.implementation" address when present, so one call covers V1 + V6 in one shot. An explorer "Similar Match" on a well-known proxy pattern (Aragon AppProxyUpgradeable, ERC1967Proxy, OssifiableProxy, OZ TransparentUpgradeableProxy) is expected for that pattern and does NOT count as a verification gap on its own — what matters is that the implementation is independently verified. - V2. Source-to-repo correspondence: for each verified contract, attempt to find a matching commit in the linked GitHub repos. Record evidence[].commit on a match. Independent compile/bytecode-match is NOT required for green — a recognized public repo whose structure and file contents correspond to the explorer-visible source is sufficient. If you did not pin a commit SHA or run a bytecode diff, record that plainly in unknowns[] and proceed; it is a scope limit, not a downgrade signal. - V3. Audit coverage: for each URL in protocol.audit_links, open it and record: auditor name, audit date, the specific contracts / commit in scope. Flag audits that predate the current deployment by >6 months without a follow-up review. - V4. Auditor recognition: the following firms are broadly recognized in Solidity: Trail of Bits, Zellic, Spearbit, OpenZeppelin, ConsenSys Diligence, Certora (formal verification), Quantstamp, Halborn, Peckshield, Sigma Prime, ChainSecurity, Ackee Blockchain, MixBytes, Statemind. Unknown firms are orange-at-best for any green-grade claim. Name the firm explicitly in evidence[]. - V5. Post-audit drift: compare the most recent in-scope audit(s) against the currently-deployed source, weighted by what each contract does and by what the changes actually contain. SCOPE — drift only downgrades the grade when ALL of the following hold: (i) the drifting contract is fund-custody / settlement / accounting-critical (NOT a peripheral router, lens, quoter, or pure-view contract that holds no balances); (ii) the changes are material — new functions, modified access control, modified accounting, modified fund flow — and not refactors / struct relocations / import reorgs / build or CI fixes / formatting; (iii) no later audit, fix-audit, or differential audit from a recognized firm covers the changed files (audits often pin a pre-fix commit while a follow-up reviews the delta — match by file scope, not by commit-hash equality). When you cite drift as a downgrade reason, name the specific behavior change (function added, role granted, accounting formula altered) — "N commits ahead" or "+X/-Y LOC" alone is not evidence of material drift. If you have not sampled the diff content (e.g. via the GitHub compare view or the top commits in the window), record drift as an unknowns[] entry rather than auto-downgrading; commit-count and LOC are starting signals, not findings. - V6. Implementation vs proxy: a verified proxy with an unverified implementation is effectively unverified. State whether the implementation is verified separately. EVIDENCE DISCIPLINE (read before writing findings[]): - Do not assert a specific deploy-commit SHA, bytecode equivalence, or "identical to audited commit" unless you actually fetched the artifact that shows it (e.g., a deployed-addresses JSON you opened, an explorer page you read). Inferred or plausible matches belong in unknowns[], never in findings[] or evidence[]. - Evidence[] entries must correspond to pages/files you actually retrieved this run. A URL you did not open is not evidence. Then write the steel-man section per Hard Rule 11. Grade rules: - green = deployed bytecode verified on the explorer (proxy AND implementation if proxied; "Similar Match" on a standard proxy pattern is fine per V1), a public source repo exists whose contents correspond to the explorer-visible source, AND ≥1 audit from a recognized firm covering the currently-deployed contracts (≤6 months of drift OR drift was re-audited). A missing local compile-match is not a downgrade — record it in unknowns[] and still grade green if the other conditions hold. - orange = verified but with visible drift from the public repo, OR audit scope is stale relative to deployment, OR only minor / unknown-firm audits exist, OR only some of the main contracts are verified, OR proxy verified but implementation only partially verified. - red = unverified bytecode (or verified proxy with unverified implementation), OR no audit in protocol.audit_links, OR no public repo. - unknown = reserved for when the protocol's verifiability posture genuinely cannot be assessed (e.g., explorer and repo both inaccessible for this protocol). Do NOT use unknown merely because you, the analyst, could not run a particular check such as a bytecode diff — that goes in unknowns[] while the grade is still assigned from the evidence you do have. --- ### JSON output contract Return exactly one JSON array inside a single ```json fenced block. The array MUST contain exactly five objects, one per risk slice, in this exact order: "control", "ability-to-exit", "autonomy", "open-access", "verifiability". Do not include the discovery slice. Each object has the same shape as a normal slice submission: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "<one of: control | ability-to-exit | autonomy | open-access | verifiability>", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - Produce one complete object for each of these slices only: control, ability-to-exit, autonomy, open-access, verifiability. - Reuse the same model, chat_url, snapshot_generated_at, prompt_version, analysis_date, and slug values across all five objects. - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches that object's slice checklist prefix verbatim (C1, E2, AU3, A3b, V4a, …); unknowns[] entries are checklist-coded ("C3: …"). - Wrap the array in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.
- All core contracts verified on Etherscan across multiple chains, backed by nine independent audits from top-tier firms including OpenZeppelin, Trail of Bits, Spearbit, and Certora
Verdict
Choosing green because the core PoolManager (where user funds reside) is verified and non-proxied, all key contracts are verified on Etherscan across chains, the public repos correspond to verified source per official docs, and the audit coverage from recognized firms (nine audits, six firms) far exceeds the threshold for green. The PositionDescriptor proxy gap is minor — it is a metadata/display contract, not a funds-holding contract — and the missing commit SHA is a scope limit recorded in unknowns[], not an evidence gap.
Steelman argument
Steelman argument Core contracts are verified on Etherscan with no proxy on the PoolManager, a public source repo exists with matching contract names linked in official docs, and nine independent audits from six firms (four recognized) were conducted specifically for the launch version.Evidence (6)
- V1
- The Ethereum PoolManager (0x000000000004444c5dc75cB358380D2e3dE08A90) is verified on Etherscan with abiSource 'etherscan', verified=true, and proxy=null (not a proxy). Etherscan's own page confirms 'Contract: Verified'. The PositionDescriptor (0xd1428ba554f4c8450b763a0b2040a4935c63f06c) is a verified TransparentUpgradeableProxy. The Universal Router (0x66a9893cc07d91d95644aedd05d03f95e1dba8af) is also verified on Etherscan with visible source code.
- V2
- The official Uniswap docs deployment page (docs.uniswap.org/contracts/v4/deployments) links each deployed contract to its corresponding GitHub source file in Uniswap/v4-core, Uniswap/v4-periphery, and Uniswap/universal-router repos. Contract names (PoolManager, PositionManager, V4Quoter, StateView, UniversalRouter) match between the deployment docs and the verified Etherscan source. No specific commit SHA was pinned in this run due to GitHub fetch access limitations.
- V3
- Uniswap v4 has undergone nine independent audits by OpenZeppelin, Spearbit, Certora, Trail of Bits, ABDK, and Pashov Audit Group. OpenZeppelin conducted 11 comprehensive audits across all protocol components since June 2024, covering core protocol, periphery, and universal router. Trail of Bits completed its v4-core assessment in September 2024. OpenZeppelin identified a critical vulnerability involving native token / ERC-20 double-accounting on certain chains that was resolved before launch.
- V4
- Four of the six audit firms (OpenZeppelin, Spearbit, Trail of Bits, Certora) are on the recognized auditor list. ABDK and Pashov Audit Group are also well-established in Solidity security. This represents exceptionally broad auditor coverage.
- V5
- OpenZeppelin served as the primary security partner for the v4 launch, conducting audits through to the launch date. The protocol also launched a $15.5M bug bounty program, the largest in DeFi history at the time. Without GitHub access to compare the latest commit to the audited commit, exact post-audit drift cannot be quantified, but the audits were conducted specifically for the launch version.
- V6
- The core PoolManager contract is not a proxy (confirmed via defipunkd ABI: proxy=null), so no implementation verification gap exists for the most critical contract. The PositionDescriptor uses a TransparentUpgradeableProxy pattern — the proxy itself is verified on Etherscan. Implementation verification for the PositionDescriptor was not independently confirmed in this run.
Why is this consensus tentative?- only 0/5 sources have a public chat share link
- total support weight 0.92 below confidence floor (1.5)
A fresh independent run can strengthen (or overturn) the verdict.
Run your own prompt Submit run ↗### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v4 - protocol.name: Uniswap V4 - protocol.chains: Ethereum, Base, Arbitrum, Polygon, Binance, Unichain, Monad, Soneium, Optimism, Tempo, Avalanche, World Chain, X Layer, Blast, Ink, Zora - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/Uniswap/v4-core/tree/main/docs/security/audits, https://github.com/Uniswap/v4-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-07-uniswap-v4-core-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x1a9C8182C09F50C8318d769245beA52c32BE35BC", "role": "PoolManager owner (Timelock, 2-day minimum delay)" }, { "chain": "Ethereum", "address": "0x408ED6354d4973f66138C91495F2f2FCbd8724C3", "role": "GovernorBravo proxy (admin of the Timelock)" }, { "chain": "Ethereum", "address": "0x3e51b68a157b573303155300a6593224f009990a", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497D0Cd94564c118C661384", "role": "Uniswap DAO Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497d0Cd94564c118039df83", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503475d9f9244252322473c9Cd", "role": "Uniswap Governance Timelock" }, { "chain": "Base", "address": "0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9", "role": "Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Optimism", "address": "0xa1dD330d602c32622AA270Ea73d078B803Cb3518", "role": "Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Blast", "address": "0x2339C0d23b60739B3E5ABF201F05903D24A26C77", "role": "Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Binance", "address": "0x341c1511141022cf8eE20824Ae0fFA3491F1302b", "role": "BSC PoolManager owner; Uniswap Wormhole Message Receiver linked to an Ethereum sender owned by the Uniswap timelock" }, { "chain": "Avalanche", "address": "0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc", "role": "Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint" }, { "chain": "Ethereum", "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "role": "PoolManager" }, { "chain": "Ethereum", "address": "0xd1428ba554f4c8450b763a0b2040a4935c63f06c", "role": "PositionDescriptor" }, { "chain": "Ethereum", "address": "0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e", "role": "PositionManager" }, { "chain": "Ethereum", "address": "0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203", "role": "Quoter" }, { "chain": "Ethereum", "address": "0x7ffe42c4a5deea5b0fec41c94c136cf115597227", "role": "StateView" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "Universal Router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Arbitrum", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Arbitrum", "address": "0xe2023f3fa515cf070e07fd9d51c1d236e07843f4", "role": "PositionDescriptor" }, { "chain": "Arbitrum", "address": "0xd88f38f930b7952f2db2432cb002e7abbf3dd869", "role": "PositionManager" }, { "chain": "Arbitrum", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Arbitrum", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "Universal Router" }, { "chain": "Arbitrum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Base", "address": "0x498581ff718922c3f8e6a244956af099b2652b2b", "role": "PoolManager" }, { "chain": "Base", "address": "0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5", "role": "PositionDescriptor" }, { "chain": "Base", "address": "0x7c5f5a4bbd8fd63184577525326123b519429bdc", "role": "PositionManager" }, { "chain": "Base", "address": "0x0d5e0f971ed27fbff6c2837bf31316121532048d", "role": "Quoter" }, { "chain": "Base", "address": "0xa3c0c9b65bad0b08107aa264b0f3db444b867a71", "role": "StateView" }, { "chain": "Base", "address": "0x6ff5693b99212da76ad316178a184ab56d299b43", "role": "Universal Router" }, { "chain": "Base", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Optimism", "address": "0x9a13f98cb987694c9f086b1f5eb990eea8264ec3", "role": "PoolManager" }, { "chain": "Optimism", "address": "0xedd81496169c46df161b8513a52ffecaaaa66743", "role": "PositionDescriptor" }, { "chain": "Optimism", "address": "0x3c3ea4b57a46241e54610e5f022e5c45859a1017", "role": "PositionManager" }, { "chain": "Optimism", "address": "0x1f3131a13296fb91c90870043742c3cdbff1a8d7", "role": "Quoter" }, { "chain": "Optimism", "address": "0xc18a3169788f4f75a170290584eca6395c75ecdb", "role": "StateView" }, { "chain": "Optimism", "address": "0x851116d9223fabed8e56c0e6b8ad0c31d98b3507", "role": "Universal Router" }, { "chain": "Optimism", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Polygon", "address": "0x67366782805870060151383f4bbff9dab53e5cd6", "role": "PoolManager" }, { "chain": "Polygon", "address": "0x0892771f0c1b78ad6013d6e5536007e1c16e6794", "role": "PositionDescriptor" }, { "chain": "Polygon", "address": "0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9", "role": "PositionManager" }, { "chain": "Polygon", "address": "0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9", "role": "Quoter" }, { "chain": "Polygon", "address": "0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a", "role": "StateView" }, { "chain": "Polygon", "address": "0x1095692a6237d83c6a72f3f5efedb9a670c49223", "role": "Universal Router" }, { "chain": "Polygon", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000004", "role": "PoolManager" }, { "chain": "Unichain", "address": "0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722", "role": "PositionDescriptor" }, { "chain": "Unichain", "address": "0x4529a01c7a0410167c5740c487a8de60232617bf", "role": "PositionManager" }, { "chain": "Unichain", "address": "0x333e3c607b141b18ff6de9f258db6e77fe7491e0", "role": "Quoter" }, { "chain": "Unichain", "address": "0x86e8631a016f9068c3f085faf484ee3f5fdee8f2", "role": "StateView" }, { "chain": "Unichain", "address": "0xef740bf23acae26f6492b10de645d6b98dc8eaf3", "role": "Universal Router" }, { "chain": "Unichain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Monad", "address": "0x188d586ddcf52439676ca21a244753fa19f9ea8e", "role": "PoolManager" }, { "chain": "Monad", "address": "0x5770d2914355a6d0a39a70aeea9bcce55df4201b", "role": "PositionDescriptor" }, { "chain": "Monad", "address": "0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016", "role": "PositionManager" }, { "chain": "Monad", "address": "0xa222dd357a9076d1091ed6aa2e16c9742dd26891", "role": "Quoter" }, { "chain": "Monad", "address": "0x77395f3b2e73ae90843717371294fa97cc419d64", "role": "StateView" }, { "chain": "Monad", "address": "0x0d97dc33264bfc1c226207428a79b26757fb9dc3", "role": "Universal Router" }, { "chain": "Monad", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Binance", "address": "0x28e2ea090877bf75740558f6bfb36a5ffee9e9df", "role": "PoolManager" }, { "chain": "Binance", "address": "0xf0432f360703ec3d33931a8356a75a77d8d380e1", "role": "PositionDescriptor" }, { "chain": "Binance", "address": "0x7a4a5c919ae2541aed11041a1aeee68f1287f95b", "role": "PositionManager" }, { "chain": "Binance", "address": "0x9f75dd27d6664c475b90e105573e550ff69437b0", "role": "Quoter" }, { "chain": "Binance", "address": "0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4", "role": "StateView" }, { "chain": "Binance", "address": "0x1906c1d672b88cd1b9ac7593301ca990f94eae07", "role": "Universal Router" }, { "chain": "Binance", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Soneium", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Soneium", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Soneium", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Soneium", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Soneium", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Soneium", "address": "0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df", "role": "Universal Router" }, { "chain": "Soneium", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Avalanche", "address": "0x06380c0e0912312b5150364b9dc4542ba0dbbc85", "role": "PoolManager" }, { "chain": "Avalanche", "address": "0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9", "role": "PositionDescriptor" }, { "chain": "Avalanche", "address": "0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd", "role": "PositionManager" }, { "chain": "Avalanche", "address": "0xbe40675bb704506a3c2ccfb762dcfd1e979845c2", "role": "Quoter" }, { "chain": "Avalanche", "address": "0xc3c9e198c735a4b97e3e683f391ccbdd60b69286", "role": "StateView" }, { "chain": "Avalanche", "address": "0x94b75331ae8d42c1b61065089b7d48fe14aa73b7", "role": "Universal Router" }, { "chain": "Avalanche", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "World Chain", "address": "0xb1860d529182ac3bc1f51fa2abd56662b7d13f33", "role": "PoolManager" }, { "chain": "World Chain", "address": "0x7da419153bd420b689f312363756d76836aeace4", "role": "PositionDescriptor" }, { "chain": "World Chain", "address": "0xc585e0f504613b5fbf874f21af14c65260fb41fa", "role": "PositionManager" }, { "chain": "World Chain", "address": "0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0", "role": "Quoter" }, { "chain": "World Chain", "address": "0x51d394718bc09297262e368c1a481217fdeb71eb", "role": "StateView" }, { "chain": "World Chain", "address": "0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743", "role": "Universal Router" }, { "chain": "World Chain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "X Layer", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Blast", "address": "0x1631559198a9e474033433b2958dabc135ab6446", "role": "PoolManager" }, { "chain": "Blast", "address": "0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97", "role": "PositionDescriptor" }, { "chain": "Blast", "address": "0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad", "role": "PositionManager" }, { "chain": "Blast", "address": "0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf", "role": "Quoter" }, { "chain": "Blast", "address": "0x12a88ae16f46dce4e8b15368008ab3380885df30", "role": "StateView" }, { "chain": "Blast", "address": "0xeabbcb3e8e415306207ef514f660a3f820025be3", "role": "Universal Router" }, { "chain": "Blast", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Tempo", "address": "0x33620f62c5b9b2086dd6b62f4a297a9f30347029", "role": "PoolManager" }, { "chain": "Tempo", "address": "0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77", "role": "PositionDescriptor" }, { "chain": "Tempo", "address": "0x3fc79444f8eacc1894775493ff3fa41f1e35ce11", "role": "PositionManager" }, { "chain": "Tempo", "address": "0x20e6487c371a2086f841ef453f85378223df4f4e", "role": "Quoter" }, { "chain": "Tempo", "address": "0x21b954fba3f5ddebe77ef2d47a3100c066908b2a", "role": "StateView" }, { "chain": "Tempo", "address": "0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91", "role": "Universal Router" }, { "chain": "Tempo", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ink", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Ink", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Ink", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Ink", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Ink", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Ink", "address": "0x112908dac86e20e7241b0927479ea3bf935d1fa0", "role": "Universal Router" }, { "chain": "Ink", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Zora", "address": "0x0575338e4c17006ae181b47900a84404247ca30f", "role": "PoolManager" }, { "chain": "Zora", "address": "0x7d64630bbb4993b5578dbd65e400961c9e68d55a", "role": "PositionDescriptor" }, { "chain": "Zora", "address": "0xf66c7b99e2040f0d9b326b3b7c152e9663543d63", "role": "PositionManager" }, { "chain": "Zora", "address": "0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6", "role": "Quoter" }, { "chain": "Zora", "address": "0x385785af07d63b50d0a0ea57c4ff89d06adf7328", "role": "StateView" }, { "chain": "Zora", "address": "0x3315ef7ca28db74abadc6c44570efdf06b04b020", "role": "Universal Router" }, { "chain": "Zora", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ethereum", "address": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "role": "UNI governance token" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x1a9C8182C09F50C8318d769245beA52c32BE35BC (PoolManager owner (Timelock, 2-day minimum delay)) - https://defipunkd.com/address/1/0x408ED6354d4973f66138C91495F2f2FCbd8724C3 (GovernorBravo proxy (admin of the Timelock)) - https://defipunkd.com/address/1/0x3e51b68a157b573303155300a6593224f009990a (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497D0Cd94564c118C661384 (Uniswap DAO Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497d0Cd94564c118039df83 (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503475d9f9244252322473c9Cd (Uniswap Governance Timelock) - https://defipunkd.com/address/8453/0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9 (Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/10/0xa1dD330d602c32622AA270Ea73d078B803Cb3518 (Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/81457/0x2339C0d23b60739B3E5ABF201F05903D24A26C77 (Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - Binance: 0x341c1511141022cf8eE20824Ae0fFA3491F1302b (chain not supported by the read API) - https://defipunkd.com/address/43114/0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc (Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint) - https://defipunkd.com/address/1/0x000000000004444c5dc75cB358380D2e3dE08A90 (PoolManager) - https://defipunkd.com/address/1/0xd1428ba554f4c8450b763a0b2040a4935c63f06c (PositionDescriptor) - https://defipunkd.com/address/1/0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e (PositionManager) - https://defipunkd.com/address/1/0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203 (Quoter) - https://defipunkd.com/address/1/0x7ffe42c4a5deea5b0fec41c94c136cf115597227 (StateView) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (Universal Router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/42161/0x360e68faccca8ca495c1b759fd9eee466db9fb32 (PoolManager) - https://defipunkd.com/address/42161/0xe2023f3fa515cf070e07fd9d51c1d236e07843f4 (PositionDescriptor) - https://defipunkd.com/address/42161/0xd88f38f930b7952f2db2432cb002e7abbf3dd869 (PositionManager) - https://defipunkd.com/address/42161/0x3972c00f7ed4885e145823eb7c655375d275a1c5 (Quoter) - https://defipunkd.com/address/42161/0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (StateView) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (Universal Router) - https://defipunkd.com/address/42161/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/8453/0x498581ff718922c3f8e6a244956af099b2652b2b (PoolManager) - https://defipunkd.com/address/8453/0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5 (PositionDescriptor) - https://defipunkd.com/address/8453/0x7c5f5a4bbd8fd63184577525326123b519429bdc (PositionManager) - https://defipunkd.com/address/8453/0x0d5e0f971ed27fbff6c2837bf31316121532048d (Quoter) - https://defipunkd.com/address/8453/0xa3c0c9b65bad0b08107aa264b0f3db444b867a71 (StateView) - https://defipunkd.com/address/8453/0x6ff5693b99212da76ad316178a184ab56d299b43 (Universal Router) - https://defipunkd.com/address/8453/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/10/0x9a13f98cb987694c9f086b1f5eb990eea8264ec3 (PoolManager) - https://defipunkd.com/address/10/0xedd81496169c46df161b8513a52ffecaaaa66743 (PositionDescriptor) - https://defipunkd.com/address/10/0x3c3ea4b57a46241e54610e5f022e5c45859a1017 (PositionManager) - https://defipunkd.com/address/10/0x1f3131a13296fb91c90870043742c3cdbff1a8d7 (Quoter) - https://defipunkd.com/address/10/0xc18a3169788f4f75a170290584eca6395c75ecdb (StateView) - https://defipunkd.com/address/10/0x851116d9223fabed8e56c0e6b8ad0c31d98b3507 (Universal Router) - https://defipunkd.com/address/10/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/137/0x67366782805870060151383f4bbff9dab53e5cd6 (PoolManager) - https://defipunkd.com/address/137/0x0892771f0c1b78ad6013d6e5536007e1c16e6794 (PositionDescriptor) - https://defipunkd.com/address/137/0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9 (PositionManager) - https://defipunkd.com/address/137/0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9 (Quoter) - https://defipunkd.com/address/137/0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a (StateView) - https://defipunkd.com/address/137/0x1095692a6237d83c6a72f3f5efedb9a670c49223 (Universal Router) - https://defipunkd.com/address/137/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000004 (PoolManager) - https://defipunkd.com/address/130/0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722 (PositionDescriptor) - https://defipunkd.com/address/130/0x4529a01c7a0410167c5740c487a8de60232617bf (PositionManager) - https://defipunkd.com/address/130/0x333e3c607b141b18ff6de9f258db6e77fe7491e0 (Quoter) - https://defipunkd.com/address/130/0x86e8631a016f9068c3f085faf484ee3f5fdee8f2 (StateView) - https://defipunkd.com/address/130/0xef740bf23acae26f6492b10de645d6b98dc8eaf3 (Universal Router) - https://defipunkd.com/address/130/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Monad: 0x188d586ddcf52439676ca21a244753fa19f9ea8e (chain not supported by the read API) - Monad: 0x5770d2914355a6d0a39a70aeea9bcce55df4201b (chain not supported by the read API) - Monad: 0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016 (chain not supported by the read API) - Monad: 0xa222dd357a9076d1091ed6aa2e16c9742dd26891 (chain not supported by the read API) - Monad: 0x77395f3b2e73ae90843717371294fa97cc419d64 (chain not supported by the read API) - Monad: 0x0d97dc33264bfc1c226207428a79b26757fb9dc3 (chain not supported by the read API) - Monad: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Binance: 0x28e2ea090877bf75740558f6bfb36a5ffee9e9df (chain not supported by the read API) - Binance: 0xf0432f360703ec3d33931a8356a75a77d8d380e1 (chain not supported by the read API) - Binance: 0x7a4a5c919ae2541aed11041a1aeee68f1287f95b (chain not supported by the read API) - Binance: 0x9f75dd27d6664c475b90e105573e550ff69437b0 (chain not supported by the read API) - Binance: 0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4 (chain not supported by the read API) - Binance: 0x1906c1d672b88cd1b9ac7593301ca990f94eae07 (chain not supported by the read API) - Binance: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Soneium: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Soneium: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Soneium: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Soneium: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Soneium: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Soneium: 0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df (chain not supported by the read API) - Soneium: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/43114/0x06380c0e0912312b5150364b9dc4542ba0dbbc85 (PoolManager) - https://defipunkd.com/address/43114/0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9 (PositionDescriptor) - https://defipunkd.com/address/43114/0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd (PositionManager) - https://defipunkd.com/address/43114/0xbe40675bb704506a3c2ccfb762dcfd1e979845c2 (Quoter) - https://defipunkd.com/address/43114/0xc3c9e198c735a4b97e3e683f391ccbdd60b69286 (StateView) - https://defipunkd.com/address/43114/0x94b75331ae8d42c1b61065089b7d48fe14aa73b7 (Universal Router) - https://defipunkd.com/address/43114/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - World Chain: 0xb1860d529182ac3bc1f51fa2abd56662b7d13f33 (chain not supported by the read API) - World Chain: 0x7da419153bd420b689f312363756d76836aeace4 (chain not supported by the read API) - World Chain: 0xc585e0f504613b5fbf874f21af14c65260fb41fa (chain not supported by the read API) - World Chain: 0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0 (chain not supported by the read API) - World Chain: 0x51d394718bc09297262e368c1a481217fdeb71eb (chain not supported by the read API) - World Chain: 0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743 (chain not supported by the read API) - World Chain: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - X Layer: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - https://defipunkd.com/address/81457/0x1631559198a9e474033433b2958dabc135ab6446 (PoolManager) - https://defipunkd.com/address/81457/0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97 (PositionDescriptor) - https://defipunkd.com/address/81457/0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad (PositionManager) - https://defipunkd.com/address/81457/0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf (Quoter) - https://defipunkd.com/address/81457/0x12a88ae16f46dce4e8b15368008ab3380885df30 (StateView) - https://defipunkd.com/address/81457/0xeabbcb3e8e415306207ef514f660a3f820025be3 (Universal Router) - https://defipunkd.com/address/81457/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Tempo: 0x33620f62c5b9b2086dd6b62f4a297a9f30347029 (chain not supported by the read API) - Tempo: 0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77 (chain not supported by the read API) - Tempo: 0x3fc79444f8eacc1894775493ff3fa41f1e35ce11 (chain not supported by the read API) - Tempo: 0x20e6487c371a2086f841ef453f85378223df4f4e (chain not supported by the read API) - Tempo: 0x21b954fba3f5ddebe77ef2d47a3100c066908b2a (chain not supported by the read API) - Tempo: 0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91 (chain not supported by the read API) - Tempo: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Ink: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Ink: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Ink: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Ink: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Ink: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Ink: 0x112908dac86e20e7241b0927479ea3bf935d1fa0 (chain not supported by the read API) - Ink: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Zora: 0x0575338e4c17006ae181b47900a84404247ca30f (chain not supported by the read API) - Zora: 0x7d64630bbb4993b5578dbd65e400961c9e68d55a (chain not supported by the read API) - Zora: 0xf66c7b99e2040f0d9b326b3b7c152e9663543d63 (chain not supported by the read API) - Zora: 0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6 (chain not supported by the read API) - Zora: 0x385785af07d63b50d0a0ea57c4ff89d06adf7328 (chain not supported by the read API) - Zora: 0x3315ef7ca28db74abadc6c44570efdf06b04b020 (chain not supported by the read API) - Zora: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/1/0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 (UNI governance token) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: VERIFIABILITY Evaluate whether an outsider can independently confirm what the deployed code does. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - V1. For each address you assess: is the bytecode verified on the chain's block explorer? Record the "Contract Source Code Verified" indicator. https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... returns this as a top-level "verified" boolean plus "abiSource" ("etherscan" / "sourcify") and an inline ABI — useful when the explorer page is rate-limited. If the contract is a proxy, verify BOTH the proxy contract AND the current implementation contract. The same /api/contract/abi response auto-resolves proxies and includes a "proxy.implementation" address when present, so one call covers V1 + V6 in one shot. An explorer "Similar Match" on a well-known proxy pattern (Aragon AppProxyUpgradeable, ERC1967Proxy, OssifiableProxy, OZ TransparentUpgradeableProxy) is expected for that pattern and does NOT count as a verification gap on its own — what matters is that the implementation is independently verified. - V2. Source-to-repo correspondence: for each verified contract, attempt to find a matching commit in the linked GitHub repos. Record evidence[].commit on a match. Independent compile/bytecode-match is NOT required for green — a recognized public repo whose structure and file contents correspond to the explorer-visible source is sufficient. If you did not pin a commit SHA or run a bytecode diff, record that plainly in unknowns[] and proceed; it is a scope limit, not a downgrade signal. - V3. Audit coverage: for each URL in protocol.audit_links, open it and record: auditor name, audit date, the specific contracts / commit in scope. Flag audits that predate the current deployment by >6 months without a follow-up review. - V4. Auditor recognition: the following firms are broadly recognized in Solidity: Trail of Bits, Zellic, Spearbit, OpenZeppelin, ConsenSys Diligence, Certora (formal verification), Quantstamp, Halborn, Peckshield, Sigma Prime, ChainSecurity, Ackee Blockchain, MixBytes, Statemind. Unknown firms are orange-at-best for any green-grade claim. Name the firm explicitly in evidence[]. - V5. Post-audit drift: compare the most recent in-scope audit(s) against the currently-deployed source, weighted by what each contract does and by what the changes actually contain. SCOPE — drift only downgrades the grade when ALL of the following hold: (i) the drifting contract is fund-custody / settlement / accounting-critical (NOT a peripheral router, lens, quoter, or pure-view contract that holds no balances); (ii) the changes are material — new functions, modified access control, modified accounting, modified fund flow — and not refactors / struct relocations / import reorgs / build or CI fixes / formatting; (iii) no later audit, fix-audit, or differential audit from a recognized firm covers the changed files (audits often pin a pre-fix commit while a follow-up reviews the delta — match by file scope, not by commit-hash equality). When you cite drift as a downgrade reason, name the specific behavior change (function added, role granted, accounting formula altered) — "N commits ahead" or "+X/-Y LOC" alone is not evidence of material drift. If you have not sampled the diff content (e.g. via the GitHub compare view or the top commits in the window), record drift as an unknowns[] entry rather than auto-downgrading; commit-count and LOC are starting signals, not findings. - V6. Implementation vs proxy: a verified proxy with an unverified implementation is effectively unverified. State whether the implementation is verified separately. EVIDENCE DISCIPLINE (read before writing findings[]): - Do not assert a specific deploy-commit SHA, bytecode equivalence, or "identical to audited commit" unless you actually fetched the artifact that shows it (e.g., a deployed-addresses JSON you opened, an explorer page you read). Inferred or plausible matches belong in unknowns[], never in findings[] or evidence[]. - Evidence[] entries must correspond to pages/files you actually retrieved this run. A URL you did not open is not evidence. Then write the steel-man section per Hard Rule 11. Grade rules: - green = deployed bytecode verified on the explorer (proxy AND implementation if proxied; "Similar Match" on a standard proxy pattern is fine per V1), a public source repo exists whose contents correspond to the explorer-visible source, AND ≥1 audit from a recognized firm covering the currently-deployed contracts (≤6 months of drift OR drift was re-audited). A missing local compile-match is not a downgrade — record it in unknowns[] and still grade green if the other conditions hold. - orange = verified but with visible drift from the public repo, OR audit scope is stale relative to deployment, OR only minor / unknown-firm audits exist, OR only some of the main contracts are verified, OR proxy verified but implementation only partially verified. - red = unverified bytecode (or verified proxy with unverified implementation), OR no audit in protocol.audit_links, OR no public repo. - unknown = reserved for when the protocol's verifiability posture genuinely cannot be assessed (e.g., explorer and repo both inaccessible for this protocol). Do NOT use unknown merely because you, the analyst, could not run a particular check such as a bytecode diff — that goes in unknowns[] while the grade is still assigned from the evidence you do have. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "verifiability", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.Sources claude-opus-4-6 (autorun) no url chatgpt-thinking-xhigh-5-5 no url unknown (autorun) no url gpt-5.5 no url gemini-3-flash-preview no url View raw submissions ↗ - Core v4 control is limited to bounded protocol-fee powers through UNI governance with an about 9.4 day uncontested fast path; fund-holding contracts are immutable
Verdict
Choosing green because the highest evidenced power over the assessed v4 core is bounded T2 protocol-fee control through UNI governance and a 172800 second timelock after voting delay and voting period, while no T1 upgrade, pause, drain, or withdrawal-freeze path was found on the immutable PoolManager/PositionManager/Universal Router contracts.
Steelman argument
Steelman argument The strongest green argument is that the Ethereum fund-holding v4 core is immutable, the identified owner power is bounded protocol-fee control, and the main execution path runs through UNI governance plus a timelock for about 9.4 days.Evidence (9)
- C1
- Ethereum PoolManager owner() returned 0x1a9C8182C09F50C8318d769245beA52c32BE35BC; that timelock admin() returned the GovernorBravo proxy 0x408ED6354d4973f66138C91495F2f2FCbd8724C3. The Governor proxy admin() is the same timelock and implementation() is 0x53a328F4086d7C0F1Fa19e594c9b842125263026.
- C1-cross
- Several non-Ethereum PoolManager owner reads point to cross-chain execution contracts, not EOAs: Base owner() returned 0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9, Optimism returned 0xa1dD330d602c32622AA270Ea73d078B803Cb3518, Blast returned 0x2339C0d23b60739B3E5ABF201F05903D24A26C77, BSC returned 0x341c1511141022cf8eE20824Ae0fFA3491F1302b, and Avalanche returned 0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc.
- C2
- The assessed Ethereum fund-facing v4 core/periphery/router contracts are not proxies: PoolManager, PositionManager, and Universal Router ABI reads returned proxy=null. The GovernorBravoDelegator is upgradeable by its admin, the timelock, but that upgradeable surface is governance-internal and no evidence showed it can upgrade or replace the immutable PoolManager.
- C3
- The Ethereum execution path is UNI GovernorBravo vote to timelock to PoolManager owner action: Etherscan Read-as-Proxy showed votingDelay=13140 blocks, votingPeriod=40320 blocks, proposalThreshold=1000000000000000000000000 UNI units, quorumVotes=40000000000000000000000000 UNI units, timelock=0x1a9C8182C09F50C8318d769245beA52c32BE35BC, and uni=0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984. At about 12 seconds per Ethereum block, votingDelay plus votingPeriod plus the 172800 second timelock delay is about 814320 seconds, or about 9.4 days, on the uncontested fast path.
- C3-cross
- Base and Blast CrossChainAccount contracts were verified on their explorers with constructor _l1Owner set to the Ethereum timelock and source requiring msg.sender to be the L2 messenger and messenger.xDomainMessageSender() to equal l1Owner before forwarding calls. The BSC owner is a Uniswap Wormhole Message Receiver with MESSAGE_TIME_OUT_SECONDS=172800 and messageSender=0x000000000000000000000000f5f4496219f31cdcba6130b5402873624585615a; that Ethereum Uniswap Wormhole Message Sender owner() is the Ethereum timelock.
- C4
- No Safe/multisig was identified on the assessed Ethereum fast path: the PoolManager owner is a timelock, the timelock admin is GovernorBravo, and the Governor proxy admin is the timelock. Base/Blast owners are messenger-gated CrossChainAccount contracts, BSC uses a Wormhole message receiver/sender pair, and Avalanche uses an OmnichainGovernanceExecutor; unsupported or unread chain owner classifications are recorded in unknowns.
- C5
- GovernorBravo is token-weighted UNI governance: Etherscan Read-as-Proxy showed the UNI token address, proposal threshold, quorumVotes, votingDelay, votingPeriod, and timelock address on the active GovernorBravo proxy. The numeric governance constants were read from the proxy's current implementation view via the explorer read-as-proxy page.
- C6
- No emergency pause/guardian role was found in the assessed v4 core owner surface: PoolManager ABI/source exposes fee-controller administration but no pause, unpause, guardian, or emergency stop method, and PositionManager/Universal Router ABI reads are non-proxy with no pause authority identified.
- C7
- The highest reachable v4 core power found is T2 economically material fee control, not T1 fund-critical upgrade or withdrawal pause control. ProtocolFees lets the PoolManager owner setProtocolFeeController; that controller can setProtocolFee and collectProtocolFees, while ProtocolFeeLibrary enforces MAX_PROTOCOL_FEE=1000 pips, documented in source as 0.1%, through isValidProtocolFee.
Why is this consensus tentative?- only 0/5 sources have a public chat share link
- total support weight 0.68 below confidence floor (1.5)
A fresh independent run can strengthen (or overturn) the verdict.
Run your own prompt Submit run ↗### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v4 - protocol.name: Uniswap V4 - protocol.chains: Ethereum, Base, Arbitrum, Polygon, Binance, Unichain, Monad, Soneium, Optimism, Tempo, Avalanche, World Chain, X Layer, Blast, Ink, Zora - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/Uniswap/v4-core/tree/main/docs/security/audits, https://github.com/Uniswap/v4-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-07-uniswap-v4-core-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x1a9C8182C09F50C8318d769245beA52c32BE35BC", "role": "PoolManager owner (Timelock, 2-day minimum delay)" }, { "chain": "Ethereum", "address": "0x408ED6354d4973f66138C91495F2f2FCbd8724C3", "role": "GovernorBravo proxy (admin of the Timelock)" }, { "chain": "Ethereum", "address": "0x3e51b68a157b573303155300a6593224f009990a", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497D0Cd94564c118C661384", "role": "Uniswap DAO Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497d0Cd94564c118039df83", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503475d9f9244252322473c9Cd", "role": "Uniswap Governance Timelock" }, { "chain": "Base", "address": "0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9", "role": "Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Optimism", "address": "0xa1dD330d602c32622AA270Ea73d078B803Cb3518", "role": "Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Blast", "address": "0x2339C0d23b60739B3E5ABF201F05903D24A26C77", "role": "Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Binance", "address": "0x341c1511141022cf8eE20824Ae0fFA3491F1302b", "role": "BSC PoolManager owner; Uniswap Wormhole Message Receiver linked to an Ethereum sender owned by the Uniswap timelock" }, { "chain": "Avalanche", "address": "0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc", "role": "Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint" }, { "chain": "Ethereum", "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "role": "PoolManager" }, { "chain": "Ethereum", "address": "0xd1428ba554f4c8450b763a0b2040a4935c63f06c", "role": "PositionDescriptor" }, { "chain": "Ethereum", "address": "0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e", "role": "PositionManager" }, { "chain": "Ethereum", "address": "0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203", "role": "Quoter" }, { "chain": "Ethereum", "address": "0x7ffe42c4a5deea5b0fec41c94c136cf115597227", "role": "StateView" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "Universal Router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Arbitrum", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Arbitrum", "address": "0xe2023f3fa515cf070e07fd9d51c1d236e07843f4", "role": "PositionDescriptor" }, { "chain": "Arbitrum", "address": "0xd88f38f930b7952f2db2432cb002e7abbf3dd869", "role": "PositionManager" }, { "chain": "Arbitrum", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Arbitrum", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "Universal Router" }, { "chain": "Arbitrum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Base", "address": "0x498581ff718922c3f8e6a244956af099b2652b2b", "role": "PoolManager" }, { "chain": "Base", "address": "0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5", "role": "PositionDescriptor" }, { "chain": "Base", "address": "0x7c5f5a4bbd8fd63184577525326123b519429bdc", "role": "PositionManager" }, { "chain": "Base", "address": "0x0d5e0f971ed27fbff6c2837bf31316121532048d", "role": "Quoter" }, { "chain": "Base", "address": "0xa3c0c9b65bad0b08107aa264b0f3db444b867a71", "role": "StateView" }, { "chain": "Base", "address": "0x6ff5693b99212da76ad316178a184ab56d299b43", "role": "Universal Router" }, { "chain": "Base", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Optimism", "address": "0x9a13f98cb987694c9f086b1f5eb990eea8264ec3", "role": "PoolManager" }, { "chain": "Optimism", "address": "0xedd81496169c46df161b8513a52ffecaaaa66743", "role": "PositionDescriptor" }, { "chain": "Optimism", "address": "0x3c3ea4b57a46241e54610e5f022e5c45859a1017", "role": "PositionManager" }, { "chain": "Optimism", "address": "0x1f3131a13296fb91c90870043742c3cdbff1a8d7", "role": "Quoter" }, { "chain": "Optimism", "address": "0xc18a3169788f4f75a170290584eca6395c75ecdb", "role": "StateView" }, { "chain": "Optimism", "address": "0x851116d9223fabed8e56c0e6b8ad0c31d98b3507", "role": "Universal Router" }, { "chain": "Optimism", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Polygon", "address": "0x67366782805870060151383f4bbff9dab53e5cd6", "role": "PoolManager" }, { "chain": "Polygon", "address": "0x0892771f0c1b78ad6013d6e5536007e1c16e6794", "role": "PositionDescriptor" }, { "chain": "Polygon", "address": "0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9", "role": "PositionManager" }, { "chain": "Polygon", "address": "0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9", "role": "Quoter" }, { "chain": "Polygon", "address": "0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a", "role": "StateView" }, { "chain": "Polygon", "address": "0x1095692a6237d83c6a72f3f5efedb9a670c49223", "role": "Universal Router" }, { "chain": "Polygon", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000004", "role": "PoolManager" }, { "chain": "Unichain", "address": "0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722", "role": "PositionDescriptor" }, { "chain": "Unichain", "address": "0x4529a01c7a0410167c5740c487a8de60232617bf", "role": "PositionManager" }, { "chain": "Unichain", "address": "0x333e3c607b141b18ff6de9f258db6e77fe7491e0", "role": "Quoter" }, { "chain": "Unichain", "address": "0x86e8631a016f9068c3f085faf484ee3f5fdee8f2", "role": "StateView" }, { "chain": "Unichain", "address": "0xef740bf23acae26f6492b10de645d6b98dc8eaf3", "role": "Universal Router" }, { "chain": "Unichain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Monad", "address": "0x188d586ddcf52439676ca21a244753fa19f9ea8e", "role": "PoolManager" }, { "chain": "Monad", "address": "0x5770d2914355a6d0a39a70aeea9bcce55df4201b", "role": "PositionDescriptor" }, { "chain": "Monad", "address": "0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016", "role": "PositionManager" }, { "chain": "Monad", "address": "0xa222dd357a9076d1091ed6aa2e16c9742dd26891", "role": "Quoter" }, { "chain": "Monad", "address": "0x77395f3b2e73ae90843717371294fa97cc419d64", "role": "StateView" }, { "chain": "Monad", "address": "0x0d97dc33264bfc1c226207428a79b26757fb9dc3", "role": "Universal Router" }, { "chain": "Monad", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Binance", "address": "0x28e2ea090877bf75740558f6bfb36a5ffee9e9df", "role": "PoolManager" }, { "chain": "Binance", "address": "0xf0432f360703ec3d33931a8356a75a77d8d380e1", "role": "PositionDescriptor" }, { "chain": "Binance", "address": "0x7a4a5c919ae2541aed11041a1aeee68f1287f95b", "role": "PositionManager" }, { "chain": "Binance", "address": "0x9f75dd27d6664c475b90e105573e550ff69437b0", "role": "Quoter" }, { "chain": "Binance", "address": "0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4", "role": "StateView" }, { "chain": "Binance", "address": "0x1906c1d672b88cd1b9ac7593301ca990f94eae07", "role": "Universal Router" }, { "chain": "Binance", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Soneium", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Soneium", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Soneium", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Soneium", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Soneium", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Soneium", "address": "0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df", "role": "Universal Router" }, { "chain": "Soneium", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Avalanche", "address": "0x06380c0e0912312b5150364b9dc4542ba0dbbc85", "role": "PoolManager" }, { "chain": "Avalanche", "address": "0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9", "role": "PositionDescriptor" }, { "chain": "Avalanche", "address": "0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd", "role": "PositionManager" }, { "chain": "Avalanche", "address": "0xbe40675bb704506a3c2ccfb762dcfd1e979845c2", "role": "Quoter" }, { "chain": "Avalanche", "address": "0xc3c9e198c735a4b97e3e683f391ccbdd60b69286", "role": "StateView" }, { "chain": "Avalanche", "address": "0x94b75331ae8d42c1b61065089b7d48fe14aa73b7", "role": "Universal Router" }, { "chain": "Avalanche", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "World Chain", "address": "0xb1860d529182ac3bc1f51fa2abd56662b7d13f33", "role": "PoolManager" }, { "chain": "World Chain", "address": "0x7da419153bd420b689f312363756d76836aeace4", "role": "PositionDescriptor" }, { "chain": "World Chain", "address": "0xc585e0f504613b5fbf874f21af14c65260fb41fa", "role": "PositionManager" }, { "chain": "World Chain", "address": "0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0", "role": "Quoter" }, { "chain": "World Chain", "address": "0x51d394718bc09297262e368c1a481217fdeb71eb", "role": "StateView" }, { "chain": "World Chain", "address": "0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743", "role": "Universal Router" }, { "chain": "World Chain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "X Layer", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Blast", "address": "0x1631559198a9e474033433b2958dabc135ab6446", "role": "PoolManager" }, { "chain": "Blast", "address": "0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97", "role": "PositionDescriptor" }, { "chain": "Blast", "address": "0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad", "role": "PositionManager" }, { "chain": "Blast", "address": "0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf", "role": "Quoter" }, { "chain": "Blast", "address": "0x12a88ae16f46dce4e8b15368008ab3380885df30", "role": "StateView" }, { "chain": "Blast", "address": "0xeabbcb3e8e415306207ef514f660a3f820025be3", "role": "Universal Router" }, { "chain": "Blast", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Tempo", "address": "0x33620f62c5b9b2086dd6b62f4a297a9f30347029", "role": "PoolManager" }, { "chain": "Tempo", "address": "0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77", "role": "PositionDescriptor" }, { "chain": "Tempo", "address": "0x3fc79444f8eacc1894775493ff3fa41f1e35ce11", "role": "PositionManager" }, { "chain": "Tempo", "address": "0x20e6487c371a2086f841ef453f85378223df4f4e", "role": "Quoter" }, { "chain": "Tempo", "address": "0x21b954fba3f5ddebe77ef2d47a3100c066908b2a", "role": "StateView" }, { "chain": "Tempo", "address": "0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91", "role": "Universal Router" }, { "chain": "Tempo", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ink", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Ink", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Ink", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Ink", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Ink", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Ink", "address": "0x112908dac86e20e7241b0927479ea3bf935d1fa0", "role": "Universal Router" }, { "chain": "Ink", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Zora", "address": "0x0575338e4c17006ae181b47900a84404247ca30f", "role": "PoolManager" }, { "chain": "Zora", "address": "0x7d64630bbb4993b5578dbd65e400961c9e68d55a", "role": "PositionDescriptor" }, { "chain": "Zora", "address": "0xf66c7b99e2040f0d9b326b3b7c152e9663543d63", "role": "PositionManager" }, { "chain": "Zora", "address": "0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6", "role": "Quoter" }, { "chain": "Zora", "address": "0x385785af07d63b50d0a0ea57c4ff89d06adf7328", "role": "StateView" }, { "chain": "Zora", "address": "0x3315ef7ca28db74abadc6c44570efdf06b04b020", "role": "Universal Router" }, { "chain": "Zora", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ethereum", "address": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "role": "UNI governance token" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x1a9C8182C09F50C8318d769245beA52c32BE35BC (PoolManager owner (Timelock, 2-day minimum delay)) - https://defipunkd.com/address/1/0x408ED6354d4973f66138C91495F2f2FCbd8724C3 (GovernorBravo proxy (admin of the Timelock)) - https://defipunkd.com/address/1/0x3e51b68a157b573303155300a6593224f009990a (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497D0Cd94564c118C661384 (Uniswap DAO Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497d0Cd94564c118039df83 (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503475d9f9244252322473c9Cd (Uniswap Governance Timelock) - https://defipunkd.com/address/8453/0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9 (Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/10/0xa1dD330d602c32622AA270Ea73d078B803Cb3518 (Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/81457/0x2339C0d23b60739B3E5ABF201F05903D24A26C77 (Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - Binance: 0x341c1511141022cf8eE20824Ae0fFA3491F1302b (chain not supported by the read API) - https://defipunkd.com/address/43114/0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc (Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint) - https://defipunkd.com/address/1/0x000000000004444c5dc75cB358380D2e3dE08A90 (PoolManager) - https://defipunkd.com/address/1/0xd1428ba554f4c8450b763a0b2040a4935c63f06c (PositionDescriptor) - https://defipunkd.com/address/1/0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e (PositionManager) - https://defipunkd.com/address/1/0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203 (Quoter) - https://defipunkd.com/address/1/0x7ffe42c4a5deea5b0fec41c94c136cf115597227 (StateView) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (Universal Router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/42161/0x360e68faccca8ca495c1b759fd9eee466db9fb32 (PoolManager) - https://defipunkd.com/address/42161/0xe2023f3fa515cf070e07fd9d51c1d236e07843f4 (PositionDescriptor) - https://defipunkd.com/address/42161/0xd88f38f930b7952f2db2432cb002e7abbf3dd869 (PositionManager) - https://defipunkd.com/address/42161/0x3972c00f7ed4885e145823eb7c655375d275a1c5 (Quoter) - https://defipunkd.com/address/42161/0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (StateView) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (Universal Router) - https://defipunkd.com/address/42161/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/8453/0x498581ff718922c3f8e6a244956af099b2652b2b (PoolManager) - https://defipunkd.com/address/8453/0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5 (PositionDescriptor) - https://defipunkd.com/address/8453/0x7c5f5a4bbd8fd63184577525326123b519429bdc (PositionManager) - https://defipunkd.com/address/8453/0x0d5e0f971ed27fbff6c2837bf31316121532048d (Quoter) - https://defipunkd.com/address/8453/0xa3c0c9b65bad0b08107aa264b0f3db444b867a71 (StateView) - https://defipunkd.com/address/8453/0x6ff5693b99212da76ad316178a184ab56d299b43 (Universal Router) - https://defipunkd.com/address/8453/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/10/0x9a13f98cb987694c9f086b1f5eb990eea8264ec3 (PoolManager) - https://defipunkd.com/address/10/0xedd81496169c46df161b8513a52ffecaaaa66743 (PositionDescriptor) - https://defipunkd.com/address/10/0x3c3ea4b57a46241e54610e5f022e5c45859a1017 (PositionManager) - https://defipunkd.com/address/10/0x1f3131a13296fb91c90870043742c3cdbff1a8d7 (Quoter) - https://defipunkd.com/address/10/0xc18a3169788f4f75a170290584eca6395c75ecdb (StateView) - https://defipunkd.com/address/10/0x851116d9223fabed8e56c0e6b8ad0c31d98b3507 (Universal Router) - https://defipunkd.com/address/10/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/137/0x67366782805870060151383f4bbff9dab53e5cd6 (PoolManager) - https://defipunkd.com/address/137/0x0892771f0c1b78ad6013d6e5536007e1c16e6794 (PositionDescriptor) - https://defipunkd.com/address/137/0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9 (PositionManager) - https://defipunkd.com/address/137/0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9 (Quoter) - https://defipunkd.com/address/137/0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a (StateView) - https://defipunkd.com/address/137/0x1095692a6237d83c6a72f3f5efedb9a670c49223 (Universal Router) - https://defipunkd.com/address/137/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000004 (PoolManager) - https://defipunkd.com/address/130/0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722 (PositionDescriptor) - https://defipunkd.com/address/130/0x4529a01c7a0410167c5740c487a8de60232617bf (PositionManager) - https://defipunkd.com/address/130/0x333e3c607b141b18ff6de9f258db6e77fe7491e0 (Quoter) - https://defipunkd.com/address/130/0x86e8631a016f9068c3f085faf484ee3f5fdee8f2 (StateView) - https://defipunkd.com/address/130/0xef740bf23acae26f6492b10de645d6b98dc8eaf3 (Universal Router) - https://defipunkd.com/address/130/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Monad: 0x188d586ddcf52439676ca21a244753fa19f9ea8e (chain not supported by the read API) - Monad: 0x5770d2914355a6d0a39a70aeea9bcce55df4201b (chain not supported by the read API) - Monad: 0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016 (chain not supported by the read API) - Monad: 0xa222dd357a9076d1091ed6aa2e16c9742dd26891 (chain not supported by the read API) - Monad: 0x77395f3b2e73ae90843717371294fa97cc419d64 (chain not supported by the read API) - Monad: 0x0d97dc33264bfc1c226207428a79b26757fb9dc3 (chain not supported by the read API) - Monad: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Binance: 0x28e2ea090877bf75740558f6bfb36a5ffee9e9df (chain not supported by the read API) - Binance: 0xf0432f360703ec3d33931a8356a75a77d8d380e1 (chain not supported by the read API) - Binance: 0x7a4a5c919ae2541aed11041a1aeee68f1287f95b (chain not supported by the read API) - Binance: 0x9f75dd27d6664c475b90e105573e550ff69437b0 (chain not supported by the read API) - Binance: 0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4 (chain not supported by the read API) - Binance: 0x1906c1d672b88cd1b9ac7593301ca990f94eae07 (chain not supported by the read API) - Binance: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Soneium: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Soneium: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Soneium: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Soneium: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Soneium: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Soneium: 0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df (chain not supported by the read API) - Soneium: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/43114/0x06380c0e0912312b5150364b9dc4542ba0dbbc85 (PoolManager) - https://defipunkd.com/address/43114/0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9 (PositionDescriptor) - https://defipunkd.com/address/43114/0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd (PositionManager) - https://defipunkd.com/address/43114/0xbe40675bb704506a3c2ccfb762dcfd1e979845c2 (Quoter) - https://defipunkd.com/address/43114/0xc3c9e198c735a4b97e3e683f391ccbdd60b69286 (StateView) - https://defipunkd.com/address/43114/0x94b75331ae8d42c1b61065089b7d48fe14aa73b7 (Universal Router) - https://defipunkd.com/address/43114/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - World Chain: 0xb1860d529182ac3bc1f51fa2abd56662b7d13f33 (chain not supported by the read API) - World Chain: 0x7da419153bd420b689f312363756d76836aeace4 (chain not supported by the read API) - World Chain: 0xc585e0f504613b5fbf874f21af14c65260fb41fa (chain not supported by the read API) - World Chain: 0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0 (chain not supported by the read API) - World Chain: 0x51d394718bc09297262e368c1a481217fdeb71eb (chain not supported by the read API) - World Chain: 0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743 (chain not supported by the read API) - World Chain: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - X Layer: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - https://defipunkd.com/address/81457/0x1631559198a9e474033433b2958dabc135ab6446 (PoolManager) - https://defipunkd.com/address/81457/0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97 (PositionDescriptor) - https://defipunkd.com/address/81457/0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad (PositionManager) - https://defipunkd.com/address/81457/0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf (Quoter) - https://defipunkd.com/address/81457/0x12a88ae16f46dce4e8b15368008ab3380885df30 (StateView) - https://defipunkd.com/address/81457/0xeabbcb3e8e415306207ef514f660a3f820025be3 (Universal Router) - https://defipunkd.com/address/81457/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Tempo: 0x33620f62c5b9b2086dd6b62f4a297a9f30347029 (chain not supported by the read API) - Tempo: 0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77 (chain not supported by the read API) - Tempo: 0x3fc79444f8eacc1894775493ff3fa41f1e35ce11 (chain not supported by the read API) - Tempo: 0x20e6487c371a2086f841ef453f85378223df4f4e (chain not supported by the read API) - Tempo: 0x21b954fba3f5ddebe77ef2d47a3100c066908b2a (chain not supported by the read API) - Tempo: 0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91 (chain not supported by the read API) - Tempo: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Ink: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Ink: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Ink: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Ink: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Ink: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Ink: 0x112908dac86e20e7241b0927479ea3bf935d1fa0 (chain not supported by the read API) - Ink: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Zora: 0x0575338e4c17006ae181b47900a84404247ca30f (chain not supported by the read API) - Zora: 0x7d64630bbb4993b5578dbd65e400961c9e68d55a (chain not supported by the read API) - Zora: 0xf66c7b99e2040f0d9b326b3b7c152e9663543d63 (chain not supported by the read API) - Zora: 0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6 (chain not supported by the read API) - Zora: 0x385785af07d63b50d0a0ea57c4ff89d06adf7328 (chain not supported by the read API) - Zora: 0x3315ef7ca28db74abadc6c44570efdf06b04b020 (chain not supported by the read API) - Zora: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/1/0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 (UNI governance token) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: CONTROL Evaluate who can change the protocol's rules, how fast, and how broadly. (Step 0 capability probe and the off-chain-only fallback live in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]) - **C1.** For each address you assess: who is the contract owner / admin / pendingAdmin / governor — read these via the block explorer's "Read Contract" tab OR `https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=owner` (BARE method names: `&method=owner`, `&method=admin`, `&method=pendingOwner`, `&method=governor`). For Safes use `/api/safe/owners?chainId=<id>&address=0x...`. When a protocol has multiple major versions deployed (v2/v3/v4), perform C1 reads on the NEWEST deployment separately — newer deployments often have weaker control surfaces than the legacy core. - **C2.** Upgrade mechanism: transparent proxy / UUPS / Beacon / Diamond / immutable. Identify the proxy admin address. Check upgradeability of GOVERNANCE contracts too — a Governor / Aragon Voting / OZ Governor is often itself a proxy whose admin is the Timelock. Asymmetry: when fund-holding cores are immutable AND governance has no admin path that reaches them, an upgradable Governor/Timelock is T3-only and must NOT drag the verdict below green on that basis alone (see grade rules and the "immutable cores" caveat). Only call upgradability "mixed" if you can name a concrete function on the upgradable surface that reaches T1 or T2 on user funds. - **C3.** EXECUTION PATH (enumerate every stage, in order, with delays in seconds). The operative path is usually a chain (voting → scheduler → timelock → executor; or governor → queue → execute; or Aragon Voting → DualGovernance → EmergencyProtectedTimelock → AdminExecutor). For each stage, record (a) the contract address, (b) the delay constant name + value in seconds, (c) the URL you read it from (block-explorer Read Contract OR `/api/contract/read?...&method=MIN_DELAY&block=<n>`). Do NOT stop at the first timelock-shaped contract — if its admin is itself called by another contract, keep walking. The grading delay is the SUM OF DELAYS ON THE UNCONTESTED FAST PATH (shortest time a proposal with no opposition can go from submission to executable). Dynamic / contested extensions (veto signaling, rage quit, escrow delay) are modifiers, not the basis — note them separately. - **C4.** Enumerate EVERY multisig with reachable control — main proxy admin, emergency activation, emergency execution, reseal / pause, gate-seal committees, tiebreaker, per-module admins. For each Safe, fetch threshold + owners + version via `/api/safe/owners?chainId=<id>&address=0x...` (response includes raw eth_call data, so the URL is citable evidence). Enumerate ops/council/incentives multisigs even when off the upgrade path — record their scope so a reader can see they are NOT on the upgrade path. For each: (a) address, (b) threshold / total signers, (c) signer identities classified as insider (team, paid auditors under ongoing engagement, mandated service providers) vs non-insider (independent community members, unaffiliated researchers), (d) the specific power held (upgrade, pause, parameter, etc.). - **C5.** On-chain governance: Governor / GovernorBravo / OZ Governor / Aragon Voting with token-weighted voting? Record proposal threshold, voting period, quorum, and the timelock delay between queue and execute. Every numeric constant must come from a Read Contract call you can link to, or be in unknowns[] with the C-code. If votingDelay / votingPeriod are denominated in BLOCKS, convert to seconds at the chain's CURRENT block time (Ethereum mainnet ≈ 12s post-Merge, not the 15s in older Compound/Bravo deployments) — cite both block count and converted seconds. - **C6.** EMERGENCY POWERS: separate emergency-pause / guardian role with a different time cap or different actor than the main upgrade authority? Record it explicitly. - **C7.** POWER TIER (blast radius). For each privileged path in C3–C6, classify the WORST thing that path can do, choosing the highest applicable tier. Cite the specific function name and any on-chain bound — tier claims without a named function are unsupported. - **T1 — FUND-CRITICAL**: replace implementation of contracts holding user funds; change AMM math / accounting / collateral logic; mint unbacked debt or shares; pause withdrawals; drain user-fund treasury; change oracle to attacker-controlled source; replace upgrade admin with EOA. - **T2 — ECONOMICALLY MATERIAL**: change fee parameters within bounded ranges; redirect protocol fees; add/remove markets / collateral types; bounded inflation or token mint within hard-capped schedule; spend protocol-owned (non-user) treasury. - **T3 — GOVERNANCE-INTERNAL**: change voting rules, quorum, voting period, proposal threshold; upgrade the Governor itself; rotate Timelock admin; mint governance tokens within a capped annual schedule. - **T4 — OPERATIONAL**: incentives distribution, grants, ENS / frontend canonicalization, deployment coordination, periphery router deprecation. The grade is set by the HIGHEST tier reachable on the uncontested fast path, not the median. State the tier and the binding function in the verdict. ### Read Contract discipline (applies to C3, C4, C5) Every numeric constant cited (timelock delays, voting periods, multisig thresholds, quorum percentages) must come from EITHER (a) a block-explorer Read Contract URL, OR (b) a DeFiPunkd `/api/contract/read` or `/api/safe/owners` URL (preferred with `&block=<n>` for content-addressed evidence), OR (c) an unknowns[] entry with the C-code. Docs / blog posts are corroboration only — they cannot be the sole citation for a value that is also readable on-chain. ### Off-chain-only substitute hierarchy (when grading_basis="off-chain-only" — see preamble Rule 16) When on-chain reads were genuinely unreachable this run, eligible off-chain substitutes in priority order: 1. Linked audit PDFs (admin roles, multisig members, timelock delays usually enumerated). 2. Governance forum posts that quote constants from a successful on-chain proposal (cite post URL + linked execution-tx URL). 3. Official protocol docs pages with named addresses and roles (must be on a domain owned by the protocol). 4. GitHub README / SECURITY.md / governance/*.md at a pinned commit SHA. Forbidden substitutes: third-party blog posts, X / Twitter threads, search-result snippets, model memory. Required degradation: any C-code citing a numeric constant from docs/forum/audit prose ONLY must also carry an `unknowns[]` entry with `-offchain` suffix noting "value not re-read on-chain in this run; corroboration only". ### Grade rules (apply the timelock bar conditional on the highest C7 tier reachable on the fast path) Security Council standard (used below): a multisig qualifies as "Security Council" only if ALL of: ≥7 signers, ≥51% threshold, ≥50% non-insider signers, every signer publicly announced. Failing any criterion = NOT a Security Council, regardless of signer reputation. - **green**: highest reachable tier is T3 or T4 regardless of timelock; OR T2 reachable with uncontested-fast-path delay ≥7 days; OR T1 reachable only via immutable contracts (T1 is unreachable); OR T1 reachable with uncontested-fast-path delay ≥7 days combined with a Security Council multisig; OR T1 reachable with uncontested-fast-path delay ≥7 days through active on-chain governance with broad token distribution. - **orange**: T2 reachable with uncontested-fast-path delay >0 but <7 days; OR T1 reachable with uncontested-fast-path delay >0 but <7 days; OR a multisig failing one or more Security Council criteria sits on a T1/T2 path; OR unclear upgrade authority on a T1/T2 path; OR governance with very short timelock or low quorum on a T1/T2 path. - **red**: T1 reachable with no timelock by a single EOA or 2-of-3 multisig; OR a T1 upgrade admin that is not a smart contract you can audit. - **unknown**: completed the checklist but still cannot determine the upgrade authority OR cannot classify the highest tier reachable on the main contracts. Tiering caveats: - "Bounded" must be enforced ON-CHAIN to count as T2. A function that sets fees with no upper-bound check is T1 — cite the bound check. - Recurring T2 economic extraction (e.g. fee redirect with no rate limit) approaches T1 over time. A single proposal that can permanently redirect all future revenue is T1. - T3 assumes the governance contract cannot itself authorize a T1/T2 action without going through the same timelock. If governance can self-upgrade to bypass the timelock, T3 collapses into T1. - Do not downgrade tier by hand-waving ("realistically governance would never…"). Tier on what the contract permits, not what feels likely. Notes: - **Dynamic / dual-governance timelocks** (Lido, Compound escrow veto): the rubric grades on the uncontested path because that is the path most upgrades take. A dynamic extension that fires only under stake-weighted opposition is a real protection — name it in the green steel-man, but it does not lift an orange fast path into green; state the tension in the verdict. - **Immutable cores with upgradable governance** (Uniswap-style): if fund-holding contracts are immutable and have no admin-reachable function moving / freezing / re-routing user funds, the highest reachable tier on the upgrade path is T3 — green regardless of timelock. Don't grade this orange just because the Governor is a proxy — that's a C2 fact, not a downgrade. Downgrade only applies if you can cite a concrete function on the upgradable surface that reaches T1 or T2 (privileged hook, upgradable factory controlling fund-routing, fee-switch redirecting protocol revenue without bound). - **The 7-day bar** reflects the exit-window standard — users need notice after a queued upgrade to withdraw if they disagree. The ability-to-exit slice grades the exit side; this slice grades the delay side; both must hold for users to actually benefit from the delay. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "control", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.Sources chatgpt-thinking-xhigh-5-5 no url claude-opus-4-6 (autorun) no url unknown (autorun) no url gpt-5.5 no url gemini-3-flash-preview no url View raw submissions ↗ - Uniswap V4 core contracts have no pause mechanism; liquidity withdrawal and swaps are fully permissionless with no admin-gatable exit paths.
Verdict
Choosing green because the core PoolManager has no pause, no admin-gated exit functions, and no upgrade path. The owner's powers are limited to protocol fee configuration and cannot block any user exit. The PositionManager is confirmed ownerless and non-upgradeable by OpenZeppelin's audit. All exit functions (modifyLiquidity, take, burn, settle, swap) are permissionless. While hooks on individual pools could theoretically restrict exits, hooks are an opt-in per-pool feature chosen at pool creation — the core protocol exit path itself has no restrictions.
Steelman argument
Steelman argument The core PoolManager and PositionManager contracts have zero pause functionality, no admin-gatable exit paths, no upgrade proxies, and no queued withdrawal mechanisms — exits are atomic, permissionless, and frontend-independent.Evidence (7)
- E1
- User-facing exit functions on PoolManager: modifyLiquidity (with negative liquidityDelta to remove liquidity), take (withdraw tokens), burn (burn ERC6909 claim tokens), settle/settleFor (settle debts). On PositionManager: modifyLiquidities (wraps modifyLiquidity for NFT positions, supports DECREASE_LIQUIDITY and BURN actions). For swappers: swap on PoolManager. All identified from the deployed ABI via the defipunkd surfacer.
- E2
- None of the exit functions (modifyLiquidity, take, burn, settle, swap) have pause guards or admin access controls. The only modifier on core functions is onlyWhenUnlocked (flash-accounting transient lock, not an admin pause) and noDelegateCall. The PositionManager is confirmed by the OpenZeppelin audit as 'non-upgradeable, permissionless, and ownerless' with no pause mechanism in its ABI.
- E3
- No pause mechanism exists on PoolManager or PositionManager. The PoolManager ABI contains no pause(), unpause(), paused(), or whenNotPaused functions. Owner (0x1a9C8182C09F50C8318d769245beA52c32BE35BC, a governance Timelock with 2-day minimum delay, admin=GovernorBravo 0x408ED6354d4973f66138C91495F2f2FCbd8724C3) can only: setProtocolFeeController, transferOwnership, collectProtocolFees — none affect user exit ability.
- E4
- No emergency pause or governance pause path exists on the core contracts. There is no fast-acting emergency pause nor a slow governance pause — the contracts simply have no pause functionality at all.
- E5
- No queued redemption mechanism. Liquidity removal via modifyLiquidity with negative liquidityDelta is atomic within a single transaction — no queue, no waiting period, no daily caps.
- E6
- No forced-exit or escape-hatch mechanism is needed because exits are already fully permissionless. Note: individual pools may optionally have hook contracts that could introduce custom restrictions, but hooks are per-pool opt-in and do not affect the core PoolManager exit paths.
- E7
- All exit functions are directly callable on-chain. The PoolManager and PositionManager are verified contracts on Etherscan; users can call modifyLiquidity/modifyLiquidities/take/burn/swap via Etherscan write tabs or any generic wallet without requiring the Uniswap frontend.
Why is this consensus tentative?- only 0/5 sources have a public chat share link
- total support weight 0.66 below confidence floor (1.5)
A fresh independent run can strengthen (or overturn) the verdict.
Run your own prompt Submit run ↗### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v4 - protocol.name: Uniswap V4 - protocol.chains: Ethereum, Base, Arbitrum, Polygon, Binance, Unichain, Monad, Soneium, Optimism, Tempo, Avalanche, World Chain, X Layer, Blast, Ink, Zora - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/Uniswap/v4-core/tree/main/docs/security/audits, https://github.com/Uniswap/v4-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-07-uniswap-v4-core-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x1a9C8182C09F50C8318d769245beA52c32BE35BC", "role": "PoolManager owner (Timelock, 2-day minimum delay)" }, { "chain": "Ethereum", "address": "0x408ED6354d4973f66138C91495F2f2FCbd8724C3", "role": "GovernorBravo proxy (admin of the Timelock)" }, { "chain": "Ethereum", "address": "0x3e51b68a157b573303155300a6593224f009990a", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497D0Cd94564c118C661384", "role": "Uniswap DAO Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497d0Cd94564c118039df83", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503475d9f9244252322473c9Cd", "role": "Uniswap Governance Timelock" }, { "chain": "Base", "address": "0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9", "role": "Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Optimism", "address": "0xa1dD330d602c32622AA270Ea73d078B803Cb3518", "role": "Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Blast", "address": "0x2339C0d23b60739B3E5ABF201F05903D24A26C77", "role": "Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Binance", "address": "0x341c1511141022cf8eE20824Ae0fFA3491F1302b", "role": "BSC PoolManager owner; Uniswap Wormhole Message Receiver linked to an Ethereum sender owned by the Uniswap timelock" }, { "chain": "Avalanche", "address": "0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc", "role": "Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint" }, { "chain": "Ethereum", "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "role": "PoolManager" }, { "chain": "Ethereum", "address": "0xd1428ba554f4c8450b763a0b2040a4935c63f06c", "role": "PositionDescriptor" }, { "chain": "Ethereum", "address": "0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e", "role": "PositionManager" }, { "chain": "Ethereum", "address": "0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203", "role": "Quoter" }, { "chain": "Ethereum", "address": "0x7ffe42c4a5deea5b0fec41c94c136cf115597227", "role": "StateView" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "Universal Router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Arbitrum", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Arbitrum", "address": "0xe2023f3fa515cf070e07fd9d51c1d236e07843f4", "role": "PositionDescriptor" }, { "chain": "Arbitrum", "address": "0xd88f38f930b7952f2db2432cb002e7abbf3dd869", "role": "PositionManager" }, { "chain": "Arbitrum", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Arbitrum", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "Universal Router" }, { "chain": "Arbitrum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Base", "address": "0x498581ff718922c3f8e6a244956af099b2652b2b", "role": "PoolManager" }, { "chain": "Base", "address": "0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5", "role": "PositionDescriptor" }, { "chain": "Base", "address": "0x7c5f5a4bbd8fd63184577525326123b519429bdc", "role": "PositionManager" }, { "chain": "Base", "address": "0x0d5e0f971ed27fbff6c2837bf31316121532048d", "role": "Quoter" }, { "chain": "Base", "address": "0xa3c0c9b65bad0b08107aa264b0f3db444b867a71", "role": "StateView" }, { "chain": "Base", "address": "0x6ff5693b99212da76ad316178a184ab56d299b43", "role": "Universal Router" }, { "chain": "Base", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Optimism", "address": "0x9a13f98cb987694c9f086b1f5eb990eea8264ec3", "role": "PoolManager" }, { "chain": "Optimism", "address": "0xedd81496169c46df161b8513a52ffecaaaa66743", "role": "PositionDescriptor" }, { "chain": "Optimism", "address": "0x3c3ea4b57a46241e54610e5f022e5c45859a1017", "role": "PositionManager" }, { "chain": "Optimism", "address": "0x1f3131a13296fb91c90870043742c3cdbff1a8d7", "role": "Quoter" }, { "chain": "Optimism", "address": "0xc18a3169788f4f75a170290584eca6395c75ecdb", "role": "StateView" }, { "chain": "Optimism", "address": "0x851116d9223fabed8e56c0e6b8ad0c31d98b3507", "role": "Universal Router" }, { "chain": "Optimism", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Polygon", "address": "0x67366782805870060151383f4bbff9dab53e5cd6", "role": "PoolManager" }, { "chain": "Polygon", "address": "0x0892771f0c1b78ad6013d6e5536007e1c16e6794", "role": "PositionDescriptor" }, { "chain": "Polygon", "address": "0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9", "role": "PositionManager" }, { "chain": "Polygon", "address": "0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9", "role": "Quoter" }, { "chain": "Polygon", "address": "0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a", "role": "StateView" }, { "chain": "Polygon", "address": "0x1095692a6237d83c6a72f3f5efedb9a670c49223", "role": "Universal Router" }, { "chain": "Polygon", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000004", "role": "PoolManager" }, { "chain": "Unichain", "address": "0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722", "role": "PositionDescriptor" }, { "chain": "Unichain", "address": "0x4529a01c7a0410167c5740c487a8de60232617bf", "role": "PositionManager" }, { "chain": "Unichain", "address": "0x333e3c607b141b18ff6de9f258db6e77fe7491e0", "role": "Quoter" }, { "chain": "Unichain", "address": "0x86e8631a016f9068c3f085faf484ee3f5fdee8f2", "role": "StateView" }, { "chain": "Unichain", "address": "0xef740bf23acae26f6492b10de645d6b98dc8eaf3", "role": "Universal Router" }, { "chain": "Unichain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Monad", "address": "0x188d586ddcf52439676ca21a244753fa19f9ea8e", "role": "PoolManager" }, { "chain": "Monad", "address": "0x5770d2914355a6d0a39a70aeea9bcce55df4201b", "role": "PositionDescriptor" }, { "chain": "Monad", "address": "0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016", "role": "PositionManager" }, { "chain": "Monad", "address": "0xa222dd357a9076d1091ed6aa2e16c9742dd26891", "role": "Quoter" }, { "chain": "Monad", "address": "0x77395f3b2e73ae90843717371294fa97cc419d64", "role": "StateView" }, { "chain": "Monad", "address": "0x0d97dc33264bfc1c226207428a79b26757fb9dc3", "role": "Universal Router" }, { "chain": "Monad", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Binance", "address": "0x28e2ea090877bf75740558f6bfb36a5ffee9e9df", "role": "PoolManager" }, { "chain": "Binance", "address": "0xf0432f360703ec3d33931a8356a75a77d8d380e1", "role": "PositionDescriptor" }, { "chain": "Binance", "address": "0x7a4a5c919ae2541aed11041a1aeee68f1287f95b", "role": "PositionManager" }, { "chain": "Binance", "address": "0x9f75dd27d6664c475b90e105573e550ff69437b0", "role": "Quoter" }, { "chain": "Binance", "address": "0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4", "role": "StateView" }, { "chain": "Binance", "address": "0x1906c1d672b88cd1b9ac7593301ca990f94eae07", "role": "Universal Router" }, { "chain": "Binance", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Soneium", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Soneium", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Soneium", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Soneium", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Soneium", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Soneium", "address": "0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df", "role": "Universal Router" }, { "chain": "Soneium", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Avalanche", "address": "0x06380c0e0912312b5150364b9dc4542ba0dbbc85", "role": "PoolManager" }, { "chain": "Avalanche", "address": "0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9", "role": "PositionDescriptor" }, { "chain": "Avalanche", "address": "0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd", "role": "PositionManager" }, { "chain": "Avalanche", "address": "0xbe40675bb704506a3c2ccfb762dcfd1e979845c2", "role": "Quoter" }, { "chain": "Avalanche", "address": "0xc3c9e198c735a4b97e3e683f391ccbdd60b69286", "role": "StateView" }, { "chain": "Avalanche", "address": "0x94b75331ae8d42c1b61065089b7d48fe14aa73b7", "role": "Universal Router" }, { "chain": "Avalanche", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "World Chain", "address": "0xb1860d529182ac3bc1f51fa2abd56662b7d13f33", "role": "PoolManager" }, { "chain": "World Chain", "address": "0x7da419153bd420b689f312363756d76836aeace4", "role": "PositionDescriptor" }, { "chain": "World Chain", "address": "0xc585e0f504613b5fbf874f21af14c65260fb41fa", "role": "PositionManager" }, { "chain": "World Chain", "address": "0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0", "role": "Quoter" }, { "chain": "World Chain", "address": "0x51d394718bc09297262e368c1a481217fdeb71eb", "role": "StateView" }, { "chain": "World Chain", "address": "0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743", "role": "Universal Router" }, { "chain": "World Chain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "X Layer", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Blast", "address": "0x1631559198a9e474033433b2958dabc135ab6446", "role": "PoolManager" }, { "chain": "Blast", "address": "0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97", "role": "PositionDescriptor" }, { "chain": "Blast", "address": "0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad", "role": "PositionManager" }, { "chain": "Blast", "address": "0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf", "role": "Quoter" }, { "chain": "Blast", "address": "0x12a88ae16f46dce4e8b15368008ab3380885df30", "role": "StateView" }, { "chain": "Blast", "address": "0xeabbcb3e8e415306207ef514f660a3f820025be3", "role": "Universal Router" }, { "chain": "Blast", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Tempo", "address": "0x33620f62c5b9b2086dd6b62f4a297a9f30347029", "role": "PoolManager" }, { "chain": "Tempo", "address": "0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77", "role": "PositionDescriptor" }, { "chain": "Tempo", "address": "0x3fc79444f8eacc1894775493ff3fa41f1e35ce11", "role": "PositionManager" }, { "chain": "Tempo", "address": "0x20e6487c371a2086f841ef453f85378223df4f4e", "role": "Quoter" }, { "chain": "Tempo", "address": "0x21b954fba3f5ddebe77ef2d47a3100c066908b2a", "role": "StateView" }, { "chain": "Tempo", "address": "0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91", "role": "Universal Router" }, { "chain": "Tempo", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ink", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Ink", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Ink", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Ink", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Ink", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Ink", "address": "0x112908dac86e20e7241b0927479ea3bf935d1fa0", "role": "Universal Router" }, { "chain": "Ink", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Zora", "address": "0x0575338e4c17006ae181b47900a84404247ca30f", "role": "PoolManager" }, { "chain": "Zora", "address": "0x7d64630bbb4993b5578dbd65e400961c9e68d55a", "role": "PositionDescriptor" }, { "chain": "Zora", "address": "0xf66c7b99e2040f0d9b326b3b7c152e9663543d63", "role": "PositionManager" }, { "chain": "Zora", "address": "0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6", "role": "Quoter" }, { "chain": "Zora", "address": "0x385785af07d63b50d0a0ea57c4ff89d06adf7328", "role": "StateView" }, { "chain": "Zora", "address": "0x3315ef7ca28db74abadc6c44570efdf06b04b020", "role": "Universal Router" }, { "chain": "Zora", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ethereum", "address": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "role": "UNI governance token" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x1a9C8182C09F50C8318d769245beA52c32BE35BC (PoolManager owner (Timelock, 2-day minimum delay)) - https://defipunkd.com/address/1/0x408ED6354d4973f66138C91495F2f2FCbd8724C3 (GovernorBravo proxy (admin of the Timelock)) - https://defipunkd.com/address/1/0x3e51b68a157b573303155300a6593224f009990a (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497D0Cd94564c118C661384 (Uniswap DAO Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497d0Cd94564c118039df83 (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503475d9f9244252322473c9Cd (Uniswap Governance Timelock) - https://defipunkd.com/address/8453/0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9 (Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/10/0xa1dD330d602c32622AA270Ea73d078B803Cb3518 (Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/81457/0x2339C0d23b60739B3E5ABF201F05903D24A26C77 (Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - Binance: 0x341c1511141022cf8eE20824Ae0fFA3491F1302b (chain not supported by the read API) - https://defipunkd.com/address/43114/0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc (Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint) - https://defipunkd.com/address/1/0x000000000004444c5dc75cB358380D2e3dE08A90 (PoolManager) - https://defipunkd.com/address/1/0xd1428ba554f4c8450b763a0b2040a4935c63f06c (PositionDescriptor) - https://defipunkd.com/address/1/0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e (PositionManager) - https://defipunkd.com/address/1/0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203 (Quoter) - https://defipunkd.com/address/1/0x7ffe42c4a5deea5b0fec41c94c136cf115597227 (StateView) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (Universal Router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/42161/0x360e68faccca8ca495c1b759fd9eee466db9fb32 (PoolManager) - https://defipunkd.com/address/42161/0xe2023f3fa515cf070e07fd9d51c1d236e07843f4 (PositionDescriptor) - https://defipunkd.com/address/42161/0xd88f38f930b7952f2db2432cb002e7abbf3dd869 (PositionManager) - https://defipunkd.com/address/42161/0x3972c00f7ed4885e145823eb7c655375d275a1c5 (Quoter) - https://defipunkd.com/address/42161/0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (StateView) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (Universal Router) - https://defipunkd.com/address/42161/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/8453/0x498581ff718922c3f8e6a244956af099b2652b2b (PoolManager) - https://defipunkd.com/address/8453/0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5 (PositionDescriptor) - https://defipunkd.com/address/8453/0x7c5f5a4bbd8fd63184577525326123b519429bdc (PositionManager) - https://defipunkd.com/address/8453/0x0d5e0f971ed27fbff6c2837bf31316121532048d (Quoter) - https://defipunkd.com/address/8453/0xa3c0c9b65bad0b08107aa264b0f3db444b867a71 (StateView) - https://defipunkd.com/address/8453/0x6ff5693b99212da76ad316178a184ab56d299b43 (Universal Router) - https://defipunkd.com/address/8453/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/10/0x9a13f98cb987694c9f086b1f5eb990eea8264ec3 (PoolManager) - https://defipunkd.com/address/10/0xedd81496169c46df161b8513a52ffecaaaa66743 (PositionDescriptor) - https://defipunkd.com/address/10/0x3c3ea4b57a46241e54610e5f022e5c45859a1017 (PositionManager) - https://defipunkd.com/address/10/0x1f3131a13296fb91c90870043742c3cdbff1a8d7 (Quoter) - https://defipunkd.com/address/10/0xc18a3169788f4f75a170290584eca6395c75ecdb (StateView) - https://defipunkd.com/address/10/0x851116d9223fabed8e56c0e6b8ad0c31d98b3507 (Universal Router) - https://defipunkd.com/address/10/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/137/0x67366782805870060151383f4bbff9dab53e5cd6 (PoolManager) - https://defipunkd.com/address/137/0x0892771f0c1b78ad6013d6e5536007e1c16e6794 (PositionDescriptor) - https://defipunkd.com/address/137/0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9 (PositionManager) - https://defipunkd.com/address/137/0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9 (Quoter) - https://defipunkd.com/address/137/0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a (StateView) - https://defipunkd.com/address/137/0x1095692a6237d83c6a72f3f5efedb9a670c49223 (Universal Router) - https://defipunkd.com/address/137/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000004 (PoolManager) - https://defipunkd.com/address/130/0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722 (PositionDescriptor) - https://defipunkd.com/address/130/0x4529a01c7a0410167c5740c487a8de60232617bf (PositionManager) - https://defipunkd.com/address/130/0x333e3c607b141b18ff6de9f258db6e77fe7491e0 (Quoter) - https://defipunkd.com/address/130/0x86e8631a016f9068c3f085faf484ee3f5fdee8f2 (StateView) - https://defipunkd.com/address/130/0xef740bf23acae26f6492b10de645d6b98dc8eaf3 (Universal Router) - https://defipunkd.com/address/130/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Monad: 0x188d586ddcf52439676ca21a244753fa19f9ea8e (chain not supported by the read API) - Monad: 0x5770d2914355a6d0a39a70aeea9bcce55df4201b (chain not supported by the read API) - Monad: 0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016 (chain not supported by the read API) - Monad: 0xa222dd357a9076d1091ed6aa2e16c9742dd26891 (chain not supported by the read API) - Monad: 0x77395f3b2e73ae90843717371294fa97cc419d64 (chain not supported by the read API) - Monad: 0x0d97dc33264bfc1c226207428a79b26757fb9dc3 (chain not supported by the read API) - Monad: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Binance: 0x28e2ea090877bf75740558f6bfb36a5ffee9e9df (chain not supported by the read API) - Binance: 0xf0432f360703ec3d33931a8356a75a77d8d380e1 (chain not supported by the read API) - Binance: 0x7a4a5c919ae2541aed11041a1aeee68f1287f95b (chain not supported by the read API) - Binance: 0x9f75dd27d6664c475b90e105573e550ff69437b0 (chain not supported by the read API) - Binance: 0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4 (chain not supported by the read API) - Binance: 0x1906c1d672b88cd1b9ac7593301ca990f94eae07 (chain not supported by the read API) - Binance: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Soneium: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Soneium: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Soneium: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Soneium: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Soneium: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Soneium: 0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df (chain not supported by the read API) - Soneium: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/43114/0x06380c0e0912312b5150364b9dc4542ba0dbbc85 (PoolManager) - https://defipunkd.com/address/43114/0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9 (PositionDescriptor) - https://defipunkd.com/address/43114/0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd (PositionManager) - https://defipunkd.com/address/43114/0xbe40675bb704506a3c2ccfb762dcfd1e979845c2 (Quoter) - https://defipunkd.com/address/43114/0xc3c9e198c735a4b97e3e683f391ccbdd60b69286 (StateView) - https://defipunkd.com/address/43114/0x94b75331ae8d42c1b61065089b7d48fe14aa73b7 (Universal Router) - https://defipunkd.com/address/43114/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - World Chain: 0xb1860d529182ac3bc1f51fa2abd56662b7d13f33 (chain not supported by the read API) - World Chain: 0x7da419153bd420b689f312363756d76836aeace4 (chain not supported by the read API) - World Chain: 0xc585e0f504613b5fbf874f21af14c65260fb41fa (chain not supported by the read API) - World Chain: 0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0 (chain not supported by the read API) - World Chain: 0x51d394718bc09297262e368c1a481217fdeb71eb (chain not supported by the read API) - World Chain: 0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743 (chain not supported by the read API) - World Chain: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - X Layer: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - https://defipunkd.com/address/81457/0x1631559198a9e474033433b2958dabc135ab6446 (PoolManager) - https://defipunkd.com/address/81457/0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97 (PositionDescriptor) - https://defipunkd.com/address/81457/0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad (PositionManager) - https://defipunkd.com/address/81457/0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf (Quoter) - https://defipunkd.com/address/81457/0x12a88ae16f46dce4e8b15368008ab3380885df30 (StateView) - https://defipunkd.com/address/81457/0xeabbcb3e8e415306207ef514f660a3f820025be3 (Universal Router) - https://defipunkd.com/address/81457/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Tempo: 0x33620f62c5b9b2086dd6b62f4a297a9f30347029 (chain not supported by the read API) - Tempo: 0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77 (chain not supported by the read API) - Tempo: 0x3fc79444f8eacc1894775493ff3fa41f1e35ce11 (chain not supported by the read API) - Tempo: 0x20e6487c371a2086f841ef453f85378223df4f4e (chain not supported by the read API) - Tempo: 0x21b954fba3f5ddebe77ef2d47a3100c066908b2a (chain not supported by the read API) - Tempo: 0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91 (chain not supported by the read API) - Tempo: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Ink: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Ink: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Ink: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Ink: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Ink: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Ink: 0x112908dac86e20e7241b0927479ea3bf935d1fa0 (chain not supported by the read API) - Ink: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Zora: 0x0575338e4c17006ae181b47900a84404247ca30f (chain not supported by the read API) - Zora: 0x7d64630bbb4993b5578dbd65e400961c9e68d55a (chain not supported by the read API) - Zora: 0xf66c7b99e2040f0d9b326b3b7c152e9663543d63 (chain not supported by the read API) - Zora: 0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6 (chain not supported by the read API) - Zora: 0x385785af07d63b50d0a0ea57c4ff89d06adf7328 (chain not supported by the read API) - Zora: 0x3315ef7ca28db74abadc6c44570efdf06b04b020 (chain not supported by the read API) - Zora: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/1/0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 (UNI governance token) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: ABILITY-TO-EXIT Evaluate whether users can withdraw their funds on their own terms, even under adversarial admin conditions. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - E1. Enumerate every user-facing exit function in the main contracts: withdraw, redeem, burn, requestWithdrawal, claim, exit, etc. List them by name. Do NOT treat the contract as a monolith. - E2. For EACH exit function in E1: identify its access modifiers and any pause guards (e.g. _checkResumed, whenNotPaused, onlyRole). Functions that gate REQUEST PLACEMENT often differ from functions that CLAIM FINALIZED FUNDS — check both separately. - E3. For each pause guard: identify the role holder (which address holds PAUSE_ROLE / GUARDIAN / etc.) and the maximum pause duration. Specifically check whether PAUSE_INFINITELY (or equivalent uncapped pause) is callable, and which actor can call it (single multisig vs governance vote). For role-holder reads use https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=hasRole&args=0x...,0x... or &method=getRoleAdmin&args=0x.... For "is currently paused" checks use &method=paused or &method=isPaused&args=<resume-code>. Use the BARE method name (no parens). Cite the URL with &block=<n> in evidence[]. - E4. EMERGENCY vs GOVERNANCE pause distinction: many protocols have a fast-acting emergency pause capped at N days and a slow governance pause that can be indefinite. Record both paths separately if present, with their time caps and actor classes. - E5. Queued redemption: documented maximum queue duration, daily withdrawal caps, whether the queue itself is pausable. - E6. Forced-exit / escape-hatch / permissionless emergency-exit mechanism for adversarial-admin scenarios. - E7. Frontend dependency: confirm exit functions are directly callable on-chain (e.g. via Etherscan write tab or a generic wallet) without the project's frontend. Then write the steel-man section per Hard Rule 11. Common red-vs-orange tension on this slice: indefinite pause exists (suggests red) BUT the realistic emergency path is time-capped AND claims of already-finalized exits are not pause-gated (suggests orange). Resolve this by stating who can do what for how long, not by stopping at the worst-case sentence. Grade rules: - green = permissionless exit; pause is either absent, narrowly scoped to clearly-described emergencies with auto-expiry, or capped at ≤7 days; no frontend dependency for exit; claims of already-finalized exits are not pause-gated under any path. - orange = pausable with broad scope OR indefinite pause is reachable only through governance vote (not unilateral admin action), OR queued redemption with documented max > 7 days, OR claims-of-finalized are exempt but new-request placement can be paused indefinitely by governance. - red = exit requires admin signature, OR ANY actor (including governance) can pause CLAIMS of finalized exits indefinitely, OR there is no on-chain exit function at all (purely custodial), OR pause is held by a single EOA / 2-of-3 multisig with no time cap. - unknown = checklist incomplete after checking the sources above. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "ability-to-exit", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.Sources claude-opus-4-6 (autorun) no url chatgpt-thinking-xhigh-5-5 no url unknown (autorun) no url gpt-5.5 no url gemini-3-flash-preview no url View raw submissions ↗ - Uniswap V4 core contracts have zero external dependencies (no oracles, no bridges, no off-chain actors); hooks are optional per-pool plugins chosen by pool creators. Impacted TVS from core dependency failure: ~0%.
Verdict
Choosing green because the Uniswap V4 PoolManager core contract makes zero external calls to oracles, bridges, or third-party contracts in its base operation. The only external interaction surface is hooks, which are optional per-pool plugins that users explicitly opt into when choosing which pool to LP in or swap through — a vanilla pool with no hook has literally zero external dependency. The hook architecture is scoped by address-encoded permission bits that are immutable after deployment. The governance-mutable surface is limited to setProtocolFeeController (currently null, gated by 2-day timelocked DAO governance with 40M UNI quorum), which can only affect fee rates, not introduce oracles or bridges. The PositionManager and Universal Router are non-upgradeable and ownerless. Module weighting: the PoolManager singleton holds ~100% of protocol TVS (all liquidity lives in it); there is no separate sub-module with independent TVS. Impacted TVS under any single external dependency failure: effectively 0% for the core; per-pool hook risk is bounded to that individual pool's liquidity and is user-opted.
Steelman argument
Steelman argument The PoolManager core has zero external dependencies (no oracles, no bridges, no off-chain actors); hooks are per-pool opt-in chosen at pool creation and cannot cross-contaminate other pools; governance actions are timelocked and limited to fee parameters.Evidence (9)
- A1
- The PoolManager ABI has no oracle calls, price feed references, or external contract reads. The only two zero-arg view methods are owner() and protocolFeeController(). The swap, modifyLiquidity, donate, and initialize functions take a PoolKey that includes a hooks address, but the hook is per-pool and specified at pool creation — it is not a system-wide external dependency. The PoolManager is a constant-product AMM that prices assets purely from its own liquidity state, with no external price feed. protocolFeeController() currently returns 0x0 (null), meaning no fee controller contract is wired.
- A1
- Hooks are optional, external smart contracts that can be attached per-pool at initialization. They are third-party contracts, not core protocol dependencies. Users who LP into or swap through a vanilla (no-hook) pool have zero external contract dependency. Users who interact with hooked pools opt into the hook's risk profile at the pool level — this is analogous to per-market collateral risk in lending protocols. The PoolManager itself enforces hook permission bits via the hook's address, and hooks cannot retroactively change their permission scope.
- A2
- No off-chain actor committees, oracle committees, or reporter sets exist in the Uniswap V4 core. There are no guardian multisigs, validator sets, or exit-bus signers. The protocol is entirely on-chain and permissionless.
- A3
- Uniswap V4 is deployed independently on each chain (Ethereum, Arbitrum, Base, Optimism, Polygon, etc.) with separate PoolManager singletons per chain. There is no cross-chain bridging or messaging dependency in the core protocol. Each deployment is self-contained.
- A4
- No nested collateral or restaking chains. Uniswap V4 is a spot DEX where users deposit token pairs directly into pools. There is no receipt-of-receipt design or collateral chain.
- A6
- Because there are no external dependencies in the core contracts, no fallback mechanisms are needed. The PoolManager has no pause function, no oracle circuit breaker, and no emergency shutdown. The only owner-callable functions are setProtocolFeeController and transferOwnership, both gated by the Uniswap DAO governance timelock with a 2-day minimum delay.
- A7
- For L2 deployments (Arbitrum, Base, Optimism, etc.), the usual centralized sequencer liveness dependency applies — but this is the base-chain substrate for those deployments, not an additional dependency introduced by Uniswap V4. The Ethereum L1 deployment has no sequencer dependency.
- A8
- Uniswap V4 core requires no keepers, liquidation bots, relayers, or off-chain actors for its normal operation. Swaps and liquidity operations are user-initiated. There are no auto-compounders or deposit relayers at the core level.
- A9
- The PoolManager owner (Uniswap DAO timelock at 0x1a9C8182C09F50C8318d769245beA52c32BE35BC, with 2-day minimum delay, admin = GovernorBravo at 0x408ED6354d4973f66138C91495F2f2FCbd8724C3 using UNI token voting with 40M UNI quorum) can call setProtocolFeeController(address) which sets an external contract that determines protocol fees. However: (a) this is gated by governance + 2-day timelock, (b) the protocolFeeController is currently null (0x0), and (c) even if set, it can only affect protocol fee rates (capped by ProtocolFeeTooLarge revert), not user principal. It cannot introduce new oracles, bridges, or staking modules. The PositionManager and Universal Router are non-upgradeable and ownerless per the OpenZeppelin audit.
Why is this consensus tentative?- only 0/5 sources have a public chat share link
- total support weight 0.61 below confidence floor (1.5)
A fresh independent run can strengthen (or overturn) the verdict.
Run your own prompt Submit run ↗### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v4 - protocol.name: Uniswap V4 - protocol.chains: Ethereum, Base, Arbitrum, Polygon, Binance, Unichain, Monad, Soneium, Optimism, Tempo, Avalanche, World Chain, X Layer, Blast, Ink, Zora - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/Uniswap/v4-core/tree/main/docs/security/audits, https://github.com/Uniswap/v4-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-07-uniswap-v4-core-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x1a9C8182C09F50C8318d769245beA52c32BE35BC", "role": "PoolManager owner (Timelock, 2-day minimum delay)" }, { "chain": "Ethereum", "address": "0x408ED6354d4973f66138C91495F2f2FCbd8724C3", "role": "GovernorBravo proxy (admin of the Timelock)" }, { "chain": "Ethereum", "address": "0x3e51b68a157b573303155300a6593224f009990a", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497D0Cd94564c118C661384", "role": "Uniswap DAO Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497d0Cd94564c118039df83", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503475d9f9244252322473c9Cd", "role": "Uniswap Governance Timelock" }, { "chain": "Base", "address": "0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9", "role": "Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Optimism", "address": "0xa1dD330d602c32622AA270Ea73d078B803Cb3518", "role": "Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Blast", "address": "0x2339C0d23b60739B3E5ABF201F05903D24A26C77", "role": "Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Binance", "address": "0x341c1511141022cf8eE20824Ae0fFA3491F1302b", "role": "BSC PoolManager owner; Uniswap Wormhole Message Receiver linked to an Ethereum sender owned by the Uniswap timelock" }, { "chain": "Avalanche", "address": "0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc", "role": "Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint" }, { "chain": "Ethereum", "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "role": "PoolManager" }, { "chain": "Ethereum", "address": "0xd1428ba554f4c8450b763a0b2040a4935c63f06c", "role": "PositionDescriptor" }, { "chain": "Ethereum", "address": "0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e", "role": "PositionManager" }, { "chain": "Ethereum", "address": "0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203", "role": "Quoter" }, { "chain": "Ethereum", "address": "0x7ffe42c4a5deea5b0fec41c94c136cf115597227", "role": "StateView" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "Universal Router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Arbitrum", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Arbitrum", "address": "0xe2023f3fa515cf070e07fd9d51c1d236e07843f4", "role": "PositionDescriptor" }, { "chain": "Arbitrum", "address": "0xd88f38f930b7952f2db2432cb002e7abbf3dd869", "role": "PositionManager" }, { "chain": "Arbitrum", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Arbitrum", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "Universal Router" }, { "chain": "Arbitrum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Base", "address": "0x498581ff718922c3f8e6a244956af099b2652b2b", "role": "PoolManager" }, { "chain": "Base", "address": "0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5", "role": "PositionDescriptor" }, { "chain": "Base", "address": "0x7c5f5a4bbd8fd63184577525326123b519429bdc", "role": "PositionManager" }, { "chain": "Base", "address": "0x0d5e0f971ed27fbff6c2837bf31316121532048d", "role": "Quoter" }, { "chain": "Base", "address": "0xa3c0c9b65bad0b08107aa264b0f3db444b867a71", "role": "StateView" }, { "chain": "Base", "address": "0x6ff5693b99212da76ad316178a184ab56d299b43", "role": "Universal Router" }, { "chain": "Base", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Optimism", "address": "0x9a13f98cb987694c9f086b1f5eb990eea8264ec3", "role": "PoolManager" }, { "chain": "Optimism", "address": "0xedd81496169c46df161b8513a52ffecaaaa66743", "role": "PositionDescriptor" }, { "chain": "Optimism", "address": "0x3c3ea4b57a46241e54610e5f022e5c45859a1017", "role": "PositionManager" }, { "chain": "Optimism", "address": "0x1f3131a13296fb91c90870043742c3cdbff1a8d7", "role": "Quoter" }, { "chain": "Optimism", "address": "0xc18a3169788f4f75a170290584eca6395c75ecdb", "role": "StateView" }, { "chain": "Optimism", "address": "0x851116d9223fabed8e56c0e6b8ad0c31d98b3507", "role": "Universal Router" }, { "chain": "Optimism", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Polygon", "address": "0x67366782805870060151383f4bbff9dab53e5cd6", "role": "PoolManager" }, { "chain": "Polygon", "address": "0x0892771f0c1b78ad6013d6e5536007e1c16e6794", "role": "PositionDescriptor" }, { "chain": "Polygon", "address": "0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9", "role": "PositionManager" }, { "chain": "Polygon", "address": "0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9", "role": "Quoter" }, { "chain": "Polygon", "address": "0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a", "role": "StateView" }, { "chain": "Polygon", "address": "0x1095692a6237d83c6a72f3f5efedb9a670c49223", "role": "Universal Router" }, { "chain": "Polygon", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000004", "role": "PoolManager" }, { "chain": "Unichain", "address": "0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722", "role": "PositionDescriptor" }, { "chain": "Unichain", "address": "0x4529a01c7a0410167c5740c487a8de60232617bf", "role": "PositionManager" }, { "chain": "Unichain", "address": "0x333e3c607b141b18ff6de9f258db6e77fe7491e0", "role": "Quoter" }, { "chain": "Unichain", "address": "0x86e8631a016f9068c3f085faf484ee3f5fdee8f2", "role": "StateView" }, { "chain": "Unichain", "address": "0xef740bf23acae26f6492b10de645d6b98dc8eaf3", "role": "Universal Router" }, { "chain": "Unichain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Monad", "address": "0x188d586ddcf52439676ca21a244753fa19f9ea8e", "role": "PoolManager" }, { "chain": "Monad", "address": "0x5770d2914355a6d0a39a70aeea9bcce55df4201b", "role": "PositionDescriptor" }, { "chain": "Monad", "address": "0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016", "role": "PositionManager" }, { "chain": "Monad", "address": "0xa222dd357a9076d1091ed6aa2e16c9742dd26891", "role": "Quoter" }, { "chain": "Monad", "address": "0x77395f3b2e73ae90843717371294fa97cc419d64", "role": "StateView" }, { "chain": "Monad", "address": "0x0d97dc33264bfc1c226207428a79b26757fb9dc3", "role": "Universal Router" }, { "chain": "Monad", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Binance", "address": "0x28e2ea090877bf75740558f6bfb36a5ffee9e9df", "role": "PoolManager" }, { "chain": "Binance", "address": "0xf0432f360703ec3d33931a8356a75a77d8d380e1", "role": "PositionDescriptor" }, { "chain": "Binance", "address": "0x7a4a5c919ae2541aed11041a1aeee68f1287f95b", "role": "PositionManager" }, { "chain": "Binance", "address": "0x9f75dd27d6664c475b90e105573e550ff69437b0", "role": "Quoter" }, { "chain": "Binance", "address": "0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4", "role": "StateView" }, { "chain": "Binance", "address": "0x1906c1d672b88cd1b9ac7593301ca990f94eae07", "role": "Universal Router" }, { "chain": "Binance", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Soneium", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Soneium", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Soneium", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Soneium", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Soneium", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Soneium", "address": "0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df", "role": "Universal Router" }, { "chain": "Soneium", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Avalanche", "address": "0x06380c0e0912312b5150364b9dc4542ba0dbbc85", "role": "PoolManager" }, { "chain": "Avalanche", "address": "0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9", "role": "PositionDescriptor" }, { "chain": "Avalanche", "address": "0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd", "role": "PositionManager" }, { "chain": "Avalanche", "address": "0xbe40675bb704506a3c2ccfb762dcfd1e979845c2", "role": "Quoter" }, { "chain": "Avalanche", "address": "0xc3c9e198c735a4b97e3e683f391ccbdd60b69286", "role": "StateView" }, { "chain": "Avalanche", "address": "0x94b75331ae8d42c1b61065089b7d48fe14aa73b7", "role": "Universal Router" }, { "chain": "Avalanche", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "World Chain", "address": "0xb1860d529182ac3bc1f51fa2abd56662b7d13f33", "role": "PoolManager" }, { "chain": "World Chain", "address": "0x7da419153bd420b689f312363756d76836aeace4", "role": "PositionDescriptor" }, { "chain": "World Chain", "address": "0xc585e0f504613b5fbf874f21af14c65260fb41fa", "role": "PositionManager" }, { "chain": "World Chain", "address": "0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0", "role": "Quoter" }, { "chain": "World Chain", "address": "0x51d394718bc09297262e368c1a481217fdeb71eb", "role": "StateView" }, { "chain": "World Chain", "address": "0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743", "role": "Universal Router" }, { "chain": "World Chain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "X Layer", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Blast", "address": "0x1631559198a9e474033433b2958dabc135ab6446", "role": "PoolManager" }, { "chain": "Blast", "address": "0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97", "role": "PositionDescriptor" }, { "chain": "Blast", "address": "0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad", "role": "PositionManager" }, { "chain": "Blast", "address": "0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf", "role": "Quoter" }, { "chain": "Blast", "address": "0x12a88ae16f46dce4e8b15368008ab3380885df30", "role": "StateView" }, { "chain": "Blast", "address": "0xeabbcb3e8e415306207ef514f660a3f820025be3", "role": "Universal Router" }, { "chain": "Blast", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Tempo", "address": "0x33620f62c5b9b2086dd6b62f4a297a9f30347029", "role": "PoolManager" }, { "chain": "Tempo", "address": "0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77", "role": "PositionDescriptor" }, { "chain": "Tempo", "address": "0x3fc79444f8eacc1894775493ff3fa41f1e35ce11", "role": "PositionManager" }, { "chain": "Tempo", "address": "0x20e6487c371a2086f841ef453f85378223df4f4e", "role": "Quoter" }, { "chain": "Tempo", "address": "0x21b954fba3f5ddebe77ef2d47a3100c066908b2a", "role": "StateView" }, { "chain": "Tempo", "address": "0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91", "role": "Universal Router" }, { "chain": "Tempo", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ink", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Ink", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Ink", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Ink", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Ink", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Ink", "address": "0x112908dac86e20e7241b0927479ea3bf935d1fa0", "role": "Universal Router" }, { "chain": "Ink", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Zora", "address": "0x0575338e4c17006ae181b47900a84404247ca30f", "role": "PoolManager" }, { "chain": "Zora", "address": "0x7d64630bbb4993b5578dbd65e400961c9e68d55a", "role": "PositionDescriptor" }, { "chain": "Zora", "address": "0xf66c7b99e2040f0d9b326b3b7c152e9663543d63", "role": "PositionManager" }, { "chain": "Zora", "address": "0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6", "role": "Quoter" }, { "chain": "Zora", "address": "0x385785af07d63b50d0a0ea57c4ff89d06adf7328", "role": "StateView" }, { "chain": "Zora", "address": "0x3315ef7ca28db74abadc6c44570efdf06b04b020", "role": "Universal Router" }, { "chain": "Zora", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ethereum", "address": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "role": "UNI governance token" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x1a9C8182C09F50C8318d769245beA52c32BE35BC (PoolManager owner (Timelock, 2-day minimum delay)) - https://defipunkd.com/address/1/0x408ED6354d4973f66138C91495F2f2FCbd8724C3 (GovernorBravo proxy (admin of the Timelock)) - https://defipunkd.com/address/1/0x3e51b68a157b573303155300a6593224f009990a (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497D0Cd94564c118C661384 (Uniswap DAO Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497d0Cd94564c118039df83 (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503475d9f9244252322473c9Cd (Uniswap Governance Timelock) - https://defipunkd.com/address/8453/0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9 (Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/10/0xa1dD330d602c32622AA270Ea73d078B803Cb3518 (Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/81457/0x2339C0d23b60739B3E5ABF201F05903D24A26C77 (Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - Binance: 0x341c1511141022cf8eE20824Ae0fFA3491F1302b (chain not supported by the read API) - https://defipunkd.com/address/43114/0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc (Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint) - https://defipunkd.com/address/1/0x000000000004444c5dc75cB358380D2e3dE08A90 (PoolManager) - https://defipunkd.com/address/1/0xd1428ba554f4c8450b763a0b2040a4935c63f06c (PositionDescriptor) - https://defipunkd.com/address/1/0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e (PositionManager) - https://defipunkd.com/address/1/0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203 (Quoter) - https://defipunkd.com/address/1/0x7ffe42c4a5deea5b0fec41c94c136cf115597227 (StateView) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (Universal Router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/42161/0x360e68faccca8ca495c1b759fd9eee466db9fb32 (PoolManager) - https://defipunkd.com/address/42161/0xe2023f3fa515cf070e07fd9d51c1d236e07843f4 (PositionDescriptor) - https://defipunkd.com/address/42161/0xd88f38f930b7952f2db2432cb002e7abbf3dd869 (PositionManager) - https://defipunkd.com/address/42161/0x3972c00f7ed4885e145823eb7c655375d275a1c5 (Quoter) - https://defipunkd.com/address/42161/0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (StateView) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (Universal Router) - https://defipunkd.com/address/42161/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/8453/0x498581ff718922c3f8e6a244956af099b2652b2b (PoolManager) - https://defipunkd.com/address/8453/0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5 (PositionDescriptor) - https://defipunkd.com/address/8453/0x7c5f5a4bbd8fd63184577525326123b519429bdc (PositionManager) - https://defipunkd.com/address/8453/0x0d5e0f971ed27fbff6c2837bf31316121532048d (Quoter) - https://defipunkd.com/address/8453/0xa3c0c9b65bad0b08107aa264b0f3db444b867a71 (StateView) - https://defipunkd.com/address/8453/0x6ff5693b99212da76ad316178a184ab56d299b43 (Universal Router) - https://defipunkd.com/address/8453/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/10/0x9a13f98cb987694c9f086b1f5eb990eea8264ec3 (PoolManager) - https://defipunkd.com/address/10/0xedd81496169c46df161b8513a52ffecaaaa66743 (PositionDescriptor) - https://defipunkd.com/address/10/0x3c3ea4b57a46241e54610e5f022e5c45859a1017 (PositionManager) - https://defipunkd.com/address/10/0x1f3131a13296fb91c90870043742c3cdbff1a8d7 (Quoter) - https://defipunkd.com/address/10/0xc18a3169788f4f75a170290584eca6395c75ecdb (StateView) - https://defipunkd.com/address/10/0x851116d9223fabed8e56c0e6b8ad0c31d98b3507 (Universal Router) - https://defipunkd.com/address/10/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/137/0x67366782805870060151383f4bbff9dab53e5cd6 (PoolManager) - https://defipunkd.com/address/137/0x0892771f0c1b78ad6013d6e5536007e1c16e6794 (PositionDescriptor) - https://defipunkd.com/address/137/0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9 (PositionManager) - https://defipunkd.com/address/137/0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9 (Quoter) - https://defipunkd.com/address/137/0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a (StateView) - https://defipunkd.com/address/137/0x1095692a6237d83c6a72f3f5efedb9a670c49223 (Universal Router) - https://defipunkd.com/address/137/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000004 (PoolManager) - https://defipunkd.com/address/130/0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722 (PositionDescriptor) - https://defipunkd.com/address/130/0x4529a01c7a0410167c5740c487a8de60232617bf (PositionManager) - https://defipunkd.com/address/130/0x333e3c607b141b18ff6de9f258db6e77fe7491e0 (Quoter) - https://defipunkd.com/address/130/0x86e8631a016f9068c3f085faf484ee3f5fdee8f2 (StateView) - https://defipunkd.com/address/130/0xef740bf23acae26f6492b10de645d6b98dc8eaf3 (Universal Router) - https://defipunkd.com/address/130/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Monad: 0x188d586ddcf52439676ca21a244753fa19f9ea8e (chain not supported by the read API) - Monad: 0x5770d2914355a6d0a39a70aeea9bcce55df4201b (chain not supported by the read API) - Monad: 0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016 (chain not supported by the read API) - Monad: 0xa222dd357a9076d1091ed6aa2e16c9742dd26891 (chain not supported by the read API) - Monad: 0x77395f3b2e73ae90843717371294fa97cc419d64 (chain not supported by the read API) - Monad: 0x0d97dc33264bfc1c226207428a79b26757fb9dc3 (chain not supported by the read API) - Monad: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Binance: 0x28e2ea090877bf75740558f6bfb36a5ffee9e9df (chain not supported by the read API) - Binance: 0xf0432f360703ec3d33931a8356a75a77d8d380e1 (chain not supported by the read API) - Binance: 0x7a4a5c919ae2541aed11041a1aeee68f1287f95b (chain not supported by the read API) - Binance: 0x9f75dd27d6664c475b90e105573e550ff69437b0 (chain not supported by the read API) - Binance: 0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4 (chain not supported by the read API) - Binance: 0x1906c1d672b88cd1b9ac7593301ca990f94eae07 (chain not supported by the read API) - Binance: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Soneium: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Soneium: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Soneium: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Soneium: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Soneium: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Soneium: 0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df (chain not supported by the read API) - Soneium: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/43114/0x06380c0e0912312b5150364b9dc4542ba0dbbc85 (PoolManager) - https://defipunkd.com/address/43114/0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9 (PositionDescriptor) - https://defipunkd.com/address/43114/0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd (PositionManager) - https://defipunkd.com/address/43114/0xbe40675bb704506a3c2ccfb762dcfd1e979845c2 (Quoter) - https://defipunkd.com/address/43114/0xc3c9e198c735a4b97e3e683f391ccbdd60b69286 (StateView) - https://defipunkd.com/address/43114/0x94b75331ae8d42c1b61065089b7d48fe14aa73b7 (Universal Router) - https://defipunkd.com/address/43114/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - World Chain: 0xb1860d529182ac3bc1f51fa2abd56662b7d13f33 (chain not supported by the read API) - World Chain: 0x7da419153bd420b689f312363756d76836aeace4 (chain not supported by the read API) - World Chain: 0xc585e0f504613b5fbf874f21af14c65260fb41fa (chain not supported by the read API) - World Chain: 0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0 (chain not supported by the read API) - World Chain: 0x51d394718bc09297262e368c1a481217fdeb71eb (chain not supported by the read API) - World Chain: 0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743 (chain not supported by the read API) - World Chain: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - X Layer: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - https://defipunkd.com/address/81457/0x1631559198a9e474033433b2958dabc135ab6446 (PoolManager) - https://defipunkd.com/address/81457/0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97 (PositionDescriptor) - https://defipunkd.com/address/81457/0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad (PositionManager) - https://defipunkd.com/address/81457/0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf (Quoter) - https://defipunkd.com/address/81457/0x12a88ae16f46dce4e8b15368008ab3380885df30 (StateView) - https://defipunkd.com/address/81457/0xeabbcb3e8e415306207ef514f660a3f820025be3 (Universal Router) - https://defipunkd.com/address/81457/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Tempo: 0x33620f62c5b9b2086dd6b62f4a297a9f30347029 (chain not supported by the read API) - Tempo: 0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77 (chain not supported by the read API) - Tempo: 0x3fc79444f8eacc1894775493ff3fa41f1e35ce11 (chain not supported by the read API) - Tempo: 0x20e6487c371a2086f841ef453f85378223df4f4e (chain not supported by the read API) - Tempo: 0x21b954fba3f5ddebe77ef2d47a3100c066908b2a (chain not supported by the read API) - Tempo: 0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91 (chain not supported by the read API) - Tempo: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Ink: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Ink: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Ink: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Ink: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Ink: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Ink: 0x112908dac86e20e7241b0927479ea3bf935d1fa0 (chain not supported by the read API) - Ink: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Zora: 0x0575338e4c17006ae181b47900a84404247ca30f (chain not supported by the read API) - Zora: 0x7d64630bbb4993b5578dbd65e400961c9e68d55a (chain not supported by the read API) - Zora: 0xf66c7b99e2040f0d9b326b3b7c152e9663543d63 (chain not supported by the read API) - Zora: 0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6 (chain not supported by the read API) - Zora: 0x385785af07d63b50d0a0ea57c4ff89d06adf7328 (chain not supported by the read API) - Zora: 0x3315ef7ca28db74abadc6c44570efdf06b04b020 (chain not supported by the read API) - Zora: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/1/0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 (UNI governance token) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: AUTONOMY Evaluate this protocol's autonomy: can a failure of anything outside its own contracts cause theft or loss of user principal, loss of unclaimed yield, or materially change the protocol's expected performance? "Autonomy" is not "has zero external touchpoints" — it is "external failures are either survivable or recoverable without user loss". This slice adapts DefiScan v1's Autonomy dimension; dependencies are one of several criteria, not the whole frame. GUARDRAILS (read before grading): - Category alone (Liquid Staking, Bridge, RWA Lending, Restaking, …) does NOT force a grade. A category is a hint about where to look; the grade must come from the concrete A1–A9 findings below. - Base-chain consensus (Ethereum PoS, the chain's validator set, the canonical Deposit Contract at 0x00000000219ab540356cBB839Cbe05303d7705Fa) is the SUBSTRATE, not a dependency, for any protocol deployed on that chain. Do not list "depends on Ethereum" as a finding. - Oracles or other integrations used by DOWNSTREAM protocols that happen to read this protocol's token (e.g. Chainlink stETH/USD consumed by Aave) are NOT this protocol's dependencies. Count only what THIS protocol's contracts call or trust on-chain. If a feed or contract appears in the protocol's docs only as reference material for third-party integrators, EXCLUDE IT ENTIRELY — do not log it as a finding even with a "peripheral" or "referenced only" caveat. - "Upgradeable admin can change things" belongs to the CONTROL slice; only count it here when the upgrade surface lets governance silently swap an external dependency (see A9). - Underlying-asset risk in opt-in, isolated markets is NOT autonomy-red on its own. When a protocol wraps third-party yield-bearing assets (LSTs, LRTs, ERC-4626 vaults, lending receipts, restaked tokens) into per-market silos that users explicitly choose, a failure of one underlying does NOT propagate to other markets and is risk the user opted into per-market. Record it under A4 with depth and propagation scope, but do not let it alone drive a red verdict — red requires an external dependency that cross-cuts the protocol or that the user did not opt into at deposit time. A failure mode that is "if the LRT you deposited is hacked, your principal in that LRT-backed market is impaired" is the underlying's autonomy story, not this protocol's; grade it on whether THIS protocol introduces additional dependencies on top. - Sub-module enumeration is mandatory before grading. If the protocol ships distinct product lines or modules (e.g., a v2 core AMM plus a newer perps/funding-rate module, a lending pool plus a separate vault layer, an L1 core plus a cross-chain extension), enumerate each in findings and grade against the WORST module weighted by its share of TVS or its blast radius. A green core does not rescue an orange/red sub-module; conversely, a small red sub-module with capped TVS may bound the overall grade to orange. Name each module by its on-chain factory or router address. If you do not know whether a module exists, that is an unknowns[] entry, not silence. EXPLICIT TVS WEIGHTING: in the verdict, state each module's approximate share of total protocol TVS (use "~X%" if exact figures unavailable; check DeFiLlama or block-explorer balances on the module's main contract) and how that share informs the weighted grade. Format: "Module A holds ~X% of TVS (grade: <g>); Module B holds ~Y% (grade: <g>); weighted overall = <grade> because <reason>." If a red sub-module holds <5% of total TVS and is capped, the overall grade may be orange; if it holds >25%, the overall grade is red. Do not let qualitative reasoning substitute for the percentages — write the numbers. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. External contract calls. Enumerate every external contract the core contracts call or read from (oracles, price feeds, AMM pools, lending pools, staking/deposit contracts, yield wrappers). For each, identify the address, the provider, and what user-facing function of this protocol would break or mis-price if that external contract paused, mis-reported, or behaved adversarially. Grep for "oracle", "aggregator", "getPrice", "latestAnswer", "chainlink", "pyth", "redstone" as a starting point. To verify an oracle is live and what it currently reports, hit https://defipunkd.com/api/contract/read?chainId=<id>&address=<oracle>&method=latestAnswer (or &method=latestRoundData, &method=getPrice, &method=description; use the BARE method name without parens) and cite the URL — the response includes blockNumber/blockHash and rawReturnData, which is stronger evidence than a docs page about which feed "should" be used. - A2. Off-chain actor committees reporting INTO the protocol. Oracle committees, guardian multisigs, DAO-selected validator sets acting as protocol reporters, exit-bus signers, fraud-proof challengers. For each, record committee size, quorum, who picks the members, and what mis-reporting could do (mint, burn, finalize withdrawal, freeze). Distinguish this from governance admins (control slice). NOTE ON STAKING PROTOCOLS: validator slashing and node-operator misbehavior are properties of the base-chain substrate, NOT external dependencies, when the operator set is diversified enough that a coordinated failure caps at <5% principal loss. Count validator/operator risk under A2 ONLY if the operator set is small, non-diversified, or lacks bonding / slashing-insurance / diversification mitigations. A curated set of 30+ independent operators with documented diversification falls under the mitigated path; a 3-operator LST does not. Do not cite the protocol's own risk disclosure as evidence that operator failure = principal loss unless you also check the diversification and bond mitigations. - A3. Bridge / cross-chain messaging dependencies. Only count bridges that carry material TVL or are required for a core user flow. For each, name the bridge operator (canonical L1↔L2, LayerZero, Wormhole, Axelar, custom multisig), the trust model (canonical, optimistic, light-client, guardian set), and what fraction of TVL or users ride on it. "wstETH exists on 15 chains" is not a finding unless material TVL sits there. Before listing any non-primary chain deployment as a dependency, verify it is still operational as of analysis_date — retired or sunset deployments (e.g., Lido-on-Terra, Lido-on-Solana) belong in unknowns[] or should be omitted, never cited as a current dependency. - A4. Nested collateral / restaking chains. For restaking / LRT / receipt-of-receipt designs: record the depth of the collateral chain, every actor with slashing or freezing power at each level, and whether a failure N levels deep propagates to user principal here. - A5. Fork lineage (silent check). If DeFiLlama's forkedFrom is non-empty, record it as one finding and move on. If empty, do NOT add a placeholder finding; it adds noise. - A6. Fallback mechanisms and circuit breakers. What catches an external failure? Sanity-check contracts on oracle reports, rebase bounds, pause paths triggered by bad prices, second-opinion oracles, max-per-block throughput caps, withdrawal queues that absorb bad reports. Record which A1–A4 risks are mitigated by which fallback, and which are unmitigated. For EACH fallback you cite, state its activation status explicitly: (i) LIVE and enforcing on-chain today, (ii) DEPLOYED but not yet wired / activated (e.g., interface exists but the address is zero or the role is unassigned), or (iii) DOCUMENTED / PROPOSED only (forum post, LIP draft, audit pending). Only (i) counts as mitigation for the grade. A fallback in state (ii) or (iii) should be noted but must not reduce the risk in your steel-man or verdict. If you cannot determine activation status, add an unknowns[] entry rather than assume it is live. - A7. Sequencer / L1-liveness dependency BEYOND the base-chain substrate. SCOPE — sequencer risk only counts here when the protocol IS its own L2/L3 appchain or app-rollup, where the sequencer is part of the protocol's own stack and a freeze is a protocol-level outage. A protocol permissionlessly deployed on a third-party L2 inherits that L2's sequencer as substrate, not an A7 dependency. Record the sequencer/DA trust model when A7 applies. - A8. Keeper / relayer / off-chain bot liveness. Protocols that need permissionless-but-necessary off-chain actors (liquidation bots, auto-compounders, deposit relayers, intent solvers). Record whether the role is permissionless, what degrades if nobody runs it (yield paused, bad debt accumulates, positions go stale), and whether the failure mode is graceful or catastrophic. - A9. Governance-mutable dependency surface. Can an admin or DAO action silently INTRODUCE a NEW EXTERNAL dependency — swap the oracle address to a different provider, register a new staking module that calls an untrusted contract, add a new bridge, route SY through a new external vault — without an exit window for users? Check the upgrade / router / module-registry contracts. Answer: which EXTERNAL dependencies are governance-mutable, who holds that power, and whether there is a timelock or exit window. SCOPE LIMIT — read carefully: A9 is about the *external dependency surface*, not the upgrade surface in general. "The proxyAdmin / EOA can upgrade the router implementation to arbitrary bytecode" is a CONTROL-slice finding (admin can rug), NOT an autonomy-A9 finding. A9 fires only when the upgrade specifically swaps out or adds a contract that THIS protocol calls or trusts (e.g., changing the oracle address from Chainlink to a malicious feed, registering a new SY adapter that points to a third-party vault, redirecting a bridge endpoint). If the only finding is "admin can change implementation," do not log it under A9 and do not let it drive the autonomy grade — note it under control instead. The autonomy-relevant version of the same upgrade key is "admin can swap [specific external address X] without timelock"; that requires identifying the specific external dependency that becomes mutable. STEEL-MAN (per Hard Rule 13): write one-sentence strongest arguments for red, orange, and green using the A1–A9 findings. IMPACTED TVS ESTIMATE: the headline MUST include a rough impacted-TVS figure — the fraction of protocol TVS that could be lost or frozen if the worst-unmitigated dependency you identified failed. Use "~X%" if exact numbers are unavailable, "<1%" for de minimis, "unclear" only if A1–A9 left the question genuinely open (in which case grade=unknown is usually correct). Do NOT substitute qualitative phrases like "significant" — give a number or bracket. GRADE ANCHORS (mapped to DefiScan v1 stages): - green = Stage 2 equivalent. Failure of any external dependency cannot cause loss of user principal or unclaimed yield. Either there are no material external dependencies, or every critical one has a documented fallback (A6) that keeps users whole. Governance cannot silently introduce new dependencies without an exit window (A9). Impacted TVS under any single-dependency failure: effectively 0. - orange = Stage 1 equivalent. Failure of some external dependency can cause loss of unclaimed yield, or can materially change expected performance (pause withdrawals, freeze positions, degrade price quality), but cannot cause loss of principal. Committee-based oracles with sanity checks, canonical-only bridges, fallback paths that exist but are incomplete, or governance-mutable dependencies protected by a ≥7-day timelock. Impacted TVS is bounded and recoverable. - red = Stage 0 equivalent. Failure of an external dependency CAN cause theft or loss of principal. Examples: single-provider oracle with no sanity check or fallback, material TVL on a non-canonical bridge with a guardian multisig, governance can hot-swap oracles or add staking modules with no timelock or exit window, unmitigated keeper-liveness dependency where positions become insolvent if bots stop. Impacted TVS is material. - unknown = checklist incomplete after inspecting source + verified contracts. Prefer unknown over guessing when A1/A6 could not be reconstructed. RESERVE unknown for cases where the CORE ARCHITECTURE itself is unverifiable — not for cases where you merely cannot enumerate every per-market dependency in a multi-market protocol. If the core router/factory/oracle architecture is verifiable on-chain and you can determine whether the core requires external dependencies, grade the architecture even when an exhaustive per-market external-dependency census is infeasible. Acknowledge the per-market gap in unknowns[] but still issue a grade. Refusing to grade a multi-market protocol because you cannot list every SY/vault/market is over-use of unknown; grade the architecture and say so. PROMPT-META CHECK (per Hard Rule 17): before finalizing, verify the verdict cites concrete contract addresses, docs, or code — not the rubric itself. If your verdict says "the protocol belongs to a category the rubric marks red", rewrite it with the A1–A9 finding that actually justifies the grade, or drop to grade=unknown. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "autonomy", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.Sources claude-opus-4-6 (autorun) no url chatgpt-thinking-xhigh-5-5 no url unknown (autorun) no url gpt-5.5 no url gemini-3-flash-preview no url View raw submissions ↗ - Uniswap V4 contracts are fully permissionless with no whitelist/KYC on user entry points; frontend applies industry-baseline sanctions screening with abundant independent access paths available.
Verdict
Choosing green because the PoolManager contract's ABI shows zero admission gates on user-facing functions (A1), no off-chain operator is needed for admission (A2), and the frontend's A3-active enforcement is limited to the industry baseline — OFAC geo-blocking and TRM Labs sanctions wallet screening — while abundant A3b-ii paths exist (verified contract Write tabs on block explorers, SDK, aggregators, third-party frontends). The ToS clauses are standard A3-passive boilerplate. The steelman for orange is weaker because the screening does not exceed what Uniswap, Aave, Curve, and other major DeFi frontends all apply, and permissionless contract access via block explorers is readily available.
Steelman argument
Steelman argument The core PoolManager contract has no whitelist, KYC, or admission gate; frontend screening matches the industry baseline (OFAC geo-blocking + sanctions wallet screening); and multiple independent A3b-ii paths exist including block-explorer Write Contract access and DEX aggregators.Evidence (7)
- A1
- The PoolManager ABI (fetched from the defipunkd surfacer for Ethereum) exposes user-facing functions — swap(), modifyLiquidity(), initialize(), unlock(), settle(), take() — with no whitelist, allowlist, onlyRole, isAccredited, or isKYCed modifiers. The only owner-gated functions are setProtocolFeeController() and setProtocolFee(), which are admin functions unrelated to user admission. The owner is a Timelock contract (0x1a9C8182C09F50C8318d769245beA52c32BE35BC), not relevant to user access.
- A2
- No off-chain operator approval is required to admit user actions. Swaps, liquidity provision, and pool initialization are entirely on-chain and permissionless. No keeper, sequencer, or relayer approval is needed for user admission.
- A3
- A3-passive: The Uniswap Labs ToS requires users to represent they are not subject to OFAC sanctions or a citizen of a comprehensively sanctioned jurisdiction, and that their use will comply with applicable laws. This is standard boilerplate. A3-active: Uniswap Labs uses TRM Labs for wallet-address screening on app.uniswap.org, blocking wallets associated with sanctions, stolen funds, ransomware, terrorism financing, and CSAM. Third-party reporting confirms geo-blocking of OFAC-sanctioned jurisdictions. Both screening mechanisms match the industry baseline (OFAC geo-blocking + sanctions-oracle wallet screening).
- A3b
- A3b-ii: Multiple independent access paths exist. (1) All Uniswap V4 contracts are verified on block explorers (Etherscan, Arbiscan, Basescan, etc.) — users can interact via Write Contract tabs. (2) The Uniswap v4 SDK is publicly available (npm @uniswap/v4-sdk). (3) DEX aggregators route through Uniswap liquidity pools independently of the official frontend. (4) Alternative frontends operated by third parties exist, as confirmed by reporting. These paths are not bound by the Uniswap Labs ToS.
- A4
- Uniswap Labs uses TRM Labs at the frontend level to screen wallet addresses against sanctions lists and categories of illicit activity. This screening is entirely at the app layer — no on-chain blocklist exists in the PoolManager contract.
- A5
- Read access is fully permissionless — anyone can query pool state via view methods (extsload, exttload, balanceOf, etc.). Write access (swap, modifyLiquidity, initialize) is also fully permissionless at the contract level — no access control gates user-facing write functions.
- A6
- The ToS states: users represent they are 'not (a) the subject of economic or trade sanctions administered or enforced by any governmental authority or otherwise designated on any list of prohibited or restricted parties' and 'not a citizen, resident, or organized in a jurisdiction or territory that is the subject of comprehensive country-wide, territory-wide, or regional economic sanctions by the United States.' This is standard DeFi ToS boilerplate.
Why is this consensus tentative?- only 0/5 sources have a public chat share link
- total support weight 0.60 below confidence floor (1.5)
A fresh independent run can strengthen (or overturn) the verdict.
Run your own prompt Submit run ↗### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v4 - protocol.name: Uniswap V4 - protocol.chains: Ethereum, Base, Arbitrum, Polygon, Binance, Unichain, Monad, Soneium, Optimism, Tempo, Avalanche, World Chain, X Layer, Blast, Ink, Zora - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/Uniswap/v4-core/tree/main/docs/security/audits, https://github.com/Uniswap/v4-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-07-uniswap-v4-core-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: [ { "chain": "Ethereum", "address": "0x1a9C8182C09F50C8318d769245beA52c32BE35BC", "role": "PoolManager owner (Timelock, 2-day minimum delay)" }, { "chain": "Ethereum", "address": "0x408ED6354d4973f66138C91495F2f2FCbd8724C3", "role": "GovernorBravo proxy (admin of the Timelock)" }, { "chain": "Ethereum", "address": "0x3e51b68a157b573303155300a6593224f009990a", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497D0Cd94564c118C661384", "role": "Uniswap DAO Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503497d0Cd94564c118039df83", "role": "Uniswap Governance Timelock" }, { "chain": "Ethereum", "address": "0x1a9C8182C09C57503475d9f9244252322473c9Cd", "role": "Uniswap Governance Timelock" }, { "chain": "Base", "address": "0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9", "role": "Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Optimism", "address": "0xa1dD330d602c32622AA270Ea73d078B803Cb3518", "role": "Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Blast", "address": "0x2339C0d23b60739B3E5ABF201F05903D24A26C77", "role": "Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock" }, { "chain": "Binance", "address": "0x341c1511141022cf8eE20824Ae0fFA3491F1302b", "role": "BSC PoolManager owner; Uniswap Wormhole Message Receiver linked to an Ethereum sender owned by the Uniswap timelock" }, { "chain": "Avalanche", "address": "0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc", "role": "Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint" }, { "chain": "Ethereum", "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "role": "PoolManager" }, { "chain": "Ethereum", "address": "0xd1428ba554f4c8450b763a0b2040a4935c63f06c", "role": "PositionDescriptor" }, { "chain": "Ethereum", "address": "0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e", "role": "PositionManager" }, { "chain": "Ethereum", "address": "0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203", "role": "Quoter" }, { "chain": "Ethereum", "address": "0x7ffe42c4a5deea5b0fec41c94c136cf115597227", "role": "StateView" }, { "chain": "Ethereum", "address": "0x66a9893cc07d91d95644aedd05d03f95e1dba8af", "role": "Universal Router" }, { "chain": "Ethereum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Arbitrum", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Arbitrum", "address": "0xe2023f3fa515cf070e07fd9d51c1d236e07843f4", "role": "PositionDescriptor" }, { "chain": "Arbitrum", "address": "0xd88f38f930b7952f2db2432cb002e7abbf3dd869", "role": "PositionManager" }, { "chain": "Arbitrum", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Arbitrum", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Arbitrum", "address": "0xa51afafe0263b40edaef0df8781ea9aa03e381a3", "role": "Universal Router" }, { "chain": "Arbitrum", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Base", "address": "0x498581ff718922c3f8e6a244956af099b2652b2b", "role": "PoolManager" }, { "chain": "Base", "address": "0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5", "role": "PositionDescriptor" }, { "chain": "Base", "address": "0x7c5f5a4bbd8fd63184577525326123b519429bdc", "role": "PositionManager" }, { "chain": "Base", "address": "0x0d5e0f971ed27fbff6c2837bf31316121532048d", "role": "Quoter" }, { "chain": "Base", "address": "0xa3c0c9b65bad0b08107aa264b0f3db444b867a71", "role": "StateView" }, { "chain": "Base", "address": "0x6ff5693b99212da76ad316178a184ab56d299b43", "role": "Universal Router" }, { "chain": "Base", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Optimism", "address": "0x9a13f98cb987694c9f086b1f5eb990eea8264ec3", "role": "PoolManager" }, { "chain": "Optimism", "address": "0xedd81496169c46df161b8513a52ffecaaaa66743", "role": "PositionDescriptor" }, { "chain": "Optimism", "address": "0x3c3ea4b57a46241e54610e5f022e5c45859a1017", "role": "PositionManager" }, { "chain": "Optimism", "address": "0x1f3131a13296fb91c90870043742c3cdbff1a8d7", "role": "Quoter" }, { "chain": "Optimism", "address": "0xc18a3169788f4f75a170290584eca6395c75ecdb", "role": "StateView" }, { "chain": "Optimism", "address": "0x851116d9223fabed8e56c0e6b8ad0c31d98b3507", "role": "Universal Router" }, { "chain": "Optimism", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Polygon", "address": "0x67366782805870060151383f4bbff9dab53e5cd6", "role": "PoolManager" }, { "chain": "Polygon", "address": "0x0892771f0c1b78ad6013d6e5536007e1c16e6794", "role": "PositionDescriptor" }, { "chain": "Polygon", "address": "0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9", "role": "PositionManager" }, { "chain": "Polygon", "address": "0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9", "role": "Quoter" }, { "chain": "Polygon", "address": "0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a", "role": "StateView" }, { "chain": "Polygon", "address": "0x1095692a6237d83c6a72f3f5efedb9a670c49223", "role": "Universal Router" }, { "chain": "Polygon", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Unichain", "address": "0x1f98400000000000000000000000000000000004", "role": "PoolManager" }, { "chain": "Unichain", "address": "0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722", "role": "PositionDescriptor" }, { "chain": "Unichain", "address": "0x4529a01c7a0410167c5740c487a8de60232617bf", "role": "PositionManager" }, { "chain": "Unichain", "address": "0x333e3c607b141b18ff6de9f258db6e77fe7491e0", "role": "Quoter" }, { "chain": "Unichain", "address": "0x86e8631a016f9068c3f085faf484ee3f5fdee8f2", "role": "StateView" }, { "chain": "Unichain", "address": "0xef740bf23acae26f6492b10de645d6b98dc8eaf3", "role": "Universal Router" }, { "chain": "Unichain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Monad", "address": "0x188d586ddcf52439676ca21a244753fa19f9ea8e", "role": "PoolManager" }, { "chain": "Monad", "address": "0x5770d2914355a6d0a39a70aeea9bcce55df4201b", "role": "PositionDescriptor" }, { "chain": "Monad", "address": "0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016", "role": "PositionManager" }, { "chain": "Monad", "address": "0xa222dd357a9076d1091ed6aa2e16c9742dd26891", "role": "Quoter" }, { "chain": "Monad", "address": "0x77395f3b2e73ae90843717371294fa97cc419d64", "role": "StateView" }, { "chain": "Monad", "address": "0x0d97dc33264bfc1c226207428a79b26757fb9dc3", "role": "Universal Router" }, { "chain": "Monad", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Binance", "address": "0x28e2ea090877bf75740558f6bfb36a5ffee9e9df", "role": "PoolManager" }, { "chain": "Binance", "address": "0xf0432f360703ec3d33931a8356a75a77d8d380e1", "role": "PositionDescriptor" }, { "chain": "Binance", "address": "0x7a4a5c919ae2541aed11041a1aeee68f1287f95b", "role": "PositionManager" }, { "chain": "Binance", "address": "0x9f75dd27d6664c475b90e105573e550ff69437b0", "role": "Quoter" }, { "chain": "Binance", "address": "0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4", "role": "StateView" }, { "chain": "Binance", "address": "0x1906c1d672b88cd1b9ac7593301ca990f94eae07", "role": "Universal Router" }, { "chain": "Binance", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Soneium", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Soneium", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Soneium", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Soneium", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Soneium", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Soneium", "address": "0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df", "role": "Universal Router" }, { "chain": "Soneium", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Avalanche", "address": "0x06380c0e0912312b5150364b9dc4542ba0dbbc85", "role": "PoolManager" }, { "chain": "Avalanche", "address": "0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9", "role": "PositionDescriptor" }, { "chain": "Avalanche", "address": "0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd", "role": "PositionManager" }, { "chain": "Avalanche", "address": "0xbe40675bb704506a3c2ccfb762dcfd1e979845c2", "role": "Quoter" }, { "chain": "Avalanche", "address": "0xc3c9e198c735a4b97e3e683f391ccbdd60b69286", "role": "StateView" }, { "chain": "Avalanche", "address": "0x94b75331ae8d42c1b61065089b7d48fe14aa73b7", "role": "Universal Router" }, { "chain": "Avalanche", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "World Chain", "address": "0xb1860d529182ac3bc1f51fa2abd56662b7d13f33", "role": "PoolManager" }, { "chain": "World Chain", "address": "0x7da419153bd420b689f312363756d76836aeace4", "role": "PositionDescriptor" }, { "chain": "World Chain", "address": "0xc585e0f504613b5fbf874f21af14c65260fb41fa", "role": "PositionManager" }, { "chain": "World Chain", "address": "0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0", "role": "Quoter" }, { "chain": "World Chain", "address": "0x51d394718bc09297262e368c1a481217fdeb71eb", "role": "StateView" }, { "chain": "World Chain", "address": "0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743", "role": "Universal Router" }, { "chain": "World Chain", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "X Layer", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Blast", "address": "0x1631559198a9e474033433b2958dabc135ab6446", "role": "PoolManager" }, { "chain": "Blast", "address": "0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97", "role": "PositionDescriptor" }, { "chain": "Blast", "address": "0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad", "role": "PositionManager" }, { "chain": "Blast", "address": "0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf", "role": "Quoter" }, { "chain": "Blast", "address": "0x12a88ae16f46dce4e8b15368008ab3380885df30", "role": "StateView" }, { "chain": "Blast", "address": "0xeabbcb3e8e415306207ef514f660a3f820025be3", "role": "Universal Router" }, { "chain": "Blast", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Tempo", "address": "0x33620f62c5b9b2086dd6b62f4a297a9f30347029", "role": "PoolManager" }, { "chain": "Tempo", "address": "0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77", "role": "PositionDescriptor" }, { "chain": "Tempo", "address": "0x3fc79444f8eacc1894775493ff3fa41f1e35ce11", "role": "PositionManager" }, { "chain": "Tempo", "address": "0x20e6487c371a2086f841ef453f85378223df4f4e", "role": "Quoter" }, { "chain": "Tempo", "address": "0x21b954fba3f5ddebe77ef2d47a3100c066908b2a", "role": "StateView" }, { "chain": "Tempo", "address": "0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91", "role": "Universal Router" }, { "chain": "Tempo", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ink", "address": "0x360e68faccca8ca495c1b759fd9eee466db9fb32", "role": "PoolManager" }, { "chain": "Ink", "address": "0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36", "role": "PositionDescriptor" }, { "chain": "Ink", "address": "0x1b35d13a2e2528f192637f14b05f0dc0e7deb566", "role": "PositionManager" }, { "chain": "Ink", "address": "0x3972c00f7ed4885e145823eb7c655375d275a1c5", "role": "Quoter" }, { "chain": "Ink", "address": "0x76fd297e2d437cd7f76d50f01afe6160f86e9990", "role": "StateView" }, { "chain": "Ink", "address": "0x112908dac86e20e7241b0927479ea3bf935d1fa0", "role": "Universal Router" }, { "chain": "Ink", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Zora", "address": "0x0575338e4c17006ae181b47900a84404247ca30f", "role": "PoolManager" }, { "chain": "Zora", "address": "0x7d64630bbb4993b5578dbd65e400961c9e68d55a", "role": "PositionDescriptor" }, { "chain": "Zora", "address": "0xf66c7b99e2040f0d9b326b3b7c152e9663543d63", "role": "PositionManager" }, { "chain": "Zora", "address": "0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6", "role": "Quoter" }, { "chain": "Zora", "address": "0x385785af07d63b50d0a0ea57c4ff89d06adf7328", "role": "StateView" }, { "chain": "Zora", "address": "0x3315ef7ca28db74abadc6c44570efdf06b04b020", "role": "Universal Router" }, { "chain": "Zora", "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3", "role": "Permit2" }, { "chain": "Ethereum", "address": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "role": "UNI governance token" } ] ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) - https://defipunkd.com/address/1/0x1a9C8182C09F50C8318d769245beA52c32BE35BC (PoolManager owner (Timelock, 2-day minimum delay)) - https://defipunkd.com/address/1/0x408ED6354d4973f66138C91495F2f2FCbd8724C3 (GovernorBravo proxy (admin of the Timelock)) - https://defipunkd.com/address/1/0x3e51b68a157b573303155300a6593224f009990a (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497D0Cd94564c118C661384 (Uniswap DAO Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503497d0Cd94564c118039df83 (Uniswap Governance Timelock) - https://defipunkd.com/address/1/0x1a9C8182C09C57503475d9f9244252322473c9Cd (Uniswap Governance Timelock) - https://defipunkd.com/address/8453/0x31FAfd4889FA1269F7a13A66eE0fB458f27D72A9 (Base PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/10/0xa1dD330d602c32622AA270Ea73d078B803Cb3518 (Optimism PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - https://defipunkd.com/address/81457/0x2339C0d23b60739B3E5ABF201F05903D24A26C77 (Blast PoolManager owner; CrossChainAccount with l1Owner set to Ethereum timelock) - Binance: 0x341c1511141022cf8eE20824Ae0fFA3491F1302b (chain not supported by the read API) - https://defipunkd.com/address/43114/0xeb0BCF27D1Fb4b25e708fBB815c421Aeb51eA9fc (Avalanche PoolManager owner; OmnichainGovernanceExecutor using LayerZero endpoint) - https://defipunkd.com/address/1/0x000000000004444c5dc75cB358380D2e3dE08A90 (PoolManager) - https://defipunkd.com/address/1/0xd1428ba554f4c8450b763a0b2040a4935c63f06c (PositionDescriptor) - https://defipunkd.com/address/1/0xbd216513d74c8cf14cf4747e6aaa6420ff64ee9e (PositionManager) - https://defipunkd.com/address/1/0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203 (Quoter) - https://defipunkd.com/address/1/0x7ffe42c4a5deea5b0fec41c94c136cf115597227 (StateView) - https://defipunkd.com/address/1/0x66a9893cc07d91d95644aedd05d03f95e1dba8af (Universal Router) - https://defipunkd.com/address/1/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/42161/0x360e68faccca8ca495c1b759fd9eee466db9fb32 (PoolManager) - https://defipunkd.com/address/42161/0xe2023f3fa515cf070e07fd9d51c1d236e07843f4 (PositionDescriptor) - https://defipunkd.com/address/42161/0xd88f38f930b7952f2db2432cb002e7abbf3dd869 (PositionManager) - https://defipunkd.com/address/42161/0x3972c00f7ed4885e145823eb7c655375d275a1c5 (Quoter) - https://defipunkd.com/address/42161/0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (StateView) - https://defipunkd.com/address/42161/0xa51afafe0263b40edaef0df8781ea9aa03e381a3 (Universal Router) - https://defipunkd.com/address/42161/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/8453/0x498581ff718922c3f8e6a244956af099b2652b2b (PoolManager) - https://defipunkd.com/address/8453/0x25d093633990dc94bedeed76c8f3cdaa75f3e7d5 (PositionDescriptor) - https://defipunkd.com/address/8453/0x7c5f5a4bbd8fd63184577525326123b519429bdc (PositionManager) - https://defipunkd.com/address/8453/0x0d5e0f971ed27fbff6c2837bf31316121532048d (Quoter) - https://defipunkd.com/address/8453/0xa3c0c9b65bad0b08107aa264b0f3db444b867a71 (StateView) - https://defipunkd.com/address/8453/0x6ff5693b99212da76ad316178a184ab56d299b43 (Universal Router) - https://defipunkd.com/address/8453/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/10/0x9a13f98cb987694c9f086b1f5eb990eea8264ec3 (PoolManager) - https://defipunkd.com/address/10/0xedd81496169c46df161b8513a52ffecaaaa66743 (PositionDescriptor) - https://defipunkd.com/address/10/0x3c3ea4b57a46241e54610e5f022e5c45859a1017 (PositionManager) - https://defipunkd.com/address/10/0x1f3131a13296fb91c90870043742c3cdbff1a8d7 (Quoter) - https://defipunkd.com/address/10/0xc18a3169788f4f75a170290584eca6395c75ecdb (StateView) - https://defipunkd.com/address/10/0x851116d9223fabed8e56c0e6b8ad0c31d98b3507 (Universal Router) - https://defipunkd.com/address/10/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/137/0x67366782805870060151383f4bbff9dab53e5cd6 (PoolManager) - https://defipunkd.com/address/137/0x0892771f0c1b78ad6013d6e5536007e1c16e6794 (PositionDescriptor) - https://defipunkd.com/address/137/0x1ec2ebf4f37e7363fdfe3551602425af0b3ceef9 (PositionManager) - https://defipunkd.com/address/137/0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9 (Quoter) - https://defipunkd.com/address/137/0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a (StateView) - https://defipunkd.com/address/137/0x1095692a6237d83c6a72f3f5efedb9a670c49223 (Universal Router) - https://defipunkd.com/address/137/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - https://defipunkd.com/address/130/0x1f98400000000000000000000000000000000004 (PoolManager) - https://defipunkd.com/address/130/0x9fb28449a191cd8c03a1b7abfb0f5996ecf7f722 (PositionDescriptor) - https://defipunkd.com/address/130/0x4529a01c7a0410167c5740c487a8de60232617bf (PositionManager) - https://defipunkd.com/address/130/0x333e3c607b141b18ff6de9f258db6e77fe7491e0 (Quoter) - https://defipunkd.com/address/130/0x86e8631a016f9068c3f085faf484ee3f5fdee8f2 (StateView) - https://defipunkd.com/address/130/0xef740bf23acae26f6492b10de645d6b98dc8eaf3 (Universal Router) - https://defipunkd.com/address/130/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Monad: 0x188d586ddcf52439676ca21a244753fa19f9ea8e (chain not supported by the read API) - Monad: 0x5770d2914355a6d0a39a70aeea9bcce55df4201b (chain not supported by the read API) - Monad: 0x5b7ec4a94ff9bedb700fb82ab09d5846972f4016 (chain not supported by the read API) - Monad: 0xa222dd357a9076d1091ed6aa2e16c9742dd26891 (chain not supported by the read API) - Monad: 0x77395f3b2e73ae90843717371294fa97cc419d64 (chain not supported by the read API) - Monad: 0x0d97dc33264bfc1c226207428a79b26757fb9dc3 (chain not supported by the read API) - Monad: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Binance: 0x28e2ea090877bf75740558f6bfb36a5ffee9e9df (chain not supported by the read API) - Binance: 0xf0432f360703ec3d33931a8356a75a77d8d380e1 (chain not supported by the read API) - Binance: 0x7a4a5c919ae2541aed11041a1aeee68f1287f95b (chain not supported by the read API) - Binance: 0x9f75dd27d6664c475b90e105573e550ff69437b0 (chain not supported by the read API) - Binance: 0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4 (chain not supported by the read API) - Binance: 0x1906c1d672b88cd1b9ac7593301ca990f94eae07 (chain not supported by the read API) - Binance: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Soneium: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Soneium: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Soneium: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Soneium: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Soneium: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Soneium: 0x4cded7edf52c8aa5259a54ec6a3ce7c6d2a455df (chain not supported by the read API) - Soneium: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/43114/0x06380c0e0912312b5150364b9dc4542ba0dbbc85 (PoolManager) - https://defipunkd.com/address/43114/0x2b1aed9445b05ac1a3b203eccc1e25dd9351f0a9 (PositionDescriptor) - https://defipunkd.com/address/43114/0xb74b1f14d2754acfcbbe1a221023a5cf50ab8acd (PositionManager) - https://defipunkd.com/address/43114/0xbe40675bb704506a3c2ccfb762dcfd1e979845c2 (Quoter) - https://defipunkd.com/address/43114/0xc3c9e198c735a4b97e3e683f391ccbdd60b69286 (StateView) - https://defipunkd.com/address/43114/0x94b75331ae8d42c1b61065089b7d48fe14aa73b7 (Universal Router) - https://defipunkd.com/address/43114/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - World Chain: 0xb1860d529182ac3bc1f51fa2abd56662b7d13f33 (chain not supported by the read API) - World Chain: 0x7da419153bd420b689f312363756d76836aeace4 (chain not supported by the read API) - World Chain: 0xc585e0f504613b5fbf874f21af14c65260fb41fa (chain not supported by the read API) - World Chain: 0x55d235b3ff2daf7c3ede0defc9521f1d6fe6c5c0 (chain not supported by the read API) - World Chain: 0x51d394718bc09297262e368c1a481217fdeb71eb (chain not supported by the read API) - World Chain: 0x8ac7bee993bb44dab564ea4bc9ea67bf9eb5e743 (chain not supported by the read API) - World Chain: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - X Layer: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - https://defipunkd.com/address/81457/0x1631559198a9e474033433b2958dabc135ab6446 (PoolManager) - https://defipunkd.com/address/81457/0x0747ad2b2e1f5761b1dcf0d8672bd1ffc3676f97 (PositionDescriptor) - https://defipunkd.com/address/81457/0x4ad2f4cca2682cbb5b950d660dd458a1d3f1baad (PositionManager) - https://defipunkd.com/address/81457/0x6f71cdcb0d119ff72c6eb501abceb576fbf62bcf (Quoter) - https://defipunkd.com/address/81457/0x12a88ae16f46dce4e8b15368008ab3380885df30 (StateView) - https://defipunkd.com/address/81457/0xeabbcb3e8e415306207ef514f660a3f820025be3 (Universal Router) - https://defipunkd.com/address/81457/0x000000000022D473030F116dDEE9F6B43aC78BA3 (Permit2) - Tempo: 0x33620f62c5b9b2086dd6b62f4a297a9f30347029 (chain not supported by the read API) - Tempo: 0xc73ed2cba8c347593d1d9120aa0be8ff88c6ff77 (chain not supported by the read API) - Tempo: 0x3fc79444f8eacc1894775493ff3fa41f1e35ce11 (chain not supported by the read API) - Tempo: 0x20e6487c371a2086f841ef453f85378223df4f4e (chain not supported by the read API) - Tempo: 0x21b954fba3f5ddebe77ef2d47a3100c066908b2a (chain not supported by the read API) - Tempo: 0xa2dc7d0266f0cc50b3eeaf36c9bfcecff1beea91 (chain not supported by the read API) - Tempo: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Ink: 0x360e68faccca8ca495c1b759fd9eee466db9fb32 (chain not supported by the read API) - Ink: 0x42e3ccd9b7f67b5b2ee0c12074b84ccf2a8e7f36 (chain not supported by the read API) - Ink: 0x1b35d13a2e2528f192637f14b05f0dc0e7deb566 (chain not supported by the read API) - Ink: 0x3972c00f7ed4885e145823eb7c655375d275a1c5 (chain not supported by the read API) - Ink: 0x76fd297e2d437cd7f76d50f01afe6160f86e9990 (chain not supported by the read API) - Ink: 0x112908dac86e20e7241b0927479ea3bf935d1fa0 (chain not supported by the read API) - Ink: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - Zora: 0x0575338e4c17006ae181b47900a84404247ca30f (chain not supported by the read API) - Zora: 0x7d64630bbb4993b5578dbd65e400961c9e68d55a (chain not supported by the read API) - Zora: 0xf66c7b99e2040f0d9b326b3b7c152e9663543d63 (chain not supported by the read API) - Zora: 0x5edaccc0660e0a2c44b06e07ce8b915e625dc2c6 (chain not supported by the read API) - Zora: 0x385785af07d63b50d0a0ea57c4ff89d06adf7328 (chain not supported by the read API) - Zora: 0x3315ef7ca28db74abadc6c44570efdf06b04b020 (chain not supported by the read API) - Zora: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (chain not supported by the read API) - https://defipunkd.com/address/1/0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984 (UNI governance token) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: OPEN-ACCESS Evaluate who is allowed to use the protocol and whether any of that permission is granted off-chain. Scope: this slice is about ADMISSION — who can enter, exit, or transact. Operator LIVENESS (what breaks if keepers/oracles go offline) is assessed in the dependencies slice and is out of scope for the grade here. You may note operator dependencies as context, but do not let "the protocol halts if operator X disappears" drive the access grade on its own; that belongs in dependencies. Source verification / contract verification on block explorers is assessed in the verifiability slice and is out of scope here — do NOT let "contract is unverified" drive the access grade. Framing: the smart contracts are the access layer; frontends are UX. A permissionless contract is reachable by any client (SDK, third-party UI, aggregator, wallet integration). Frontend ToS, IP geo-blocking, and wallet screening are publisher policies on one specific client — they are reported as context but do NOT determine the grade. The grade hinges on (1) what the contract itself permits, and (2) whether the protocol is practically reachable without the official publisher's cooperation. Meta-check before finalizing: if your verdict cites phrases from this prompt as evidence ("the protocol meets the 'credible alternatives' condition", "this fits the 'documented fallback' rule"), redo the verdict. The prompt describes the rubric; evidence must come from the protocol. A verdict should cite what the protocol does, not what the rubric says. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. Whitelist / allowlist modifiers in user-facing entry points. Grep for "onlyWhitelisted", "onlyRole", "allowlist", "isAccredited", "isKYCed". Note which functions are gated and who can add/remove from the list. - A2. Off-chain operators in the admission path: keepers, sequencers, privileged relayers, oracle posters whose approval is required to admit a user action (not just to keep the protocol live). For each, identify whether the role is held by a single operator, a permissioned committee, or is permissionless. Enumerate per user-facing function class (deposit vs withdraw-request vs claim-finalized vs transfer) which ones require operator approval to be admitted, and which ones admit users unconditionally. A function whose placement is unconditional but whose downstream settlement depends on an operator is an admission-permissionless function — flag the liveness dependency as context and defer its grading weight to the dependencies slice. - A3. Frontend restrictions on the official interface — record as context, not as a grade lever. Distinguish: - A3-passive: boilerplate ToS clauses (sanctions attestation, restricted-territory self-certification, VPN-circumvention prohibition, "comply with applicable law" eligibility, age of majority). - A3-active: runtime enforcement — IP-based geo-blocking, wallet-address screening against a sanctions oracle (Chainalysis, TRM, Elliptic), KYC wall, rendering-blocking jurisdiction banner. Record findings under the correct tier. Quote ToS text or banner text in evidence[].shows. These findings populate the headline and rationale but do NOT move the grade by themselves; the grade is set by A1, A2, and the A3b path check below. - A3b. Independent access paths (the operative grade input). Enumerate paths that do not require the official publisher's cooperation: - Published SDK / library / CLI for direct contract interaction. - Third-party frontends operated by separate legal entities. - Wallet-integrated access (MetaMask Swaps, Safe apps, etc.). - DEX / lending / yield aggregators that route through the contracts. Record at least one concrete link per path that exists. The protocol does NOT have to self-document these — the test is existence, not UX cost. An A3b-i redistribution of the official UI bound by the same ToS does NOT count as an independent path. - A4. Sanctions / compliance tooling at the contract level: does the protocol check addresses against OFAC lists or similar on-chain blocklists in the contract itself? (Frontend-only screening belongs in A3.) - A5. Differentiate read access vs write access: many protocols are read-permissionless (anyone can view state) but write-gated (only certain addresses can deposit/borrow). Record both. - A6. ToS / Legal links: locate them on the website and produce a VERBATIM quote of any jurisdictional, sanctions, or eligibility clause in evidence[].shows. If you cannot extract the clause text verbatim (SPA render failure, paywall, dead link, etc.), do NOT paraphrase or infer from general knowledge — record the ToS URL in unknowns[] with the reason extraction failed. Assertions about ToS content without a verbatim quote will be downweighted by reviewers. Then write the steel-man section per Hard Rule 11. Grade rules (admission-focused; liveness concerns belong in dependencies; source verification belongs in verifiability): - green = no contract-level whitelist/KYC on user entry/exit; no operator approval required to admit a user action; AND at least one independent A3b path exists (published SDK, third-party frontend, wallet integration, or aggregator routing). Frontend ToS posture and A3-active enforcement on the official UI do NOT block green when contracts are permissionless and an independent path exists — they are reported as context. - orange = contracts admit users unconditionally, BUT the protocol is operationally captured by the official publisher: no published SDK, no third-party frontend, no wallet integration, no aggregator routing. The contract is theoretically open but practically reachable only through the official UI. Also applies when admission requires approval from a permissioned committee that is governance-managed with a documented replacement procedure. - red = contract-level whitelist / KYC on user entry/exit, OR admission of a core user action requires approval from a single privileged operator or a small committee with no documented replacement procedure, OR enforces an on-chain blocklist updatable by a single party. - unknown = checklist incomplete after checking the sources above. Default-grade guidance: when contracts are fully permissionless AND any A3b independent path exists, the default grade is green regardless of frontend ToS or A3-active enforcement on the official UI. Frontend geo-blocking, sanctions-oracle wallet screening, and ToS sanctions clauses are publisher policies on one client and are reported in findings/headline as context, not as grade levers. To grade orange on operational-capture grounds, the auditor must affirmatively show that ALL independent paths are absent or also gated. Guideline on committees: where admission depends on a multi-operator committee, the relevant axes are (a) set size, (b) whether replacement/rotation is governed on-chain, (c) whether the replacement procedure is publicly documented. A large set with on-chain governance replacement should not be graded as a single-party operator even if rotation is not instantaneous. A small set with informal replacement should be treated as a single-party operator. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "open-access", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.Sources claude-opus-4-6 (autorun) no url chatgpt-thinking-xhigh-5-5 no url unknown (autorun) no url gpt-5.5 no url gemini-3-flash-preview no url View raw submissions ↗
Stage
Preview of the Phase-3 maturity framework. DeFiPunk'd will adopt DeFiScan v2's stages verbatim; the section is rendered below in its intended shape so the structure is visible today.
Uniswap V4 has not yet been assessed under the DeFiScan v2 stage framework.
The walkaway test is the central criterion. Once stages land, protocols reach Stage 1 only if users can exit in the presence of malicious operators even when the emergency council disappears.
Scope of assessment
Stages are assessed per-protocol against DeFiScan v2's criteria: governance structure, upgradeability path, timelock durations, emergency-council scope, and the walkaway test. The analysis depends on onchain discovery (roles, owners, timelocks) and deeper review of deployed contracts — neither of which DeFiPunk'd automates at Phase 0.
Stage 0 requirements pending
Governance is largely off-chain, contracts are upgradeable with short or no timelock, and the protocol depends on a multisig or team with full discretion. At Phase 0 DeFiPunk'd does not automatically evaluate these; the assessment lands with crawler-based onchain discovery.
Stage 1 requirements pending
Users can exit or opt out on their own terms even if the team disappears. Upgrades run through a meaningful timelock with an emergency security council clearly scoped. The walkaway test is the headline criterion.
Stage 2 requirements pending
Protocol is fully permissionless and immutable, or upgrades require a supermajority of token holders with a long timelock and no emergency override. This is the terminal stage of the DeFiScan v2 framework.
Stages are an opinionated assessment of maturity, not a rating of security or safety. A protocol can sit at Stage 2 and still carry substantial technical or economic risk; the framework exists to incentivize decentralization, not to rank protocols.
Contract surface
Every contract in scope for this protocol — pooled from DeFiLlama's TVL adapter (mechanical) and DEFI@home discovery submissions (LLM-curated). Verified-source flags come from Etherscan + Sourcify; owner / multisig metadata is read on-chain when available. Reviewer audit context, not a slice score. A lending protocol's adapter set will list third-party collateral tokens alongside its own contracts; attribution is the grader's job.
- 123addresses
- 23verified source
- 2proxies
- 0of 6 owners are Safes
| arbitrum | UXLINKToken | 0x1a6b…cff1 | TVL | ✓ | — | — | — |
| arbitrum | ERC1967Proxy | 0x3e4f…d9ba | TVL | ✓ | proxy | 0xb36c…864f | — |
| arbitrum | ERC6160Ext20 | 0x8d01…90b8 | TVL | ✓ | — | — | — |
| arbitrum | PoolManager | 0x360e…fb32 | TVL + disc | ✓ | — | 0x2bad…46cd | factory |
| Arbitrum | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Arbitrum | PositionDescriptor | 0xe202…43f4 | discovery | — | — | — | — |
| Arbitrum | PositionManager | 0xd88f…d869 | discovery | — | — | — | — |
| Arbitrum | Quoter | 0x3972…a1c5 | discovery | — | — | — | — |
| Arbitrum | StateView | 0x76fd…9990 | discovery | — | — | — | — |
| Arbitrum | Universal Router | 0xa51a…81a3 | discovery | — | — | — | router |
| Avalanche | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Avalanche | PoolManager | 0x0638…bc85 | discovery | — | — | — | — |
| Avalanche | PositionDescriptor | 0x2b1a…f0a9 | discovery | — | — | — | — |
| Avalanche | PositionManager | 0xb74b…8acd | discovery | — | — | — | — |
| Avalanche | Quoter | 0xbe40…45c2 | discovery | — | — | — | — |
| Avalanche | StateView | 0xc3c9…9286 | discovery | — | — | — | — |
| Avalanche | Universal Router | 0x94b7…73b7 | discovery | — | — | — | router |
| avax | PoolManager | 0x0638…bc85 | TVL | ✓ | — | — | factory |
| base | ERC6160Ext20 | 0x8d01…90b8 | TVL | ✓ | — | — | — |
| base | TransparentUpgradeableProxy | 0xbc33…7fe5 | TVL | ✓ | proxy | — | — |
| base | PoolManager | 0x4985…2b2b | TVL + disc | ✓ | — | — | factory |
| Base | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Base | PositionDescriptor | 0x25d0…e7d5 | discovery | — | — | — | — |
| Base | PositionManager | 0x7c5f…9bdc | discovery | — | — | — | — |
| Base | Quoter | 0x0d5e…048d | discovery | — | — | — | — |
| Base | StateView | 0xa3c0…7a71 | discovery | — | — | — | — |
| Base | Universal Router | 0x6ff5…9b43 | discovery | — | — | — | router |
| Binance | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Binance | PoolManager | 0x28e2…e9df | discovery | — | — | — | — |
| Binance | PositionDescriptor | 0xf043…80e1 | discovery | — | — | — | — |
| Binance | PositionManager | 0x7a4a…f95b | discovery | — | — | — | — |
| Binance | Quoter | 0x9f75…37b0 | discovery | — | — | — | — |
| Binance | StateView | 0xd13d…e0c4 | discovery | — | — | — | — |
| Binance | Universal Router | 0x1906…ae07 | discovery | — | — | — | router |
| blast | PoolManager | 0x1631…6446 | TVL + disc | ✓ | — | — | factory |
| Blast | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Blast | PositionDescriptor | 0x0747…6f97 | discovery | — | — | — | — |
| Blast | PositionManager | 0x4ad2…baad | discovery | — | — | — | — |
| Blast | Quoter | 0x6f71…2bcf | discovery | — | — | — | — |
| Blast | StateView | 0x12a8…df30 | discovery | — | — | — | — |
| Blast | Universal Router | 0xeabb…5be3 | discovery | — | — | — | router |
| bsc | BEP20Polkadot | 0x7083…3402 | TVL | ✓ | — | — | — |
| bsc | CoinToken | 0x8145…8f5c | TVL | ✓ | — | — | — |
| bsc | ERC6160Ext20 | 0x8d01…90b8 | TVL | ✓ | — | — | — |
| bsc | CATERC20 | 0xb435…0343 | TVL | ✓ | — | — | — |
| bsc | PoolManager | 0x28e2…e9df | TVL | ✓ | — | — | factory |
| ethereum | Token | 0x196c…4d14 | TVL | ✓ | — | — | token |
| ethereum | TestERC20 | 0x2f42…4d6e | TVL | ✓ | — | 0xff23…fbde | — |
| ethereum | ERC6160Ext20 | 0x8d01…90b8 | TVL | ✓ | — | — | — |
| ethereum | CATERC20 | 0xb435…0343 | TVL | ✓ | — | — | — |
| ethereum | PoolManager | 0x0000…8a90 | TVL + disc | ✓ | — | 0x1a9c…35bc | factory |
| Ethereum | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Ethereum | PositionDescriptor | 0xd142…f06c | discovery | — | — | — | — |
| Ethereum | PositionManager | 0xbd21…ee9e | discovery | — | — | — | — |
| Ethereum | Quoter | 0x52f0…1203 | discovery | — | — | — | — |
| Ethereum | StateView | 0x7ffe…7227 | discovery | — | — | — | — |
| Ethereum | Universal Router | 0x66a9…a8af | discovery | — | — | — | router |
| ink | factory | 0x360e…fb32 | TVL + disc | — | — | — | factory |
| Ink | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Ink | PositionDescriptor | 0x42e3…7f36 | discovery | — | — | — | — |
| Ink | PositionManager | 0x1b35…b566 | discovery | — | — | — | — |
| Ink | Quoter | 0x3972…a1c5 | discovery | — | — | — | — |
| Ink | StateView | 0x76fd…9990 | discovery | — | — | — | — |
| Ink | Universal Router | 0x1129…1fa0 | discovery | — | — | — | router |
| monad | factory | 0x188d…ea8e | TVL + disc | — | — | — | factory |
| Monad | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Monad | PositionDescriptor | 0x5770…201b | discovery | — | — | — | — |
| Monad | PositionManager | 0x5b7e…4016 | discovery | — | — | — | — |
| Monad | Quoter | 0xa222…6891 | discovery | — | — | — | — |
| Monad | StateView | 0x7739…9d64 | discovery | — | — | — | — |
| Monad | Universal Router | 0x0d97…9dc3 | discovery | — | — | — | router |
| optimism | ERC6160Ext20 | 0x8d01…90b8 | TVL | ✓ | — | — | — |
| optimism | PoolManager | 0x9a13…4ec3 | TVL + disc | ✓ | — | — | factory |
| Optimism | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Optimism | PositionDescriptor | 0xedd8…6743 | discovery | — | — | — | — |
| Optimism | PositionManager | 0x3c3e…1017 | discovery | — | — | — | — |
| Optimism | Quoter | 0x1f31…a8d7 | discovery | — | — | — | — |
| Optimism | StateView | 0xc18a…ecdb | discovery | — | — | — | — |
| Optimism | Universal Router | 0x8511…3507 | discovery | — | — | — | router |
| polygon | PoolManager | 0x6736…5cd6 | TVL + disc | ✓ | — | 0x8a1b…2374 | factory |
| Polygon | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Polygon | PositionDescriptor | 0x0892…6794 | discovery | — | — | — | — |
| Polygon | PositionManager | 0x1ec2…eef9 | discovery | — | — | — | — |
| Polygon | Quoter | 0xb3d5…81b9 | discovery | — | — | — | — |
| Polygon | StateView | 0x5ea1…ba5a | discovery | — | — | — | — |
| Polygon | Universal Router | 0x1095…9223 | discovery | — | — | — | router |
| soneium | factory | 0x360e…fb32 | TVL + disc | — | — | — | factory |
| Soneium | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Soneium | PositionDescriptor | 0x42e3…7f36 | discovery | — | — | — | — |
| Soneium | PositionManager | 0x1b35…b566 | discovery | — | — | — | — |
| Soneium | Quoter | 0x3972…a1c5 | discovery | — | — | — | — |
| Soneium | StateView | 0x76fd…9990 | discovery | — | — | — | — |
| Soneium | Universal Router | 0x4cde…55df | discovery | — | — | — | router |
| tempo | factory | 0x3362…7029 | TVL + disc | — | — | — | factory |
| Tempo | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Tempo | PositionDescriptor | 0xc73e…ff77 | discovery | — | — | — | — |
| Tempo | PositionManager | 0x3fc7…ce11 | discovery | — | — | — | — |
| Tempo | Quoter | 0x20e6…4f4e | discovery | — | — | — | — |
| Tempo | StateView | 0x21b9…8b2a | discovery | — | — | — | — |
| Tempo | Universal Router | 0xa2dc…ea91 | discovery | — | — | — | router |
| unichain | PoolManager | 0x1f98…0004 | TVL + disc | ✓ | — | 0x2bad…46cd | factory |
| Unichain | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Unichain | PositionDescriptor | 0x9fb2…f722 | discovery | — | — | — | — |
| Unichain | PositionManager | 0x4529…17bf | discovery | — | — | — | — |
| Unichain | Quoter | 0x333e…91e0 | discovery | — | — | — | — |
| Unichain | StateView | 0x86e8…e8f2 | discovery | — | — | — | — |
| Unichain | Universal Router | 0xef74…eaf3 | discovery | — | — | — | router |
| wc | factory | 0xb186…3f33 | TVL | — | — | — | factory |
| World Chain | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| World Chain | PoolManager | 0xb186…3f33 | discovery | — | — | — | — |
| World Chain | PositionDescriptor | 0x7da4…ace4 | discovery | — | — | — | — |
| World Chain | PositionManager | 0xc585…41fa | discovery | — | — | — | — |
| World Chain | Quoter | 0x55d2…c5c0 | discovery | — | — | — | — |
| World Chain | StateView | 0x51d3…71eb | discovery | — | — | — | — |
| World Chain | Universal Router | 0x8ac7…e743 | discovery | — | — | — | router |
| X Layer | PoolManager | 0x360e…fb32 | discovery | — | — | — | — |
| zora | factory | 0x0575…a30f | TVL + disc | ✗ | — | — | factory |
| Zora | Permit2 | 0x0000…8ba3 | discovery | — | — | — | — |
| Zora | PositionDescriptor | 0x7d64…d55a | discovery | — | — | — | — |
| Zora | PositionManager | 0xf66c…3d63 | discovery | — | — | — | — |
| Zora | Quoter | 0x5eda…c2c6 | discovery | — | — | — | — |
| Zora | StateView | 0x3857…7328 | discovery | — | — | — | — |
| Zora | Universal Router | 0x3315…b020 | discovery | — | — | — | router |
Control Exit Autonomy Open Access Verifiable
Control criteria
About
Uniswap V1 is a dexs protocol on Ethereum.
Risk analysis
One card per dimension, sorted by severity. Only Verifiability and Autonomy carry automated signals in Phase 0. See methodology for scope.
Audit a dimension yourself · DEFI@home Contribute an LLM-run assessment — any model, any dimension. Three agreeing runs merge automatically into the public record.
DEFI@home is a distributed audit network modeled on SETI@home: instead of CPU cycles, it crowdsources LLM reasoning. Paste a slice prompt into Claude, ChatGPT, Gemini, or any browsing-capable model, and submit the JSON output as a pull request. The quorum bot merges it once ≥3 independent runs (from different models) reach the same grade — no single model, and no single contributor, can move the needle alone. How it works →
- Address discovery 0 addresses on file
· 0 runs
⚑ Run first
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v1 - protocol.name: Uniswap V1 - protocol.chains: Ethereum - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: null ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) (no addresses pinned in this run — discover candidates from fetched website / GitHub / audit / explorer pages, record discovered addresses in evidence[] and protocol_metadata.admin_addresses, and put any reads you couldn't perform in unknowns[]. The next assessment will inherit your discoveries.) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: DISCOVERY You are a cataloguer, not a judge. Your job is to surface every contract address that could plausibly belong to this protocol's control or fund-holding surface, each backed by a citation. `grade` is ALWAYS `"unknown"` for discovery submissions — there is no green/orange/red rubric here. The five evaluation slices that run after you (control, ability-to-exit, autonomy, open-access, verifiability) consume your output via the addressBook ratchet — every address you record becomes a pre-built surfacer URL on the next run; every address you miss costs them a tool call. Width beats depth. A `role: "other"` entry with one cited URL beats omitting it. Downstream slices will discard out-of-scope entries; they cannot rediscover what you fail to enumerate without paying the same cost again. (Step 0 capability probe lives in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every D-code below must appear in evidence[] OR unknowns[]) - **D1. Block-explorer name-tag search per chain.** For each chain in `protocol.chains`, search the canonical block explorer for the protocol's name tag — `https://etherscan.io/searchHandler?term=<query>` and the per-chain explorers (basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network). When direct fetch is blocked, use `site:<explorer> <protocol_name>` via search grounding. Record every address that surfaces with the protocol's tag, plus neighbouring "Token Contract" / "Multisig" / "Timelock" labels. - **D2. Official deployments doc.** From `protocol.website` and the docs site, locate the canonical "Deployed contracts" / "Addresses" / "Contracts" / "Deployments" page (often at `/docs/deployments`, `/docs/addresses`, `/dashboard/contracts`). Cite the URL, record every address listed with its named role, and set `protocol_metadata.deployed_contracts_doc` to this URL. - **D3. Audit PDFs.** From `protocol.audit_links` (and any audits surfaced by D2), open each. Most reports include a "Scope" / "Contracts in scope" address table in the first 5 pages. Extract every in-scope address with its labelled role. If the audit predates the current deployment, record the addresses anyway with role suffixed `(audit-era)` so downstream slices know to re-verify. - **D4. GitHub deployment artifacts.** From `protocol.github`, walk the repo at a pinned commit SHA looking for: Foundry `broadcast/<script>/<chainId>/run-latest.json` (`transactions[].contractAddress` per chainId); hardhat-deploy `deployments/<network>/<Contract>.json` (`address` field); manual indexes (`deployments.json`, `addresses.json`, `contracts.json`, `networks.json`); markdown indexes (`docs/deployments.md`, `README.md` tables). Cite the file URL with the commit SHA; pin SHAs (`?ref=<sha>`) so the citation is content-addressed. - **D5. Multi-chain enumeration.** If `protocol.chains.length > 1`, repeat D1–D4 per chain. Cross-chain deployments of the same logical contract get SEPARATE `admin_addresses[]` entries — one per chain. The chain field is part of the identity; do not collapse. If a chain has zero results, record `"D5: chain <name>: zero addresses surfaced from <sources tried>"` in unknowns[]. - **D6. Factory-discovered children.** For factory addresses surfaced in D1–D4, fetch the enumeration view via the read API (`/api/contract/read?...&method=allPools` / `getPool` / `getMarket` / `getVault`) and record each child with role like `"pool (from factory <0xFactory>)"`. **Cap at 50 children per factory.** Protocols with thousands of pools (Uniswap, Sushi) need dedicated ingestion — record the factory + the cap notice in unknowns[]. - **D7. Role taxonomy.** Every `admin_addresses[]` entry's `role` uses this controlled vocabulary (free-text suffixes OK for disambiguation, e.g. `"multisig (treasury)"`, but the leading token must match): `owner | admin | proxy_admin | governor | timelock | guardian | multisig | treasury | oracle | factory | router | token | pool | vault | other` Tentative classifications are encouraged. `actor_class` ∈ `eoa | multisig | timelock | governance | unknown` — use `unknown` when you found the address but didn't read its bytecode. - **D8. Ratchet output integrity.** Every address in `admin_addresses[]` must trace to ≥1 fetched URL in evidence[]. Snippet-only sightings go in unknowns[] with a `D8` code, NOT in admin_addresses[]. ### Discovery rationale framing - `rationale.findings`: one entry per D-code, terse, factual. Per-address detail belongs in evidence[] and admin_addresses[], not here. Example: `"D1: 8 addresses surfaced from etherscan.io name-tag search for 'Aave V3'"`. - `rationale.steelman`: ALWAYS null. - `rationale.verdict`: one short line summarizing what corpora were walked and how many addresses were catalogued. - `headline`: factual and quantitative — `"24 contracts catalogued across Ethereum, Arbitrum, and Base; 6 governance/admin and 18 protocol contracts."`. - `short_headline`: under 60 chars — `"24 contracts across 3 chains"`. ### What discovery is NOT - Not a verdict slice. `grade` must be `"unknown"`. - Not exhaustive enumeration of leaf assets — record the factory + cap and move on (see D6). - Not classification of trust assumptions — whether a multisig threshold is safe / timelock delay is sufficient / proxy admin is an EOA is the control slice's job. - Not address-book reconciliation: when addressBook is non-empty, EXTEND it (find addresses prior runs missed) rather than re-cite the same addresses; re-cite only when you have new evidence for a refined role. ### protocol_metadata side-effects While walking the corpora, populate every `protocol_metadata` field you can support with citations: `github`, `docs_url`, `audits` (one per D3 audit walked), `governance_forum`, `bug_bounty_url`, `security_contact`, `deployed_contracts_doc` (URL from D2), `upgradeability` (best-effort), and `about` (2–4 sentences sourced from docs/website, not memory). Discovery is the natural home for these — evaluation slices should not have to rediscover them. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "discovery", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Verifiability
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v1 - protocol.name: Uniswap V1 - protocol.chains: Ethereum - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: null ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) (no addresses pinned in this run — discover candidates from fetched website / GitHub / audit / explorer pages, record discovered addresses in evidence[] and protocol_metadata.admin_addresses, and put any reads you couldn't perform in unknowns[]. The next assessment will inherit your discoveries.) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: VERIFIABILITY Evaluate whether an outsider can independently confirm what the deployed code does. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - V1. For each address you assess: is the bytecode verified on the chain's block explorer? Record the "Contract Source Code Verified" indicator. https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... returns this as a top-level "verified" boolean plus "abiSource" ("etherscan" / "sourcify") and an inline ABI — useful when the explorer page is rate-limited. If the contract is a proxy, verify BOTH the proxy contract AND the current implementation contract. The same /api/contract/abi response auto-resolves proxies and includes a "proxy.implementation" address when present, so one call covers V1 + V6 in one shot. An explorer "Similar Match" on a well-known proxy pattern (Aragon AppProxyUpgradeable, ERC1967Proxy, OssifiableProxy, OZ TransparentUpgradeableProxy) is expected for that pattern and does NOT count as a verification gap on its own — what matters is that the implementation is independently verified. - V2. Source-to-repo correspondence: for each verified contract, attempt to find a matching commit in the linked GitHub repos. Record evidence[].commit on a match. Independent compile/bytecode-match is NOT required for green — a recognized public repo whose structure and file contents correspond to the explorer-visible source is sufficient. If you did not pin a commit SHA or run a bytecode diff, record that plainly in unknowns[] and proceed; it is a scope limit, not a downgrade signal. - V3. Audit coverage: for each URL in protocol.audit_links, open it and record: auditor name, audit date, the specific contracts / commit in scope. Flag audits that predate the current deployment by >6 months without a follow-up review. - V4. Auditor recognition: the following firms are broadly recognized in Solidity: Trail of Bits, Zellic, Spearbit, OpenZeppelin, ConsenSys Diligence, Certora (formal verification), Quantstamp, Halborn, Peckshield, Sigma Prime, ChainSecurity, Ackee Blockchain, MixBytes, Statemind. Unknown firms are orange-at-best for any green-grade claim. Name the firm explicitly in evidence[]. - V5. Post-audit drift: compare the most recent in-scope audit(s) against the currently-deployed source, weighted by what each contract does and by what the changes actually contain. SCOPE — drift only downgrades the grade when ALL of the following hold: (i) the drifting contract is fund-custody / settlement / accounting-critical (NOT a peripheral router, lens, quoter, or pure-view contract that holds no balances); (ii) the changes are material — new functions, modified access control, modified accounting, modified fund flow — and not refactors / struct relocations / import reorgs / build or CI fixes / formatting; (iii) no later audit, fix-audit, or differential audit from a recognized firm covers the changed files (audits often pin a pre-fix commit while a follow-up reviews the delta — match by file scope, not by commit-hash equality). When you cite drift as a downgrade reason, name the specific behavior change (function added, role granted, accounting formula altered) — "N commits ahead" or "+X/-Y LOC" alone is not evidence of material drift. If you have not sampled the diff content (e.g. via the GitHub compare view or the top commits in the window), record drift as an unknowns[] entry rather than auto-downgrading; commit-count and LOC are starting signals, not findings. - V6. Implementation vs proxy: a verified proxy with an unverified implementation is effectively unverified. State whether the implementation is verified separately. EVIDENCE DISCIPLINE (read before writing findings[]): - Do not assert a specific deploy-commit SHA, bytecode equivalence, or "identical to audited commit" unless you actually fetched the artifact that shows it (e.g., a deployed-addresses JSON you opened, an explorer page you read). Inferred or plausible matches belong in unknowns[], never in findings[] or evidence[]. - Evidence[] entries must correspond to pages/files you actually retrieved this run. A URL you did not open is not evidence. Then write the steel-man section per Hard Rule 11. Grade rules: - green = deployed bytecode verified on the explorer (proxy AND implementation if proxied; "Similar Match" on a standard proxy pattern is fine per V1), a public source repo exists whose contents correspond to the explorer-visible source, AND ≥1 audit from a recognized firm covering the currently-deployed contracts (≤6 months of drift OR drift was re-audited). A missing local compile-match is not a downgrade — record it in unknowns[] and still grade green if the other conditions hold. - orange = verified but with visible drift from the public repo, OR audit scope is stale relative to deployment, OR only minor / unknown-firm audits exist, OR only some of the main contracts are verified, OR proxy verified but implementation only partially verified. - red = unverified bytecode (or verified proxy with unverified implementation), OR no audit in protocol.audit_links, OR no public repo. - unknown = reserved for when the protocol's verifiability posture genuinely cannot be assessed (e.g., explorer and repo both inaccessible for this protocol). Do NOT use unknown merely because you, the analyst, could not run a particular check such as a bytecode diff — that goes in unknowns[] while the grade is still assigned from the evidence you do have. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "verifiability", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Control
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v1 - protocol.name: Uniswap V1 - protocol.chains: Ethereum - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: null ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) (no addresses pinned in this run — discover candidates from fetched website / GitHub / audit / explorer pages, record discovered addresses in evidence[] and protocol_metadata.admin_addresses, and put any reads you couldn't perform in unknowns[]. The next assessment will inherit your discoveries.) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: CONTROL Evaluate who can change the protocol's rules, how fast, and how broadly. (Step 0 capability probe and the off-chain-only fallback live in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]) - **C1.** For each address you assess: who is the contract owner / admin / pendingAdmin / governor — read these via the block explorer's "Read Contract" tab OR `https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=owner` (BARE method names: `&method=owner`, `&method=admin`, `&method=pendingOwner`, `&method=governor`). For Safes use `/api/safe/owners?chainId=<id>&address=0x...`. When a protocol has multiple major versions deployed (v2/v3/v4), perform C1 reads on the NEWEST deployment separately — newer deployments often have weaker control surfaces than the legacy core. - **C2.** Upgrade mechanism: transparent proxy / UUPS / Beacon / Diamond / immutable. Identify the proxy admin address. Check upgradeability of GOVERNANCE contracts too — a Governor / Aragon Voting / OZ Governor is often itself a proxy whose admin is the Timelock. Asymmetry: when fund-holding cores are immutable AND governance has no admin path that reaches them, an upgradable Governor/Timelock is T3-only and must NOT drag the verdict below green on that basis alone (see grade rules and the "immutable cores" caveat). Only call upgradability "mixed" if you can name a concrete function on the upgradable surface that reaches T1 or T2 on user funds. - **C3.** EXECUTION PATH (enumerate every stage, in order, with delays in seconds). The operative path is usually a chain (voting → scheduler → timelock → executor; or governor → queue → execute; or Aragon Voting → DualGovernance → EmergencyProtectedTimelock → AdminExecutor). For each stage, record (a) the contract address, (b) the delay constant name + value in seconds, (c) the URL you read it from (block-explorer Read Contract OR `/api/contract/read?...&method=MIN_DELAY&block=<n>`). Do NOT stop at the first timelock-shaped contract — if its admin is itself called by another contract, keep walking. The grading delay is the SUM OF DELAYS ON THE UNCONTESTED FAST PATH (shortest time a proposal with no opposition can go from submission to executable). Dynamic / contested extensions (veto signaling, rage quit, escrow delay) are modifiers, not the basis — note them separately. - **C4.** Enumerate EVERY multisig with reachable control — main proxy admin, emergency activation, emergency execution, reseal / pause, gate-seal committees, tiebreaker, per-module admins. For each Safe, fetch threshold + owners + version via `/api/safe/owners?chainId=<id>&address=0x...` (response includes raw eth_call data, so the URL is citable evidence). Enumerate ops/council/incentives multisigs even when off the upgrade path — record their scope so a reader can see they are NOT on the upgrade path. For each: (a) address, (b) threshold / total signers, (c) signer identities classified as insider (team, paid auditors under ongoing engagement, mandated service providers) vs non-insider (independent community members, unaffiliated researchers), (d) the specific power held (upgrade, pause, parameter, etc.). - **C5.** On-chain governance: Governor / GovernorBravo / OZ Governor / Aragon Voting with token-weighted voting? Record proposal threshold, voting period, quorum, and the timelock delay between queue and execute. Every numeric constant must come from a Read Contract call you can link to, or be in unknowns[] with the C-code. If votingDelay / votingPeriod are denominated in BLOCKS, convert to seconds at the chain's CURRENT block time (Ethereum mainnet ≈ 12s post-Merge, not the 15s in older Compound/Bravo deployments) — cite both block count and converted seconds. - **C6.** EMERGENCY POWERS: separate emergency-pause / guardian role with a different time cap or different actor than the main upgrade authority? Record it explicitly. - **C7.** POWER TIER (blast radius). For each privileged path in C3–C6, classify the WORST thing that path can do, choosing the highest applicable tier. Cite the specific function name and any on-chain bound — tier claims without a named function are unsupported. - **T1 — FUND-CRITICAL**: replace implementation of contracts holding user funds; change AMM math / accounting / collateral logic; mint unbacked debt or shares; pause withdrawals; drain user-fund treasury; change oracle to attacker-controlled source; replace upgrade admin with EOA. - **T2 — ECONOMICALLY MATERIAL**: change fee parameters within bounded ranges; redirect protocol fees; add/remove markets / collateral types; bounded inflation or token mint within hard-capped schedule; spend protocol-owned (non-user) treasury. - **T3 — GOVERNANCE-INTERNAL**: change voting rules, quorum, voting period, proposal threshold; upgrade the Governor itself; rotate Timelock admin; mint governance tokens within a capped annual schedule. - **T4 — OPERATIONAL**: incentives distribution, grants, ENS / frontend canonicalization, deployment coordination, periphery router deprecation. The grade is set by the HIGHEST tier reachable on the uncontested fast path, not the median. State the tier and the binding function in the verdict. ### Read Contract discipline (applies to C3, C4, C5) Every numeric constant cited (timelock delays, voting periods, multisig thresholds, quorum percentages) must come from EITHER (a) a block-explorer Read Contract URL, OR (b) a DeFiPunkd `/api/contract/read` or `/api/safe/owners` URL (preferred with `&block=<n>` for content-addressed evidence), OR (c) an unknowns[] entry with the C-code. Docs / blog posts are corroboration only — they cannot be the sole citation for a value that is also readable on-chain. ### Off-chain-only substitute hierarchy (when grading_basis="off-chain-only" — see preamble Rule 16) When on-chain reads were genuinely unreachable this run, eligible off-chain substitutes in priority order: 1. Linked audit PDFs (admin roles, multisig members, timelock delays usually enumerated). 2. Governance forum posts that quote constants from a successful on-chain proposal (cite post URL + linked execution-tx URL). 3. Official protocol docs pages with named addresses and roles (must be on a domain owned by the protocol). 4. GitHub README / SECURITY.md / governance/*.md at a pinned commit SHA. Forbidden substitutes: third-party blog posts, X / Twitter threads, search-result snippets, model memory. Required degradation: any C-code citing a numeric constant from docs/forum/audit prose ONLY must also carry an `unknowns[]` entry with `-offchain` suffix noting "value not re-read on-chain in this run; corroboration only". ### Grade rules (apply the timelock bar conditional on the highest C7 tier reachable on the fast path) Security Council standard (used below): a multisig qualifies as "Security Council" only if ALL of: ≥7 signers, ≥51% threshold, ≥50% non-insider signers, every signer publicly announced. Failing any criterion = NOT a Security Council, regardless of signer reputation. - **green**: highest reachable tier is T3 or T4 regardless of timelock; OR T2 reachable with uncontested-fast-path delay ≥7 days; OR T1 reachable only via immutable contracts (T1 is unreachable); OR T1 reachable with uncontested-fast-path delay ≥7 days combined with a Security Council multisig; OR T1 reachable with uncontested-fast-path delay ≥7 days through active on-chain governance with broad token distribution. - **orange**: T2 reachable with uncontested-fast-path delay >0 but <7 days; OR T1 reachable with uncontested-fast-path delay >0 but <7 days; OR a multisig failing one or more Security Council criteria sits on a T1/T2 path; OR unclear upgrade authority on a T1/T2 path; OR governance with very short timelock or low quorum on a T1/T2 path. - **red**: T1 reachable with no timelock by a single EOA or 2-of-3 multisig; OR a T1 upgrade admin that is not a smart contract you can audit. - **unknown**: completed the checklist but still cannot determine the upgrade authority OR cannot classify the highest tier reachable on the main contracts. Tiering caveats: - "Bounded" must be enforced ON-CHAIN to count as T2. A function that sets fees with no upper-bound check is T1 — cite the bound check. - Recurring T2 economic extraction (e.g. fee redirect with no rate limit) approaches T1 over time. A single proposal that can permanently redirect all future revenue is T1. - T3 assumes the governance contract cannot itself authorize a T1/T2 action without going through the same timelock. If governance can self-upgrade to bypass the timelock, T3 collapses into T1. - Do not downgrade tier by hand-waving ("realistically governance would never…"). Tier on what the contract permits, not what feels likely. Notes: - **Dynamic / dual-governance timelocks** (Lido, Compound escrow veto): the rubric grades on the uncontested path because that is the path most upgrades take. A dynamic extension that fires only under stake-weighted opposition is a real protection — name it in the green steel-man, but it does not lift an orange fast path into green; state the tension in the verdict. - **Immutable cores with upgradable governance** (Uniswap-style): if fund-holding contracts are immutable and have no admin-reachable function moving / freezing / re-routing user funds, the highest reachable tier on the upgrade path is T3 — green regardless of timelock. Don't grade this orange just because the Governor is a proxy — that's a C2 fact, not a downgrade. Downgrade only applies if you can cite a concrete function on the upgradable surface that reaches T1 or T2 (privileged hook, upgradable factory controlling fund-routing, fee-switch redirecting protocol revenue without bound). - **The 7-day bar** reflects the exit-window standard — users need notice after a queued upgrade to withdraw if they disagree. The ability-to-exit slice grades the exit side; this slice grades the delay side; both must hold for users to actually benefit from the delay. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "control", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Ability to exit
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v1 - protocol.name: Uniswap V1 - protocol.chains: Ethereum - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: null ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) (no addresses pinned in this run — discover candidates from fetched website / GitHub / audit / explorer pages, record discovered addresses in evidence[] and protocol_metadata.admin_addresses, and put any reads you couldn't perform in unknowns[]. The next assessment will inherit your discoveries.) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: ABILITY-TO-EXIT Evaluate whether users can withdraw their funds on their own terms, even under adversarial admin conditions. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - E1. Enumerate every user-facing exit function in the main contracts: withdraw, redeem, burn, requestWithdrawal, claim, exit, etc. List them by name. Do NOT treat the contract as a monolith. - E2. For EACH exit function in E1: identify its access modifiers and any pause guards (e.g. _checkResumed, whenNotPaused, onlyRole). Functions that gate REQUEST PLACEMENT often differ from functions that CLAIM FINALIZED FUNDS — check both separately. - E3. For each pause guard: identify the role holder (which address holds PAUSE_ROLE / GUARDIAN / etc.) and the maximum pause duration. Specifically check whether PAUSE_INFINITELY (or equivalent uncapped pause) is callable, and which actor can call it (single multisig vs governance vote). For role-holder reads use https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=hasRole&args=0x...,0x... or &method=getRoleAdmin&args=0x.... For "is currently paused" checks use &method=paused or &method=isPaused&args=<resume-code>. Use the BARE method name (no parens). Cite the URL with &block=<n> in evidence[]. - E4. EMERGENCY vs GOVERNANCE pause distinction: many protocols have a fast-acting emergency pause capped at N days and a slow governance pause that can be indefinite. Record both paths separately if present, with their time caps and actor classes. - E5. Queued redemption: documented maximum queue duration, daily withdrawal caps, whether the queue itself is pausable. - E6. Forced-exit / escape-hatch / permissionless emergency-exit mechanism for adversarial-admin scenarios. - E7. Frontend dependency: confirm exit functions are directly callable on-chain (e.g. via Etherscan write tab or a generic wallet) without the project's frontend. Then write the steel-man section per Hard Rule 11. Common red-vs-orange tension on this slice: indefinite pause exists (suggests red) BUT the realistic emergency path is time-capped AND claims of already-finalized exits are not pause-gated (suggests orange). Resolve this by stating who can do what for how long, not by stopping at the worst-case sentence. Grade rules: - green = permissionless exit; pause is either absent, narrowly scoped to clearly-described emergencies with auto-expiry, or capped at ≤7 days; no frontend dependency for exit; claims of already-finalized exits are not pause-gated under any path. - orange = pausable with broad scope OR indefinite pause is reachable only through governance vote (not unilateral admin action), OR queued redemption with documented max > 7 days, OR claims-of-finalized are exempt but new-request placement can be paused indefinitely by governance. - red = exit requires admin signature, OR ANY actor (including governance) can pause CLAIMS of finalized exits indefinitely, OR there is no on-chain exit function at all (purely custodial), OR pause is held by a single EOA / 2-of-3 multisig with no time cap. - unknown = checklist incomplete after checking the sources above. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "ability-to-exit", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Autonomy
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v1 - protocol.name: Uniswap V1 - protocol.chains: Ethereum - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: null ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) (no addresses pinned in this run — discover candidates from fetched website / GitHub / audit / explorer pages, record discovered addresses in evidence[] and protocol_metadata.admin_addresses, and put any reads you couldn't perform in unknowns[]. The next assessment will inherit your discoveries.) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: AUTONOMY Evaluate this protocol's autonomy: can a failure of anything outside its own contracts cause theft or loss of user principal, loss of unclaimed yield, or materially change the protocol's expected performance? "Autonomy" is not "has zero external touchpoints" — it is "external failures are either survivable or recoverable without user loss". This slice adapts DefiScan v1's Autonomy dimension; dependencies are one of several criteria, not the whole frame. GUARDRAILS (read before grading): - Category alone (Liquid Staking, Bridge, RWA Lending, Restaking, …) does NOT force a grade. A category is a hint about where to look; the grade must come from the concrete A1–A9 findings below. - Base-chain consensus (Ethereum PoS, the chain's validator set, the canonical Deposit Contract at 0x00000000219ab540356cBB839Cbe05303d7705Fa) is the SUBSTRATE, not a dependency, for any protocol deployed on that chain. Do not list "depends on Ethereum" as a finding. - Oracles or other integrations used by DOWNSTREAM protocols that happen to read this protocol's token (e.g. Chainlink stETH/USD consumed by Aave) are NOT this protocol's dependencies. Count only what THIS protocol's contracts call or trust on-chain. If a feed or contract appears in the protocol's docs only as reference material for third-party integrators, EXCLUDE IT ENTIRELY — do not log it as a finding even with a "peripheral" or "referenced only" caveat. - "Upgradeable admin can change things" belongs to the CONTROL slice; only count it here when the upgrade surface lets governance silently swap an external dependency (see A9). - Underlying-asset risk in opt-in, isolated markets is NOT autonomy-red on its own. When a protocol wraps third-party yield-bearing assets (LSTs, LRTs, ERC-4626 vaults, lending receipts, restaked tokens) into per-market silos that users explicitly choose, a failure of one underlying does NOT propagate to other markets and is risk the user opted into per-market. Record it under A4 with depth and propagation scope, but do not let it alone drive a red verdict — red requires an external dependency that cross-cuts the protocol or that the user did not opt into at deposit time. A failure mode that is "if the LRT you deposited is hacked, your principal in that LRT-backed market is impaired" is the underlying's autonomy story, not this protocol's; grade it on whether THIS protocol introduces additional dependencies on top. - Sub-module enumeration is mandatory before grading. If the protocol ships distinct product lines or modules (e.g., a v2 core AMM plus a newer perps/funding-rate module, a lending pool plus a separate vault layer, an L1 core plus a cross-chain extension), enumerate each in findings and grade against the WORST module weighted by its share of TVS or its blast radius. A green core does not rescue an orange/red sub-module; conversely, a small red sub-module with capped TVS may bound the overall grade to orange. Name each module by its on-chain factory or router address. If you do not know whether a module exists, that is an unknowns[] entry, not silence. EXPLICIT TVS WEIGHTING: in the verdict, state each module's approximate share of total protocol TVS (use "~X%" if exact figures unavailable; check DeFiLlama or block-explorer balances on the module's main contract) and how that share informs the weighted grade. Format: "Module A holds ~X% of TVS (grade: <g>); Module B holds ~Y% (grade: <g>); weighted overall = <grade> because <reason>." If a red sub-module holds <5% of total TVS and is capped, the overall grade may be orange; if it holds >25%, the overall grade is red. Do not let qualitative reasoning substitute for the percentages — write the numbers. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. External contract calls. Enumerate every external contract the core contracts call or read from (oracles, price feeds, AMM pools, lending pools, staking/deposit contracts, yield wrappers). For each, identify the address, the provider, and what user-facing function of this protocol would break or mis-price if that external contract paused, mis-reported, or behaved adversarially. Grep for "oracle", "aggregator", "getPrice", "latestAnswer", "chainlink", "pyth", "redstone" as a starting point. To verify an oracle is live and what it currently reports, hit https://defipunkd.com/api/contract/read?chainId=<id>&address=<oracle>&method=latestAnswer (or &method=latestRoundData, &method=getPrice, &method=description; use the BARE method name without parens) and cite the URL — the response includes blockNumber/blockHash and rawReturnData, which is stronger evidence than a docs page about which feed "should" be used. - A2. Off-chain actor committees reporting INTO the protocol. Oracle committees, guardian multisigs, DAO-selected validator sets acting as protocol reporters, exit-bus signers, fraud-proof challengers. For each, record committee size, quorum, who picks the members, and what mis-reporting could do (mint, burn, finalize withdrawal, freeze). Distinguish this from governance admins (control slice). NOTE ON STAKING PROTOCOLS: validator slashing and node-operator misbehavior are properties of the base-chain substrate, NOT external dependencies, when the operator set is diversified enough that a coordinated failure caps at <5% principal loss. Count validator/operator risk under A2 ONLY if the operator set is small, non-diversified, or lacks bonding / slashing-insurance / diversification mitigations. A curated set of 30+ independent operators with documented diversification falls under the mitigated path; a 3-operator LST does not. Do not cite the protocol's own risk disclosure as evidence that operator failure = principal loss unless you also check the diversification and bond mitigations. - A3. Bridge / cross-chain messaging dependencies. Only count bridges that carry material TVL or are required for a core user flow. For each, name the bridge operator (canonical L1↔L2, LayerZero, Wormhole, Axelar, custom multisig), the trust model (canonical, optimistic, light-client, guardian set), and what fraction of TVL or users ride on it. "wstETH exists on 15 chains" is not a finding unless material TVL sits there. Before listing any non-primary chain deployment as a dependency, verify it is still operational as of analysis_date — retired or sunset deployments (e.g., Lido-on-Terra, Lido-on-Solana) belong in unknowns[] or should be omitted, never cited as a current dependency. - A4. Nested collateral / restaking chains. For restaking / LRT / receipt-of-receipt designs: record the depth of the collateral chain, every actor with slashing or freezing power at each level, and whether a failure N levels deep propagates to user principal here. - A5. Fork lineage (silent check). If DeFiLlama's forkedFrom is non-empty, record it as one finding and move on. If empty, do NOT add a placeholder finding; it adds noise. - A6. Fallback mechanisms and circuit breakers. What catches an external failure? Sanity-check contracts on oracle reports, rebase bounds, pause paths triggered by bad prices, second-opinion oracles, max-per-block throughput caps, withdrawal queues that absorb bad reports. Record which A1–A4 risks are mitigated by which fallback, and which are unmitigated. For EACH fallback you cite, state its activation status explicitly: (i) LIVE and enforcing on-chain today, (ii) DEPLOYED but not yet wired / activated (e.g., interface exists but the address is zero or the role is unassigned), or (iii) DOCUMENTED / PROPOSED only (forum post, LIP draft, audit pending). Only (i) counts as mitigation for the grade. A fallback in state (ii) or (iii) should be noted but must not reduce the risk in your steel-man or verdict. If you cannot determine activation status, add an unknowns[] entry rather than assume it is live. - A7. Sequencer / L1-liveness dependency BEYOND the base-chain substrate. SCOPE — sequencer risk only counts here when the protocol IS its own L2/L3 appchain or app-rollup, where the sequencer is part of the protocol's own stack and a freeze is a protocol-level outage. A protocol permissionlessly deployed on a third-party L2 inherits that L2's sequencer as substrate, not an A7 dependency. Record the sequencer/DA trust model when A7 applies. - A8. Keeper / relayer / off-chain bot liveness. Protocols that need permissionless-but-necessary off-chain actors (liquidation bots, auto-compounders, deposit relayers, intent solvers). Record whether the role is permissionless, what degrades if nobody runs it (yield paused, bad debt accumulates, positions go stale), and whether the failure mode is graceful or catastrophic. - A9. Governance-mutable dependency surface. Can an admin or DAO action silently INTRODUCE a NEW EXTERNAL dependency — swap the oracle address to a different provider, register a new staking module that calls an untrusted contract, add a new bridge, route SY through a new external vault — without an exit window for users? Check the upgrade / router / module-registry contracts. Answer: which EXTERNAL dependencies are governance-mutable, who holds that power, and whether there is a timelock or exit window. SCOPE LIMIT — read carefully: A9 is about the *external dependency surface*, not the upgrade surface in general. "The proxyAdmin / EOA can upgrade the router implementation to arbitrary bytecode" is a CONTROL-slice finding (admin can rug), NOT an autonomy-A9 finding. A9 fires only when the upgrade specifically swaps out or adds a contract that THIS protocol calls or trusts (e.g., changing the oracle address from Chainlink to a malicious feed, registering a new SY adapter that points to a third-party vault, redirecting a bridge endpoint). If the only finding is "admin can change implementation," do not log it under A9 and do not let it drive the autonomy grade — note it under control instead. The autonomy-relevant version of the same upgrade key is "admin can swap [specific external address X] without timelock"; that requires identifying the specific external dependency that becomes mutable. STEEL-MAN (per Hard Rule 13): write one-sentence strongest arguments for red, orange, and green using the A1–A9 findings. IMPACTED TVS ESTIMATE: the headline MUST include a rough impacted-TVS figure — the fraction of protocol TVS that could be lost or frozen if the worst-unmitigated dependency you identified failed. Use "~X%" if exact numbers are unavailable, "<1%" for de minimis, "unclear" only if A1–A9 left the question genuinely open (in which case grade=unknown is usually correct). Do NOT substitute qualitative phrases like "significant" — give a number or bracket. GRADE ANCHORS (mapped to DefiScan v1 stages): - green = Stage 2 equivalent. Failure of any external dependency cannot cause loss of user principal or unclaimed yield. Either there are no material external dependencies, or every critical one has a documented fallback (A6) that keeps users whole. Governance cannot silently introduce new dependencies without an exit window (A9). Impacted TVS under any single-dependency failure: effectively 0. - orange = Stage 1 equivalent. Failure of some external dependency can cause loss of unclaimed yield, or can materially change expected performance (pause withdrawals, freeze positions, degrade price quality), but cannot cause loss of principal. Committee-based oracles with sanity checks, canonical-only bridges, fallback paths that exist but are incomplete, or governance-mutable dependencies protected by a ≥7-day timelock. Impacted TVS is bounded and recoverable. - red = Stage 0 equivalent. Failure of an external dependency CAN cause theft or loss of principal. Examples: single-provider oracle with no sanity check or fallback, material TVL on a non-canonical bridge with a guardian multisig, governance can hot-swap oracles or add staking modules with no timelock or exit window, unmitigated keeper-liveness dependency where positions become insolvent if bots stop. Impacted TVS is material. - unknown = checklist incomplete after inspecting source + verified contracts. Prefer unknown over guessing when A1/A6 could not be reconstructed. RESERVE unknown for cases where the CORE ARCHITECTURE itself is unverifiable — not for cases where you merely cannot enumerate every per-market dependency in a multi-market protocol. If the core router/factory/oracle architecture is verifiable on-chain and you can determine whether the core requires external dependencies, grade the architecture even when an exhaustive per-market external-dependency census is infeasible. Acknowledge the per-market gap in unknowns[] but still issue a grade. Refusing to grade a multi-market protocol because you cannot list every SY/vault/market is over-use of unknown; grade the architecture and say so. PROMPT-META CHECK (per Hard Rule 17): before finalizing, verify the verdict cites concrete contract addresses, docs, or code — not the rubric itself. If your verdict says "the protocol belongs to a category the rubric marks red", rewrite it with the A1–A9 finding that actually justifies the grade, or drop to grade=unknown. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "autonomy", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Open Access
Unverified
Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v1 - protocol.name: Uniswap V1 - protocol.chains: Ethereum - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: null ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) (no addresses pinned in this run — discover candidates from fetched website / GitHub / audit / explorer pages, record discovered addresses in evidence[] and protocol_metadata.admin_addresses, and put any reads you couldn't perform in unknowns[]. The next assessment will inherit your discoveries.) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: OPEN-ACCESS Evaluate who is allowed to use the protocol and whether any of that permission is granted off-chain. Scope: this slice is about ADMISSION — who can enter, exit, or transact. Operator LIVENESS (what breaks if keepers/oracles go offline) is assessed in the dependencies slice and is out of scope for the grade here. You may note operator dependencies as context, but do not let "the protocol halts if operator X disappears" drive the access grade on its own; that belongs in dependencies. Source verification / contract verification on block explorers is assessed in the verifiability slice and is out of scope here — do NOT let "contract is unverified" drive the access grade. Framing: the smart contracts are the access layer; frontends are UX. A permissionless contract is reachable by any client (SDK, third-party UI, aggregator, wallet integration). Frontend ToS, IP geo-blocking, and wallet screening are publisher policies on one specific client — they are reported as context but do NOT determine the grade. The grade hinges on (1) what the contract itself permits, and (2) whether the protocol is practically reachable without the official publisher's cooperation. Meta-check before finalizing: if your verdict cites phrases from this prompt as evidence ("the protocol meets the 'credible alternatives' condition", "this fits the 'documented fallback' rule"), redo the verdict. The prompt describes the rubric; evidence must come from the protocol. A verdict should cite what the protocol does, not what the rubric says. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. Whitelist / allowlist modifiers in user-facing entry points. Grep for "onlyWhitelisted", "onlyRole", "allowlist", "isAccredited", "isKYCed". Note which functions are gated and who can add/remove from the list. - A2. Off-chain operators in the admission path: keepers, sequencers, privileged relayers, oracle posters whose approval is required to admit a user action (not just to keep the protocol live). For each, identify whether the role is held by a single operator, a permissioned committee, or is permissionless. Enumerate per user-facing function class (deposit vs withdraw-request vs claim-finalized vs transfer) which ones require operator approval to be admitted, and which ones admit users unconditionally. A function whose placement is unconditional but whose downstream settlement depends on an operator is an admission-permissionless function — flag the liveness dependency as context and defer its grading weight to the dependencies slice. - A3. Frontend restrictions on the official interface — record as context, not as a grade lever. Distinguish: - A3-passive: boilerplate ToS clauses (sanctions attestation, restricted-territory self-certification, VPN-circumvention prohibition, "comply with applicable law" eligibility, age of majority). - A3-active: runtime enforcement — IP-based geo-blocking, wallet-address screening against a sanctions oracle (Chainalysis, TRM, Elliptic), KYC wall, rendering-blocking jurisdiction banner. Record findings under the correct tier. Quote ToS text or banner text in evidence[].shows. These findings populate the headline and rationale but do NOT move the grade by themselves; the grade is set by A1, A2, and the A3b path check below. - A3b. Independent access paths (the operative grade input). Enumerate paths that do not require the official publisher's cooperation: - Published SDK / library / CLI for direct contract interaction. - Third-party frontends operated by separate legal entities. - Wallet-integrated access (MetaMask Swaps, Safe apps, etc.). - DEX / lending / yield aggregators that route through the contracts. Record at least one concrete link per path that exists. The protocol does NOT have to self-document these — the test is existence, not UX cost. An A3b-i redistribution of the official UI bound by the same ToS does NOT count as an independent path. - A4. Sanctions / compliance tooling at the contract level: does the protocol check addresses against OFAC lists or similar on-chain blocklists in the contract itself? (Frontend-only screening belongs in A3.) - A5. Differentiate read access vs write access: many protocols are read-permissionless (anyone can view state) but write-gated (only certain addresses can deposit/borrow). Record both. - A6. ToS / Legal links: locate them on the website and produce a VERBATIM quote of any jurisdictional, sanctions, or eligibility clause in evidence[].shows. If you cannot extract the clause text verbatim (SPA render failure, paywall, dead link, etc.), do NOT paraphrase or infer from general knowledge — record the ToS URL in unknowns[] with the reason extraction failed. Assertions about ToS content without a verbatim quote will be downweighted by reviewers. Then write the steel-man section per Hard Rule 11. Grade rules (admission-focused; liveness concerns belong in dependencies; source verification belongs in verifiability): - green = no contract-level whitelist/KYC on user entry/exit; no operator approval required to admit a user action; AND at least one independent A3b path exists (published SDK, third-party frontend, wallet integration, or aggregator routing). Frontend ToS posture and A3-active enforcement on the official UI do NOT block green when contracts are permissionless and an independent path exists — they are reported as context. - orange = contracts admit users unconditionally, BUT the protocol is operationally captured by the official publisher: no published SDK, no third-party frontend, no wallet integration, no aggregator routing. The contract is theoretically open but practically reachable only through the official UI. Also applies when admission requires approval from a permissioned committee that is governance-managed with a documented replacement procedure. - red = contract-level whitelist / KYC on user entry/exit, OR admission of a core user action requires approval from a single privileged operator or a small committee with no documented replacement procedure, OR enforces an on-chain blocklist updatable by a single party. - unknown = checklist incomplete after checking the sources above. Default-grade guidance: when contracts are fully permissionless AND any A3b independent path exists, the default grade is green regardless of frontend ToS or A3-active enforcement on the official UI. Frontend geo-blocking, sanctions-oracle wallet screening, and ToS sanctions clauses are publisher policies on one client and are reported in findings/headline as context, not as grade levers. To grade orange on operational-capture grounds, the auditor must affirmatively show that ALL independent paths are absent or also gated. Guideline on committees: where admission depends on a multi-operator committee, the relevant axes are (a) set size, (b) whether replacement/rotation is governed on-chain, (c) whether the replacement procedure is publicly documented. A large set with on-chain governance replacement should not be graded as a single-party operator even if rotation is not instantaneous. A small set with informal replacement should be treated as a single-party operator. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "open-access", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Audit all 5 dimensions · one prompt Submit run ↗
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v1 - protocol.name: Uniswap V1 - protocol.chains: Ethereum - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: null ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) (no addresses pinned in this run — discover candidates from fetched website / GitHub / audit / explorer pages, record discovered addresses in evidence[] and protocol_metadata.admin_addresses, and put any reads you couldn't perform in unknowns[]. The next assessment will inherit your discoveries.) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: CONTROL Evaluate who can change the protocol's rules, how fast, and how broadly. (Step 0 capability probe and the off-chain-only fallback live in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]) - **C1.** For each address you assess: who is the contract owner / admin / pendingAdmin / governor — read these via the block explorer's "Read Contract" tab OR `https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=owner` (BARE method names: `&method=owner`, `&method=admin`, `&method=pendingOwner`, `&method=governor`). For Safes use `/api/safe/owners?chainId=<id>&address=0x...`. When a protocol has multiple major versions deployed (v2/v3/v4), perform C1 reads on the NEWEST deployment separately — newer deployments often have weaker control surfaces than the legacy core. - **C2.** Upgrade mechanism: transparent proxy / UUPS / Beacon / Diamond / immutable. Identify the proxy admin address. Check upgradeability of GOVERNANCE contracts too — a Governor / Aragon Voting / OZ Governor is often itself a proxy whose admin is the Timelock. Asymmetry: when fund-holding cores are immutable AND governance has no admin path that reaches them, an upgradable Governor/Timelock is T3-only and must NOT drag the verdict below green on that basis alone (see grade rules and the "immutable cores" caveat). Only call upgradability "mixed" if you can name a concrete function on the upgradable surface that reaches T1 or T2 on user funds. - **C3.** EXECUTION PATH (enumerate every stage, in order, with delays in seconds). The operative path is usually a chain (voting → scheduler → timelock → executor; or governor → queue → execute; or Aragon Voting → DualGovernance → EmergencyProtectedTimelock → AdminExecutor). For each stage, record (a) the contract address, (b) the delay constant name + value in seconds, (c) the URL you read it from (block-explorer Read Contract OR `/api/contract/read?...&method=MIN_DELAY&block=<n>`). Do NOT stop at the first timelock-shaped contract — if its admin is itself called by another contract, keep walking. The grading delay is the SUM OF DELAYS ON THE UNCONTESTED FAST PATH (shortest time a proposal with no opposition can go from submission to executable). Dynamic / contested extensions (veto signaling, rage quit, escrow delay) are modifiers, not the basis — note them separately. - **C4.** Enumerate EVERY multisig with reachable control — main proxy admin, emergency activation, emergency execution, reseal / pause, gate-seal committees, tiebreaker, per-module admins. For each Safe, fetch threshold + owners + version via `/api/safe/owners?chainId=<id>&address=0x...` (response includes raw eth_call data, so the URL is citable evidence). Enumerate ops/council/incentives multisigs even when off the upgrade path — record their scope so a reader can see they are NOT on the upgrade path. For each: (a) address, (b) threshold / total signers, (c) signer identities classified as insider (team, paid auditors under ongoing engagement, mandated service providers) vs non-insider (independent community members, unaffiliated researchers), (d) the specific power held (upgrade, pause, parameter, etc.). - **C5.** On-chain governance: Governor / GovernorBravo / OZ Governor / Aragon Voting with token-weighted voting? Record proposal threshold, voting period, quorum, and the timelock delay between queue and execute. Every numeric constant must come from a Read Contract call you can link to, or be in unknowns[] with the C-code. If votingDelay / votingPeriod are denominated in BLOCKS, convert to seconds at the chain's CURRENT block time (Ethereum mainnet ≈ 12s post-Merge, not the 15s in older Compound/Bravo deployments) — cite both block count and converted seconds. - **C6.** EMERGENCY POWERS: separate emergency-pause / guardian role with a different time cap or different actor than the main upgrade authority? Record it explicitly. - **C7.** POWER TIER (blast radius). For each privileged path in C3–C6, classify the WORST thing that path can do, choosing the highest applicable tier. Cite the specific function name and any on-chain bound — tier claims without a named function are unsupported. - **T1 — FUND-CRITICAL**: replace implementation of contracts holding user funds; change AMM math / accounting / collateral logic; mint unbacked debt or shares; pause withdrawals; drain user-fund treasury; change oracle to attacker-controlled source; replace upgrade admin with EOA. - **T2 — ECONOMICALLY MATERIAL**: change fee parameters within bounded ranges; redirect protocol fees; add/remove markets / collateral types; bounded inflation or token mint within hard-capped schedule; spend protocol-owned (non-user) treasury. - **T3 — GOVERNANCE-INTERNAL**: change voting rules, quorum, voting period, proposal threshold; upgrade the Governor itself; rotate Timelock admin; mint governance tokens within a capped annual schedule. - **T4 — OPERATIONAL**: incentives distribution, grants, ENS / frontend canonicalization, deployment coordination, periphery router deprecation. The grade is set by the HIGHEST tier reachable on the uncontested fast path, not the median. State the tier and the binding function in the verdict. ### Read Contract discipline (applies to C3, C4, C5) Every numeric constant cited (timelock delays, voting periods, multisig thresholds, quorum percentages) must come from EITHER (a) a block-explorer Read Contract URL, OR (b) a DeFiPunkd `/api/contract/read` or `/api/safe/owners` URL (preferred with `&block=<n>` for content-addressed evidence), OR (c) an unknowns[] entry with the C-code. Docs / blog posts are corroboration only — they cannot be the sole citation for a value that is also readable on-chain. ### Off-chain-only substitute hierarchy (when grading_basis="off-chain-only" — see preamble Rule 16) When on-chain reads were genuinely unreachable this run, eligible off-chain substitutes in priority order: 1. Linked audit PDFs (admin roles, multisig members, timelock delays usually enumerated). 2. Governance forum posts that quote constants from a successful on-chain proposal (cite post URL + linked execution-tx URL). 3. Official protocol docs pages with named addresses and roles (must be on a domain owned by the protocol). 4. GitHub README / SECURITY.md / governance/*.md at a pinned commit SHA. Forbidden substitutes: third-party blog posts, X / Twitter threads, search-result snippets, model memory. Required degradation: any C-code citing a numeric constant from docs/forum/audit prose ONLY must also carry an `unknowns[]` entry with `-offchain` suffix noting "value not re-read on-chain in this run; corroboration only". ### Grade rules (apply the timelock bar conditional on the highest C7 tier reachable on the fast path) Security Council standard (used below): a multisig qualifies as "Security Council" only if ALL of: ≥7 signers, ≥51% threshold, ≥50% non-insider signers, every signer publicly announced. Failing any criterion = NOT a Security Council, regardless of signer reputation. - **green**: highest reachable tier is T3 or T4 regardless of timelock; OR T2 reachable with uncontested-fast-path delay ≥7 days; OR T1 reachable only via immutable contracts (T1 is unreachable); OR T1 reachable with uncontested-fast-path delay ≥7 days combined with a Security Council multisig; OR T1 reachable with uncontested-fast-path delay ≥7 days through active on-chain governance with broad token distribution. - **orange**: T2 reachable with uncontested-fast-path delay >0 but <7 days; OR T1 reachable with uncontested-fast-path delay >0 but <7 days; OR a multisig failing one or more Security Council criteria sits on a T1/T2 path; OR unclear upgrade authority on a T1/T2 path; OR governance with very short timelock or low quorum on a T1/T2 path. - **red**: T1 reachable with no timelock by a single EOA or 2-of-3 multisig; OR a T1 upgrade admin that is not a smart contract you can audit. - **unknown**: completed the checklist but still cannot determine the upgrade authority OR cannot classify the highest tier reachable on the main contracts. Tiering caveats: - "Bounded" must be enforced ON-CHAIN to count as T2. A function that sets fees with no upper-bound check is T1 — cite the bound check. - Recurring T2 economic extraction (e.g. fee redirect with no rate limit) approaches T1 over time. A single proposal that can permanently redirect all future revenue is T1. - T3 assumes the governance contract cannot itself authorize a T1/T2 action without going through the same timelock. If governance can self-upgrade to bypass the timelock, T3 collapses into T1. - Do not downgrade tier by hand-waving ("realistically governance would never…"). Tier on what the contract permits, not what feels likely. Notes: - **Dynamic / dual-governance timelocks** (Lido, Compound escrow veto): the rubric grades on the uncontested path because that is the path most upgrades take. A dynamic extension that fires only under stake-weighted opposition is a real protection — name it in the green steel-man, but it does not lift an orange fast path into green; state the tension in the verdict. - **Immutable cores with upgradable governance** (Uniswap-style): if fund-holding contracts are immutable and have no admin-reachable function moving / freezing / re-routing user funds, the highest reachable tier on the upgrade path is T3 — green regardless of timelock. Don't grade this orange just because the Governor is a proxy — that's a C2 fact, not a downgrade. Downgrade only applies if you can cite a concrete function on the upgradable surface that reaches T1 or T2 (privileged hook, upgradable factory controlling fund-routing, fee-switch redirecting protocol revenue without bound). - **The 7-day bar** reflects the exit-window standard — users need notice after a queued upgrade to withdraw if they disagree. The ability-to-exit slice grades the exit side; this slice grades the delay side; both must hold for users to actually benefit from the delay. --- ### Slice: ABILITY-TO-EXIT Evaluate whether users can withdraw their funds on their own terms, even under adversarial admin conditions. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - E1. Enumerate every user-facing exit function in the main contracts: withdraw, redeem, burn, requestWithdrawal, claim, exit, etc. List them by name. Do NOT treat the contract as a monolith. - E2. For EACH exit function in E1: identify its access modifiers and any pause guards (e.g. _checkResumed, whenNotPaused, onlyRole). Functions that gate REQUEST PLACEMENT often differ from functions that CLAIM FINALIZED FUNDS — check both separately. - E3. For each pause guard: identify the role holder (which address holds PAUSE_ROLE / GUARDIAN / etc.) and the maximum pause duration. Specifically check whether PAUSE_INFINITELY (or equivalent uncapped pause) is callable, and which actor can call it (single multisig vs governance vote). For role-holder reads use https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=hasRole&args=0x...,0x... or &method=getRoleAdmin&args=0x.... For "is currently paused" checks use &method=paused or &method=isPaused&args=<resume-code>. Use the BARE method name (no parens). Cite the URL with &block=<n> in evidence[]. - E4. EMERGENCY vs GOVERNANCE pause distinction: many protocols have a fast-acting emergency pause capped at N days and a slow governance pause that can be indefinite. Record both paths separately if present, with their time caps and actor classes. - E5. Queued redemption: documented maximum queue duration, daily withdrawal caps, whether the queue itself is pausable. - E6. Forced-exit / escape-hatch / permissionless emergency-exit mechanism for adversarial-admin scenarios. - E7. Frontend dependency: confirm exit functions are directly callable on-chain (e.g. via Etherscan write tab or a generic wallet) without the project's frontend. Then write the steel-man section per Hard Rule 11. Common red-vs-orange tension on this slice: indefinite pause exists (suggests red) BUT the realistic emergency path is time-capped AND claims of already-finalized exits are not pause-gated (suggests orange). Resolve this by stating who can do what for how long, not by stopping at the worst-case sentence. Grade rules: - green = permissionless exit; pause is either absent, narrowly scoped to clearly-described emergencies with auto-expiry, or capped at ≤7 days; no frontend dependency for exit; claims of already-finalized exits are not pause-gated under any path. - orange = pausable with broad scope OR indefinite pause is reachable only through governance vote (not unilateral admin action), OR queued redemption with documented max > 7 days, OR claims-of-finalized are exempt but new-request placement can be paused indefinitely by governance. - red = exit requires admin signature, OR ANY actor (including governance) can pause CLAIMS of finalized exits indefinitely, OR there is no on-chain exit function at all (purely custodial), OR pause is held by a single EOA / 2-of-3 multisig with no time cap. - unknown = checklist incomplete after checking the sources above. --- ### Slice: AUTONOMY Evaluate this protocol's autonomy: can a failure of anything outside its own contracts cause theft or loss of user principal, loss of unclaimed yield, or materially change the protocol's expected performance? "Autonomy" is not "has zero external touchpoints" — it is "external failures are either survivable or recoverable without user loss". This slice adapts DefiScan v1's Autonomy dimension; dependencies are one of several criteria, not the whole frame. GUARDRAILS (read before grading): - Category alone (Liquid Staking, Bridge, RWA Lending, Restaking, …) does NOT force a grade. A category is a hint about where to look; the grade must come from the concrete A1–A9 findings below. - Base-chain consensus (Ethereum PoS, the chain's validator set, the canonical Deposit Contract at 0x00000000219ab540356cBB839Cbe05303d7705Fa) is the SUBSTRATE, not a dependency, for any protocol deployed on that chain. Do not list "depends on Ethereum" as a finding. - Oracles or other integrations used by DOWNSTREAM protocols that happen to read this protocol's token (e.g. Chainlink stETH/USD consumed by Aave) are NOT this protocol's dependencies. Count only what THIS protocol's contracts call or trust on-chain. If a feed or contract appears in the protocol's docs only as reference material for third-party integrators, EXCLUDE IT ENTIRELY — do not log it as a finding even with a "peripheral" or "referenced only" caveat. - "Upgradeable admin can change things" belongs to the CONTROL slice; only count it here when the upgrade surface lets governance silently swap an external dependency (see A9). - Underlying-asset risk in opt-in, isolated markets is NOT autonomy-red on its own. When a protocol wraps third-party yield-bearing assets (LSTs, LRTs, ERC-4626 vaults, lending receipts, restaked tokens) into per-market silos that users explicitly choose, a failure of one underlying does NOT propagate to other markets and is risk the user opted into per-market. Record it under A4 with depth and propagation scope, but do not let it alone drive a red verdict — red requires an external dependency that cross-cuts the protocol or that the user did not opt into at deposit time. A failure mode that is "if the LRT you deposited is hacked, your principal in that LRT-backed market is impaired" is the underlying's autonomy story, not this protocol's; grade it on whether THIS protocol introduces additional dependencies on top. - Sub-module enumeration is mandatory before grading. If the protocol ships distinct product lines or modules (e.g., a v2 core AMM plus a newer perps/funding-rate module, a lending pool plus a separate vault layer, an L1 core plus a cross-chain extension), enumerate each in findings and grade against the WORST module weighted by its share of TVS or its blast radius. A green core does not rescue an orange/red sub-module; conversely, a small red sub-module with capped TVS may bound the overall grade to orange. Name each module by its on-chain factory or router address. If you do not know whether a module exists, that is an unknowns[] entry, not silence. EXPLICIT TVS WEIGHTING: in the verdict, state each module's approximate share of total protocol TVS (use "~X%" if exact figures unavailable; check DeFiLlama or block-explorer balances on the module's main contract) and how that share informs the weighted grade. Format: "Module A holds ~X% of TVS (grade: <g>); Module B holds ~Y% (grade: <g>); weighted overall = <grade> because <reason>." If a red sub-module holds <5% of total TVS and is capped, the overall grade may be orange; if it holds >25%, the overall grade is red. Do not let qualitative reasoning substitute for the percentages — write the numbers. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. External contract calls. Enumerate every external contract the core contracts call or read from (oracles, price feeds, AMM pools, lending pools, staking/deposit contracts, yield wrappers). For each, identify the address, the provider, and what user-facing function of this protocol would break or mis-price if that external contract paused, mis-reported, or behaved adversarially. Grep for "oracle", "aggregator", "getPrice", "latestAnswer", "chainlink", "pyth", "redstone" as a starting point. To verify an oracle is live and what it currently reports, hit https://defipunkd.com/api/contract/read?chainId=<id>&address=<oracle>&method=latestAnswer (or &method=latestRoundData, &method=getPrice, &method=description; use the BARE method name without parens) and cite the URL — the response includes blockNumber/blockHash and rawReturnData, which is stronger evidence than a docs page about which feed "should" be used. - A2. Off-chain actor committees reporting INTO the protocol. Oracle committees, guardian multisigs, DAO-selected validator sets acting as protocol reporters, exit-bus signers, fraud-proof challengers. For each, record committee size, quorum, who picks the members, and what mis-reporting could do (mint, burn, finalize withdrawal, freeze). Distinguish this from governance admins (control slice). NOTE ON STAKING PROTOCOLS: validator slashing and node-operator misbehavior are properties of the base-chain substrate, NOT external dependencies, when the operator set is diversified enough that a coordinated failure caps at <5% principal loss. Count validator/operator risk under A2 ONLY if the operator set is small, non-diversified, or lacks bonding / slashing-insurance / diversification mitigations. A curated set of 30+ independent operators with documented diversification falls under the mitigated path; a 3-operator LST does not. Do not cite the protocol's own risk disclosure as evidence that operator failure = principal loss unless you also check the diversification and bond mitigations. - A3. Bridge / cross-chain messaging dependencies. Only count bridges that carry material TVL or are required for a core user flow. For each, name the bridge operator (canonical L1↔L2, LayerZero, Wormhole, Axelar, custom multisig), the trust model (canonical, optimistic, light-client, guardian set), and what fraction of TVL or users ride on it. "wstETH exists on 15 chains" is not a finding unless material TVL sits there. Before listing any non-primary chain deployment as a dependency, verify it is still operational as of analysis_date — retired or sunset deployments (e.g., Lido-on-Terra, Lido-on-Solana) belong in unknowns[] or should be omitted, never cited as a current dependency. - A4. Nested collateral / restaking chains. For restaking / LRT / receipt-of-receipt designs: record the depth of the collateral chain, every actor with slashing or freezing power at each level, and whether a failure N levels deep propagates to user principal here. - A5. Fork lineage (silent check). If DeFiLlama's forkedFrom is non-empty, record it as one finding and move on. If empty, do NOT add a placeholder finding; it adds noise. - A6. Fallback mechanisms and circuit breakers. What catches an external failure? Sanity-check contracts on oracle reports, rebase bounds, pause paths triggered by bad prices, second-opinion oracles, max-per-block throughput caps, withdrawal queues that absorb bad reports. Record which A1–A4 risks are mitigated by which fallback, and which are unmitigated. For EACH fallback you cite, state its activation status explicitly: (i) LIVE and enforcing on-chain today, (ii) DEPLOYED but not yet wired / activated (e.g., interface exists but the address is zero or the role is unassigned), or (iii) DOCUMENTED / PROPOSED only (forum post, LIP draft, audit pending). Only (i) counts as mitigation for the grade. A fallback in state (ii) or (iii) should be noted but must not reduce the risk in your steel-man or verdict. If you cannot determine activation status, add an unknowns[] entry rather than assume it is live. - A7. Sequencer / L1-liveness dependency BEYOND the base-chain substrate. SCOPE — sequencer risk only counts here when the protocol IS its own L2/L3 appchain or app-rollup, where the sequencer is part of the protocol's own stack and a freeze is a protocol-level outage. A protocol permissionlessly deployed on a third-party L2 inherits that L2's sequencer as substrate, not an A7 dependency. Record the sequencer/DA trust model when A7 applies. - A8. Keeper / relayer / off-chain bot liveness. Protocols that need permissionless-but-necessary off-chain actors (liquidation bots, auto-compounders, deposit relayers, intent solvers). Record whether the role is permissionless, what degrades if nobody runs it (yield paused, bad debt accumulates, positions go stale), and whether the failure mode is graceful or catastrophic. - A9. Governance-mutable dependency surface. Can an admin or DAO action silently INTRODUCE a NEW EXTERNAL dependency — swap the oracle address to a different provider, register a new staking module that calls an untrusted contract, add a new bridge, route SY through a new external vault — without an exit window for users? Check the upgrade / router / module-registry contracts. Answer: which EXTERNAL dependencies are governance-mutable, who holds that power, and whether there is a timelock or exit window. SCOPE LIMIT — read carefully: A9 is about the *external dependency surface*, not the upgrade surface in general. "The proxyAdmin / EOA can upgrade the router implementation to arbitrary bytecode" is a CONTROL-slice finding (admin can rug), NOT an autonomy-A9 finding. A9 fires only when the upgrade specifically swaps out or adds a contract that THIS protocol calls or trusts (e.g., changing the oracle address from Chainlink to a malicious feed, registering a new SY adapter that points to a third-party vault, redirecting a bridge endpoint). If the only finding is "admin can change implementation," do not log it under A9 and do not let it drive the autonomy grade — note it under control instead. The autonomy-relevant version of the same upgrade key is "admin can swap [specific external address X] without timelock"; that requires identifying the specific external dependency that becomes mutable. STEEL-MAN (per Hard Rule 13): write one-sentence strongest arguments for red, orange, and green using the A1–A9 findings. IMPACTED TVS ESTIMATE: the headline MUST include a rough impacted-TVS figure — the fraction of protocol TVS that could be lost or frozen if the worst-unmitigated dependency you identified failed. Use "~X%" if exact numbers are unavailable, "<1%" for de minimis, "unclear" only if A1–A9 left the question genuinely open (in which case grade=unknown is usually correct). Do NOT substitute qualitative phrases like "significant" — give a number or bracket. GRADE ANCHORS (mapped to DefiScan v1 stages): - green = Stage 2 equivalent. Failure of any external dependency cannot cause loss of user principal or unclaimed yield. Either there are no material external dependencies, or every critical one has a documented fallback (A6) that keeps users whole. Governance cannot silently introduce new dependencies without an exit window (A9). Impacted TVS under any single-dependency failure: effectively 0. - orange = Stage 1 equivalent. Failure of some external dependency can cause loss of unclaimed yield, or can materially change expected performance (pause withdrawals, freeze positions, degrade price quality), but cannot cause loss of principal. Committee-based oracles with sanity checks, canonical-only bridges, fallback paths that exist but are incomplete, or governance-mutable dependencies protected by a ≥7-day timelock. Impacted TVS is bounded and recoverable. - red = Stage 0 equivalent. Failure of an external dependency CAN cause theft or loss of principal. Examples: single-provider oracle with no sanity check or fallback, material TVL on a non-canonical bridge with a guardian multisig, governance can hot-swap oracles or add staking modules with no timelock or exit window, unmitigated keeper-liveness dependency where positions become insolvent if bots stop. Impacted TVS is material. - unknown = checklist incomplete after inspecting source + verified contracts. Prefer unknown over guessing when A1/A6 could not be reconstructed. RESERVE unknown for cases where the CORE ARCHITECTURE itself is unverifiable — not for cases where you merely cannot enumerate every per-market dependency in a multi-market protocol. If the core router/factory/oracle architecture is verifiable on-chain and you can determine whether the core requires external dependencies, grade the architecture even when an exhaustive per-market external-dependency census is infeasible. Acknowledge the per-market gap in unknowns[] but still issue a grade. Refusing to grade a multi-market protocol because you cannot list every SY/vault/market is over-use of unknown; grade the architecture and say so. PROMPT-META CHECK (per Hard Rule 17): before finalizing, verify the verdict cites concrete contract addresses, docs, or code — not the rubric itself. If your verdict says "the protocol belongs to a category the rubric marks red", rewrite it with the A1–A9 finding that actually justifies the grade, or drop to grade=unknown. --- ### Slice: OPEN-ACCESS Evaluate who is allowed to use the protocol and whether any of that permission is granted off-chain. Scope: this slice is about ADMISSION — who can enter, exit, or transact. Operator LIVENESS (what breaks if keepers/oracles go offline) is assessed in the dependencies slice and is out of scope for the grade here. You may note operator dependencies as context, but do not let "the protocol halts if operator X disappears" drive the access grade on its own; that belongs in dependencies. Source verification / contract verification on block explorers is assessed in the verifiability slice and is out of scope here — do NOT let "contract is unverified" drive the access grade. Framing: the smart contracts are the access layer; frontends are UX. A permissionless contract is reachable by any client (SDK, third-party UI, aggregator, wallet integration). Frontend ToS, IP geo-blocking, and wallet screening are publisher policies on one specific client — they are reported as context but do NOT determine the grade. The grade hinges on (1) what the contract itself permits, and (2) whether the protocol is practically reachable without the official publisher's cooperation. Meta-check before finalizing: if your verdict cites phrases from this prompt as evidence ("the protocol meets the 'credible alternatives' condition", "this fits the 'documented fallback' rule"), redo the verdict. The prompt describes the rubric; evidence must come from the protocol. A verdict should cite what the protocol does, not what the rubric says. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. Whitelist / allowlist modifiers in user-facing entry points. Grep for "onlyWhitelisted", "onlyRole", "allowlist", "isAccredited", "isKYCed". Note which functions are gated and who can add/remove from the list. - A2. Off-chain operators in the admission path: keepers, sequencers, privileged relayers, oracle posters whose approval is required to admit a user action (not just to keep the protocol live). For each, identify whether the role is held by a single operator, a permissioned committee, or is permissionless. Enumerate per user-facing function class (deposit vs withdraw-request vs claim-finalized vs transfer) which ones require operator approval to be admitted, and which ones admit users unconditionally. A function whose placement is unconditional but whose downstream settlement depends on an operator is an admission-permissionless function — flag the liveness dependency as context and defer its grading weight to the dependencies slice. - A3. Frontend restrictions on the official interface — record as context, not as a grade lever. Distinguish: - A3-passive: boilerplate ToS clauses (sanctions attestation, restricted-territory self-certification, VPN-circumvention prohibition, "comply with applicable law" eligibility, age of majority). - A3-active: runtime enforcement — IP-based geo-blocking, wallet-address screening against a sanctions oracle (Chainalysis, TRM, Elliptic), KYC wall, rendering-blocking jurisdiction banner. Record findings under the correct tier. Quote ToS text or banner text in evidence[].shows. These findings populate the headline and rationale but do NOT move the grade by themselves; the grade is set by A1, A2, and the A3b path check below. - A3b. Independent access paths (the operative grade input). Enumerate paths that do not require the official publisher's cooperation: - Published SDK / library / CLI for direct contract interaction. - Third-party frontends operated by separate legal entities. - Wallet-integrated access (MetaMask Swaps, Safe apps, etc.). - DEX / lending / yield aggregators that route through the contracts. Record at least one concrete link per path that exists. The protocol does NOT have to self-document these — the test is existence, not UX cost. An A3b-i redistribution of the official UI bound by the same ToS does NOT count as an independent path. - A4. Sanctions / compliance tooling at the contract level: does the protocol check addresses against OFAC lists or similar on-chain blocklists in the contract itself? (Frontend-only screening belongs in A3.) - A5. Differentiate read access vs write access: many protocols are read-permissionless (anyone can view state) but write-gated (only certain addresses can deposit/borrow). Record both. - A6. ToS / Legal links: locate them on the website and produce a VERBATIM quote of any jurisdictional, sanctions, or eligibility clause in evidence[].shows. If you cannot extract the clause text verbatim (SPA render failure, paywall, dead link, etc.), do NOT paraphrase or infer from general knowledge — record the ToS URL in unknowns[] with the reason extraction failed. Assertions about ToS content without a verbatim quote will be downweighted by reviewers. Then write the steel-man section per Hard Rule 11. Grade rules (admission-focused; liveness concerns belong in dependencies; source verification belongs in verifiability): - green = no contract-level whitelist/KYC on user entry/exit; no operator approval required to admit a user action; AND at least one independent A3b path exists (published SDK, third-party frontend, wallet integration, or aggregator routing). Frontend ToS posture and A3-active enforcement on the official UI do NOT block green when contracts are permissionless and an independent path exists — they are reported as context. - orange = contracts admit users unconditionally, BUT the protocol is operationally captured by the official publisher: no published SDK, no third-party frontend, no wallet integration, no aggregator routing. The contract is theoretically open but practically reachable only through the official UI. Also applies when admission requires approval from a permissioned committee that is governance-managed with a documented replacement procedure. - red = contract-level whitelist / KYC on user entry/exit, OR admission of a core user action requires approval from a single privileged operator or a small committee with no documented replacement procedure, OR enforces an on-chain blocklist updatable by a single party. - unknown = checklist incomplete after checking the sources above. Default-grade guidance: when contracts are fully permissionless AND any A3b independent path exists, the default grade is green regardless of frontend ToS or A3-active enforcement on the official UI. Frontend geo-blocking, sanctions-oracle wallet screening, and ToS sanctions clauses are publisher policies on one client and are reported in findings/headline as context, not as grade levers. To grade orange on operational-capture grounds, the auditor must affirmatively show that ALL independent paths are absent or also gated. Guideline on committees: where admission depends on a multi-operator committee, the relevant axes are (a) set size, (b) whether replacement/rotation is governed on-chain, (c) whether the replacement procedure is publicly documented. A large set with on-chain governance replacement should not be graded as a single-party operator even if rotation is not instantaneous. A small set with informal replacement should be treated as a single-party operator. --- ### Slice: VERIFIABILITY Evaluate whether an outsider can independently confirm what the deployed code does. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - V1. For each address you assess: is the bytecode verified on the chain's block explorer? Record the "Contract Source Code Verified" indicator. https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... returns this as a top-level "verified" boolean plus "abiSource" ("etherscan" / "sourcify") and an inline ABI — useful when the explorer page is rate-limited. If the contract is a proxy, verify BOTH the proxy contract AND the current implementation contract. The same /api/contract/abi response auto-resolves proxies and includes a "proxy.implementation" address when present, so one call covers V1 + V6 in one shot. An explorer "Similar Match" on a well-known proxy pattern (Aragon AppProxyUpgradeable, ERC1967Proxy, OssifiableProxy, OZ TransparentUpgradeableProxy) is expected for that pattern and does NOT count as a verification gap on its own — what matters is that the implementation is independently verified. - V2. Source-to-repo correspondence: for each verified contract, attempt to find a matching commit in the linked GitHub repos. Record evidence[].commit on a match. Independent compile/bytecode-match is NOT required for green — a recognized public repo whose structure and file contents correspond to the explorer-visible source is sufficient. If you did not pin a commit SHA or run a bytecode diff, record that plainly in unknowns[] and proceed; it is a scope limit, not a downgrade signal. - V3. Audit coverage: for each URL in protocol.audit_links, open it and record: auditor name, audit date, the specific contracts / commit in scope. Flag audits that predate the current deployment by >6 months without a follow-up review. - V4. Auditor recognition: the following firms are broadly recognized in Solidity: Trail of Bits, Zellic, Spearbit, OpenZeppelin, ConsenSys Diligence, Certora (formal verification), Quantstamp, Halborn, Peckshield, Sigma Prime, ChainSecurity, Ackee Blockchain, MixBytes, Statemind. Unknown firms are orange-at-best for any green-grade claim. Name the firm explicitly in evidence[]. - V5. Post-audit drift: compare the most recent in-scope audit(s) against the currently-deployed source, weighted by what each contract does and by what the changes actually contain. SCOPE — drift only downgrades the grade when ALL of the following hold: (i) the drifting contract is fund-custody / settlement / accounting-critical (NOT a peripheral router, lens, quoter, or pure-view contract that holds no balances); (ii) the changes are material — new functions, modified access control, modified accounting, modified fund flow — and not refactors / struct relocations / import reorgs / build or CI fixes / formatting; (iii) no later audit, fix-audit, or differential audit from a recognized firm covers the changed files (audits often pin a pre-fix commit while a follow-up reviews the delta — match by file scope, not by commit-hash equality). When you cite drift as a downgrade reason, name the specific behavior change (function added, role granted, accounting formula altered) — "N commits ahead" or "+X/-Y LOC" alone is not evidence of material drift. If you have not sampled the diff content (e.g. via the GitHub compare view or the top commits in the window), record drift as an unknowns[] entry rather than auto-downgrading; commit-count and LOC are starting signals, not findings. - V6. Implementation vs proxy: a verified proxy with an unverified implementation is effectively unverified. State whether the implementation is verified separately. EVIDENCE DISCIPLINE (read before writing findings[]): - Do not assert a specific deploy-commit SHA, bytecode equivalence, or "identical to audited commit" unless you actually fetched the artifact that shows it (e.g., a deployed-addresses JSON you opened, an explorer page you read). Inferred or plausible matches belong in unknowns[], never in findings[] or evidence[]. - Evidence[] entries must correspond to pages/files you actually retrieved this run. A URL you did not open is not evidence. Then write the steel-man section per Hard Rule 11. Grade rules: - green = deployed bytecode verified on the explorer (proxy AND implementation if proxied; "Similar Match" on a standard proxy pattern is fine per V1), a public source repo exists whose contents correspond to the explorer-visible source, AND ≥1 audit from a recognized firm covering the currently-deployed contracts (≤6 months of drift OR drift was re-audited). A missing local compile-match is not a downgrade — record it in unknowns[] and still grade green if the other conditions hold. - orange = verified but with visible drift from the public repo, OR audit scope is stale relative to deployment, OR only minor / unknown-firm audits exist, OR only some of the main contracts are verified, OR proxy verified but implementation only partially verified. - red = unverified bytecode (or verified proxy with unverified implementation), OR no audit in protocol.audit_links, OR no public repo. - unknown = reserved for when the protocol's verifiability posture genuinely cannot be assessed (e.g., explorer and repo both inaccessible for this protocol). Do NOT use unknown merely because you, the analyst, could not run a particular check such as a bytecode diff — that goes in unknowns[] while the grade is still assigned from the evidence you do have. --- ### JSON output contract Return exactly one JSON array inside a single ```json fenced block. The array MUST contain exactly five objects, one per risk slice, in this exact order: "control", "ability-to-exit", "autonomy", "open-access", "verifiability". Do not include the discovery slice. Each object has the same shape as a normal slice submission: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "<one of: control | ability-to-exit | autonomy | open-access | verifiability>", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - Produce one complete object for each of these slices only: control, ability-to-exit, autonomy, open-access, verifiability. - Reuse the same model, chat_url, snapshot_generated_at, prompt_version, analysis_date, and slug values across all five objects. - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches that object's slice checklist prefix verbatim (C1, E2, AU3, A3b, V4a, …); unknowns[] entries are checklist-coded ("C3: …"). - Wrap the array in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.
- Open source + 9 audits
Protocol publishes a GitHub repository and has at least one audit on record. This is a coarse Phase-0 signal only: auditor reputation, scope, and post-audit review coverage are not yet weighted.
Run your own prompt Submit run ↗### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v1 - protocol.name: Uniswap V1 - protocol.chains: Ethereum - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: null ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) (no addresses pinned in this run — discover candidates from fetched website / GitHub / audit / explorer pages, record discovered addresses in evidence[] and protocol_metadata.admin_addresses, and put any reads you couldn't perform in unknowns[]. The next assessment will inherit your discoveries.) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: VERIFIABILITY Evaluate whether an outsider can independently confirm what the deployed code does. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - V1. For each address you assess: is the bytecode verified on the chain's block explorer? Record the "Contract Source Code Verified" indicator. https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... returns this as a top-level "verified" boolean plus "abiSource" ("etherscan" / "sourcify") and an inline ABI — useful when the explorer page is rate-limited. If the contract is a proxy, verify BOTH the proxy contract AND the current implementation contract. The same /api/contract/abi response auto-resolves proxies and includes a "proxy.implementation" address when present, so one call covers V1 + V6 in one shot. An explorer "Similar Match" on a well-known proxy pattern (Aragon AppProxyUpgradeable, ERC1967Proxy, OssifiableProxy, OZ TransparentUpgradeableProxy) is expected for that pattern and does NOT count as a verification gap on its own — what matters is that the implementation is independently verified. - V2. Source-to-repo correspondence: for each verified contract, attempt to find a matching commit in the linked GitHub repos. Record evidence[].commit on a match. Independent compile/bytecode-match is NOT required for green — a recognized public repo whose structure and file contents correspond to the explorer-visible source is sufficient. If you did not pin a commit SHA or run a bytecode diff, record that plainly in unknowns[] and proceed; it is a scope limit, not a downgrade signal. - V3. Audit coverage: for each URL in protocol.audit_links, open it and record: auditor name, audit date, the specific contracts / commit in scope. Flag audits that predate the current deployment by >6 months without a follow-up review. - V4. Auditor recognition: the following firms are broadly recognized in Solidity: Trail of Bits, Zellic, Spearbit, OpenZeppelin, ConsenSys Diligence, Certora (formal verification), Quantstamp, Halborn, Peckshield, Sigma Prime, ChainSecurity, Ackee Blockchain, MixBytes, Statemind. Unknown firms are orange-at-best for any green-grade claim. Name the firm explicitly in evidence[]. - V5. Post-audit drift: compare the most recent in-scope audit(s) against the currently-deployed source, weighted by what each contract does and by what the changes actually contain. SCOPE — drift only downgrades the grade when ALL of the following hold: (i) the drifting contract is fund-custody / settlement / accounting-critical (NOT a peripheral router, lens, quoter, or pure-view contract that holds no balances); (ii) the changes are material — new functions, modified access control, modified accounting, modified fund flow — and not refactors / struct relocations / import reorgs / build or CI fixes / formatting; (iii) no later audit, fix-audit, or differential audit from a recognized firm covers the changed files (audits often pin a pre-fix commit while a follow-up reviews the delta — match by file scope, not by commit-hash equality). When you cite drift as a downgrade reason, name the specific behavior change (function added, role granted, accounting formula altered) — "N commits ahead" or "+X/-Y LOC" alone is not evidence of material drift. If you have not sampled the diff content (e.g. via the GitHub compare view or the top commits in the window), record drift as an unknowns[] entry rather than auto-downgrading; commit-count and LOC are starting signals, not findings. - V6. Implementation vs proxy: a verified proxy with an unverified implementation is effectively unverified. State whether the implementation is verified separately. EVIDENCE DISCIPLINE (read before writing findings[]): - Do not assert a specific deploy-commit SHA, bytecode equivalence, or "identical to audited commit" unless you actually fetched the artifact that shows it (e.g., a deployed-addresses JSON you opened, an explorer page you read). Inferred or plausible matches belong in unknowns[], never in findings[] or evidence[]. - Evidence[] entries must correspond to pages/files you actually retrieved this run. A URL you did not open is not evidence. Then write the steel-man section per Hard Rule 11. Grade rules: - green = deployed bytecode verified on the explorer (proxy AND implementation if proxied; "Similar Match" on a standard proxy pattern is fine per V1), a public source repo exists whose contents correspond to the explorer-visible source, AND ≥1 audit from a recognized firm covering the currently-deployed contracts (≤6 months of drift OR drift was re-audited). A missing local compile-match is not a downgrade — record it in unknowns[] and still grade green if the other conditions hold. - orange = verified but with visible drift from the public repo, OR audit scope is stale relative to deployment, OR only minor / unknown-firm audits exist, OR only some of the main contracts are verified, OR proxy verified but implementation only partially verified. - red = unverified bytecode (or verified proxy with unverified implementation), OR no audit in protocol.audit_links, OR no public repo. - unknown = reserved for when the protocol's verifiability posture genuinely cannot be assessed (e.g., explorer and repo both inaccessible for this protocol). Do NOT use unknown merely because you, the analyst, could not run a particular check such as a bytecode diff — that goes in unknowns[] while the grade is still assigned from the evidence you do have. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "verifiability", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.
4 dimensions not yet assessed (Control, Ability to exit, Autonomy, Open Access)
- Not yet assessed
Who holds admin privileges, how contracts can be upgraded, and how quickly. No automated heuristic grades this at Phase 0; a real assessment arrives when onchain discovery reads roles, owners, and timelocks.
No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v1 - protocol.name: Uniswap V1 - protocol.chains: Ethereum - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: null ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) (no addresses pinned in this run — discover candidates from fetched website / GitHub / audit / explorer pages, record discovered addresses in evidence[] and protocol_metadata.admin_addresses, and put any reads you couldn't perform in unknowns[]. The next assessment will inherit your discoveries.) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: CONTROL Evaluate who can change the protocol's rules, how fast, and how broadly. (Step 0 capability probe and the off-chain-only fallback live in the preamble — those rules apply here.) ### MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]) - **C1.** For each address you assess: who is the contract owner / admin / pendingAdmin / governor — read these via the block explorer's "Read Contract" tab OR `https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=owner` (BARE method names: `&method=owner`, `&method=admin`, `&method=pendingOwner`, `&method=governor`). For Safes use `/api/safe/owners?chainId=<id>&address=0x...`. When a protocol has multiple major versions deployed (v2/v3/v4), perform C1 reads on the NEWEST deployment separately — newer deployments often have weaker control surfaces than the legacy core. - **C2.** Upgrade mechanism: transparent proxy / UUPS / Beacon / Diamond / immutable. Identify the proxy admin address. Check upgradeability of GOVERNANCE contracts too — a Governor / Aragon Voting / OZ Governor is often itself a proxy whose admin is the Timelock. Asymmetry: when fund-holding cores are immutable AND governance has no admin path that reaches them, an upgradable Governor/Timelock is T3-only and must NOT drag the verdict below green on that basis alone (see grade rules and the "immutable cores" caveat). Only call upgradability "mixed" if you can name a concrete function on the upgradable surface that reaches T1 or T2 on user funds. - **C3.** EXECUTION PATH (enumerate every stage, in order, with delays in seconds). The operative path is usually a chain (voting → scheduler → timelock → executor; or governor → queue → execute; or Aragon Voting → DualGovernance → EmergencyProtectedTimelock → AdminExecutor). For each stage, record (a) the contract address, (b) the delay constant name + value in seconds, (c) the URL you read it from (block-explorer Read Contract OR `/api/contract/read?...&method=MIN_DELAY&block=<n>`). Do NOT stop at the first timelock-shaped contract — if its admin is itself called by another contract, keep walking. The grading delay is the SUM OF DELAYS ON THE UNCONTESTED FAST PATH (shortest time a proposal with no opposition can go from submission to executable). Dynamic / contested extensions (veto signaling, rage quit, escrow delay) are modifiers, not the basis — note them separately. - **C4.** Enumerate EVERY multisig with reachable control — main proxy admin, emergency activation, emergency execution, reseal / pause, gate-seal committees, tiebreaker, per-module admins. For each Safe, fetch threshold + owners + version via `/api/safe/owners?chainId=<id>&address=0x...` (response includes raw eth_call data, so the URL is citable evidence). Enumerate ops/council/incentives multisigs even when off the upgrade path — record their scope so a reader can see they are NOT on the upgrade path. For each: (a) address, (b) threshold / total signers, (c) signer identities classified as insider (team, paid auditors under ongoing engagement, mandated service providers) vs non-insider (independent community members, unaffiliated researchers), (d) the specific power held (upgrade, pause, parameter, etc.). - **C5.** On-chain governance: Governor / GovernorBravo / OZ Governor / Aragon Voting with token-weighted voting? Record proposal threshold, voting period, quorum, and the timelock delay between queue and execute. Every numeric constant must come from a Read Contract call you can link to, or be in unknowns[] with the C-code. If votingDelay / votingPeriod are denominated in BLOCKS, convert to seconds at the chain's CURRENT block time (Ethereum mainnet ≈ 12s post-Merge, not the 15s in older Compound/Bravo deployments) — cite both block count and converted seconds. - **C6.** EMERGENCY POWERS: separate emergency-pause / guardian role with a different time cap or different actor than the main upgrade authority? Record it explicitly. - **C7.** POWER TIER (blast radius). For each privileged path in C3–C6, classify the WORST thing that path can do, choosing the highest applicable tier. Cite the specific function name and any on-chain bound — tier claims without a named function are unsupported. - **T1 — FUND-CRITICAL**: replace implementation of contracts holding user funds; change AMM math / accounting / collateral logic; mint unbacked debt or shares; pause withdrawals; drain user-fund treasury; change oracle to attacker-controlled source; replace upgrade admin with EOA. - **T2 — ECONOMICALLY MATERIAL**: change fee parameters within bounded ranges; redirect protocol fees; add/remove markets / collateral types; bounded inflation or token mint within hard-capped schedule; spend protocol-owned (non-user) treasury. - **T3 — GOVERNANCE-INTERNAL**: change voting rules, quorum, voting period, proposal threshold; upgrade the Governor itself; rotate Timelock admin; mint governance tokens within a capped annual schedule. - **T4 — OPERATIONAL**: incentives distribution, grants, ENS / frontend canonicalization, deployment coordination, periphery router deprecation. The grade is set by the HIGHEST tier reachable on the uncontested fast path, not the median. State the tier and the binding function in the verdict. ### Read Contract discipline (applies to C3, C4, C5) Every numeric constant cited (timelock delays, voting periods, multisig thresholds, quorum percentages) must come from EITHER (a) a block-explorer Read Contract URL, OR (b) a DeFiPunkd `/api/contract/read` or `/api/safe/owners` URL (preferred with `&block=<n>` for content-addressed evidence), OR (c) an unknowns[] entry with the C-code. Docs / blog posts are corroboration only — they cannot be the sole citation for a value that is also readable on-chain. ### Off-chain-only substitute hierarchy (when grading_basis="off-chain-only" — see preamble Rule 16) When on-chain reads were genuinely unreachable this run, eligible off-chain substitutes in priority order: 1. Linked audit PDFs (admin roles, multisig members, timelock delays usually enumerated). 2. Governance forum posts that quote constants from a successful on-chain proposal (cite post URL + linked execution-tx URL). 3. Official protocol docs pages with named addresses and roles (must be on a domain owned by the protocol). 4. GitHub README / SECURITY.md / governance/*.md at a pinned commit SHA. Forbidden substitutes: third-party blog posts, X / Twitter threads, search-result snippets, model memory. Required degradation: any C-code citing a numeric constant from docs/forum/audit prose ONLY must also carry an `unknowns[]` entry with `-offchain` suffix noting "value not re-read on-chain in this run; corroboration only". ### Grade rules (apply the timelock bar conditional on the highest C7 tier reachable on the fast path) Security Council standard (used below): a multisig qualifies as "Security Council" only if ALL of: ≥7 signers, ≥51% threshold, ≥50% non-insider signers, every signer publicly announced. Failing any criterion = NOT a Security Council, regardless of signer reputation. - **green**: highest reachable tier is T3 or T4 regardless of timelock; OR T2 reachable with uncontested-fast-path delay ≥7 days; OR T1 reachable only via immutable contracts (T1 is unreachable); OR T1 reachable with uncontested-fast-path delay ≥7 days combined with a Security Council multisig; OR T1 reachable with uncontested-fast-path delay ≥7 days through active on-chain governance with broad token distribution. - **orange**: T2 reachable with uncontested-fast-path delay >0 but <7 days; OR T1 reachable with uncontested-fast-path delay >0 but <7 days; OR a multisig failing one or more Security Council criteria sits on a T1/T2 path; OR unclear upgrade authority on a T1/T2 path; OR governance with very short timelock or low quorum on a T1/T2 path. - **red**: T1 reachable with no timelock by a single EOA or 2-of-3 multisig; OR a T1 upgrade admin that is not a smart contract you can audit. - **unknown**: completed the checklist but still cannot determine the upgrade authority OR cannot classify the highest tier reachable on the main contracts. Tiering caveats: - "Bounded" must be enforced ON-CHAIN to count as T2. A function that sets fees with no upper-bound check is T1 — cite the bound check. - Recurring T2 economic extraction (e.g. fee redirect with no rate limit) approaches T1 over time. A single proposal that can permanently redirect all future revenue is T1. - T3 assumes the governance contract cannot itself authorize a T1/T2 action without going through the same timelock. If governance can self-upgrade to bypass the timelock, T3 collapses into T1. - Do not downgrade tier by hand-waving ("realistically governance would never…"). Tier on what the contract permits, not what feels likely. Notes: - **Dynamic / dual-governance timelocks** (Lido, Compound escrow veto): the rubric grades on the uncontested path because that is the path most upgrades take. A dynamic extension that fires only under stake-weighted opposition is a real protection — name it in the green steel-man, but it does not lift an orange fast path into green; state the tension in the verdict. - **Immutable cores with upgradable governance** (Uniswap-style): if fund-holding contracts are immutable and have no admin-reachable function moving / freezing / re-routing user funds, the highest reachable tier on the upgrade path is T3 — green regardless of timelock. Don't grade this orange just because the Governor is a proxy — that's a C2 fact, not a downgrade. Downgrade only applies if you can cite a concrete function on the upgradable surface that reaches T1 or T2 (privileged hook, upgradable factory controlling fund-routing, fee-switch redirecting protocol revenue without bound). - **The 7-day bar** reflects the exit-window standard — users need notice after a queued upgrade to withdraw if they disagree. The ability-to-exit slice grades the exit side; this slice grades the delay side; both must hold for users to actually benefit from the delay. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "control", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Not yet assessed
Whether users can exit on their own terms if the team disappears or acts adversarially. Requires per-protocol review; not available at Phase 0.
No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v1 - protocol.name: Uniswap V1 - protocol.chains: Ethereum - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: null ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) (no addresses pinned in this run — discover candidates from fetched website / GitHub / audit / explorer pages, record discovered addresses in evidence[] and protocol_metadata.admin_addresses, and put any reads you couldn't perform in unknowns[]. The next assessment will inherit your discoveries.) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: ABILITY-TO-EXIT Evaluate whether users can withdraw their funds on their own terms, even under adversarial admin conditions. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - E1. Enumerate every user-facing exit function in the main contracts: withdraw, redeem, burn, requestWithdrawal, claim, exit, etc. List them by name. Do NOT treat the contract as a monolith. - E2. For EACH exit function in E1: identify its access modifiers and any pause guards (e.g. _checkResumed, whenNotPaused, onlyRole). Functions that gate REQUEST PLACEMENT often differ from functions that CLAIM FINALIZED FUNDS — check both separately. - E3. For each pause guard: identify the role holder (which address holds PAUSE_ROLE / GUARDIAN / etc.) and the maximum pause duration. Specifically check whether PAUSE_INFINITELY (or equivalent uncapped pause) is callable, and which actor can call it (single multisig vs governance vote). For role-holder reads use https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=hasRole&args=0x...,0x... or &method=getRoleAdmin&args=0x.... For "is currently paused" checks use &method=paused or &method=isPaused&args=<resume-code>. Use the BARE method name (no parens). Cite the URL with &block=<n> in evidence[]. - E4. EMERGENCY vs GOVERNANCE pause distinction: many protocols have a fast-acting emergency pause capped at N days and a slow governance pause that can be indefinite. Record both paths separately if present, with their time caps and actor classes. - E5. Queued redemption: documented maximum queue duration, daily withdrawal caps, whether the queue itself is pausable. - E6. Forced-exit / escape-hatch / permissionless emergency-exit mechanism for adversarial-admin scenarios. - E7. Frontend dependency: confirm exit functions are directly callable on-chain (e.g. via Etherscan write tab or a generic wallet) without the project's frontend. Then write the steel-man section per Hard Rule 11. Common red-vs-orange tension on this slice: indefinite pause exists (suggests red) BUT the realistic emergency path is time-capped AND claims of already-finalized exits are not pause-gated (suggests orange). Resolve this by stating who can do what for how long, not by stopping at the worst-case sentence. Grade rules: - green = permissionless exit; pause is either absent, narrowly scoped to clearly-described emergencies with auto-expiry, or capped at ≤7 days; no frontend dependency for exit; claims of already-finalized exits are not pause-gated under any path. - orange = pausable with broad scope OR indefinite pause is reachable only through governance vote (not unilateral admin action), OR queued redemption with documented max > 7 days, OR claims-of-finalized are exempt but new-request placement can be paused indefinitely by governance. - red = exit requires admin signature, OR ANY actor (including governance) can pause CLAIMS of finalized exits indefinitely, OR there is no on-chain exit function at all (purely custodial), OR pause is held by a single EOA / 2-of-3 multisig with no time cap. - unknown = checklist incomplete after checking the sources above. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "ability-to-exit", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - No Phase-0 autonomy signal
Neither the category heuristic nor the forkedFrom signal fires for this protocol. A real autonomy graph (oracles, bridges, fallbacks, governance-mutable dependencies) arrives with Phase-2 onchain discovery.
No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v1 - protocol.name: Uniswap V1 - protocol.chains: Ethereum - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: null ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) (no addresses pinned in this run — discover candidates from fetched website / GitHub / audit / explorer pages, record discovered addresses in evidence[] and protocol_metadata.admin_addresses, and put any reads you couldn't perform in unknowns[]. The next assessment will inherit your discoveries.) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: AUTONOMY Evaluate this protocol's autonomy: can a failure of anything outside its own contracts cause theft or loss of user principal, loss of unclaimed yield, or materially change the protocol's expected performance? "Autonomy" is not "has zero external touchpoints" — it is "external failures are either survivable or recoverable without user loss". This slice adapts DefiScan v1's Autonomy dimension; dependencies are one of several criteria, not the whole frame. GUARDRAILS (read before grading): - Category alone (Liquid Staking, Bridge, RWA Lending, Restaking, …) does NOT force a grade. A category is a hint about where to look; the grade must come from the concrete A1–A9 findings below. - Base-chain consensus (Ethereum PoS, the chain's validator set, the canonical Deposit Contract at 0x00000000219ab540356cBB839Cbe05303d7705Fa) is the SUBSTRATE, not a dependency, for any protocol deployed on that chain. Do not list "depends on Ethereum" as a finding. - Oracles or other integrations used by DOWNSTREAM protocols that happen to read this protocol's token (e.g. Chainlink stETH/USD consumed by Aave) are NOT this protocol's dependencies. Count only what THIS protocol's contracts call or trust on-chain. If a feed or contract appears in the protocol's docs only as reference material for third-party integrators, EXCLUDE IT ENTIRELY — do not log it as a finding even with a "peripheral" or "referenced only" caveat. - "Upgradeable admin can change things" belongs to the CONTROL slice; only count it here when the upgrade surface lets governance silently swap an external dependency (see A9). - Underlying-asset risk in opt-in, isolated markets is NOT autonomy-red on its own. When a protocol wraps third-party yield-bearing assets (LSTs, LRTs, ERC-4626 vaults, lending receipts, restaked tokens) into per-market silos that users explicitly choose, a failure of one underlying does NOT propagate to other markets and is risk the user opted into per-market. Record it under A4 with depth and propagation scope, but do not let it alone drive a red verdict — red requires an external dependency that cross-cuts the protocol or that the user did not opt into at deposit time. A failure mode that is "if the LRT you deposited is hacked, your principal in that LRT-backed market is impaired" is the underlying's autonomy story, not this protocol's; grade it on whether THIS protocol introduces additional dependencies on top. - Sub-module enumeration is mandatory before grading. If the protocol ships distinct product lines or modules (e.g., a v2 core AMM plus a newer perps/funding-rate module, a lending pool plus a separate vault layer, an L1 core plus a cross-chain extension), enumerate each in findings and grade against the WORST module weighted by its share of TVS or its blast radius. A green core does not rescue an orange/red sub-module; conversely, a small red sub-module with capped TVS may bound the overall grade to orange. Name each module by its on-chain factory or router address. If you do not know whether a module exists, that is an unknowns[] entry, not silence. EXPLICIT TVS WEIGHTING: in the verdict, state each module's approximate share of total protocol TVS (use "~X%" if exact figures unavailable; check DeFiLlama or block-explorer balances on the module's main contract) and how that share informs the weighted grade. Format: "Module A holds ~X% of TVS (grade: <g>); Module B holds ~Y% (grade: <g>); weighted overall = <grade> because <reason>." If a red sub-module holds <5% of total TVS and is capped, the overall grade may be orange; if it holds >25%, the overall grade is red. Do not let qualitative reasoning substitute for the percentages — write the numbers. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. External contract calls. Enumerate every external contract the core contracts call or read from (oracles, price feeds, AMM pools, lending pools, staking/deposit contracts, yield wrappers). For each, identify the address, the provider, and what user-facing function of this protocol would break or mis-price if that external contract paused, mis-reported, or behaved adversarially. Grep for "oracle", "aggregator", "getPrice", "latestAnswer", "chainlink", "pyth", "redstone" as a starting point. To verify an oracle is live and what it currently reports, hit https://defipunkd.com/api/contract/read?chainId=<id>&address=<oracle>&method=latestAnswer (or &method=latestRoundData, &method=getPrice, &method=description; use the BARE method name without parens) and cite the URL — the response includes blockNumber/blockHash and rawReturnData, which is stronger evidence than a docs page about which feed "should" be used. - A2. Off-chain actor committees reporting INTO the protocol. Oracle committees, guardian multisigs, DAO-selected validator sets acting as protocol reporters, exit-bus signers, fraud-proof challengers. For each, record committee size, quorum, who picks the members, and what mis-reporting could do (mint, burn, finalize withdrawal, freeze). Distinguish this from governance admins (control slice). NOTE ON STAKING PROTOCOLS: validator slashing and node-operator misbehavior are properties of the base-chain substrate, NOT external dependencies, when the operator set is diversified enough that a coordinated failure caps at <5% principal loss. Count validator/operator risk under A2 ONLY if the operator set is small, non-diversified, or lacks bonding / slashing-insurance / diversification mitigations. A curated set of 30+ independent operators with documented diversification falls under the mitigated path; a 3-operator LST does not. Do not cite the protocol's own risk disclosure as evidence that operator failure = principal loss unless you also check the diversification and bond mitigations. - A3. Bridge / cross-chain messaging dependencies. Only count bridges that carry material TVL or are required for a core user flow. For each, name the bridge operator (canonical L1↔L2, LayerZero, Wormhole, Axelar, custom multisig), the trust model (canonical, optimistic, light-client, guardian set), and what fraction of TVL or users ride on it. "wstETH exists on 15 chains" is not a finding unless material TVL sits there. Before listing any non-primary chain deployment as a dependency, verify it is still operational as of analysis_date — retired or sunset deployments (e.g., Lido-on-Terra, Lido-on-Solana) belong in unknowns[] or should be omitted, never cited as a current dependency. - A4. Nested collateral / restaking chains. For restaking / LRT / receipt-of-receipt designs: record the depth of the collateral chain, every actor with slashing or freezing power at each level, and whether a failure N levels deep propagates to user principal here. - A5. Fork lineage (silent check). If DeFiLlama's forkedFrom is non-empty, record it as one finding and move on. If empty, do NOT add a placeholder finding; it adds noise. - A6. Fallback mechanisms and circuit breakers. What catches an external failure? Sanity-check contracts on oracle reports, rebase bounds, pause paths triggered by bad prices, second-opinion oracles, max-per-block throughput caps, withdrawal queues that absorb bad reports. Record which A1–A4 risks are mitigated by which fallback, and which are unmitigated. For EACH fallback you cite, state its activation status explicitly: (i) LIVE and enforcing on-chain today, (ii) DEPLOYED but not yet wired / activated (e.g., interface exists but the address is zero or the role is unassigned), or (iii) DOCUMENTED / PROPOSED only (forum post, LIP draft, audit pending). Only (i) counts as mitigation for the grade. A fallback in state (ii) or (iii) should be noted but must not reduce the risk in your steel-man or verdict. If you cannot determine activation status, add an unknowns[] entry rather than assume it is live. - A7. Sequencer / L1-liveness dependency BEYOND the base-chain substrate. SCOPE — sequencer risk only counts here when the protocol IS its own L2/L3 appchain or app-rollup, where the sequencer is part of the protocol's own stack and a freeze is a protocol-level outage. A protocol permissionlessly deployed on a third-party L2 inherits that L2's sequencer as substrate, not an A7 dependency. Record the sequencer/DA trust model when A7 applies. - A8. Keeper / relayer / off-chain bot liveness. Protocols that need permissionless-but-necessary off-chain actors (liquidation bots, auto-compounders, deposit relayers, intent solvers). Record whether the role is permissionless, what degrades if nobody runs it (yield paused, bad debt accumulates, positions go stale), and whether the failure mode is graceful or catastrophic. - A9. Governance-mutable dependency surface. Can an admin or DAO action silently INTRODUCE a NEW EXTERNAL dependency — swap the oracle address to a different provider, register a new staking module that calls an untrusted contract, add a new bridge, route SY through a new external vault — without an exit window for users? Check the upgrade / router / module-registry contracts. Answer: which EXTERNAL dependencies are governance-mutable, who holds that power, and whether there is a timelock or exit window. SCOPE LIMIT — read carefully: A9 is about the *external dependency surface*, not the upgrade surface in general. "The proxyAdmin / EOA can upgrade the router implementation to arbitrary bytecode" is a CONTROL-slice finding (admin can rug), NOT an autonomy-A9 finding. A9 fires only when the upgrade specifically swaps out or adds a contract that THIS protocol calls or trusts (e.g., changing the oracle address from Chainlink to a malicious feed, registering a new SY adapter that points to a third-party vault, redirecting a bridge endpoint). If the only finding is "admin can change implementation," do not log it under A9 and do not let it drive the autonomy grade — note it under control instead. The autonomy-relevant version of the same upgrade key is "admin can swap [specific external address X] without timelock"; that requires identifying the specific external dependency that becomes mutable. STEEL-MAN (per Hard Rule 13): write one-sentence strongest arguments for red, orange, and green using the A1–A9 findings. IMPACTED TVS ESTIMATE: the headline MUST include a rough impacted-TVS figure — the fraction of protocol TVS that could be lost or frozen if the worst-unmitigated dependency you identified failed. Use "~X%" if exact numbers are unavailable, "<1%" for de minimis, "unclear" only if A1–A9 left the question genuinely open (in which case grade=unknown is usually correct). Do NOT substitute qualitative phrases like "significant" — give a number or bracket. GRADE ANCHORS (mapped to DefiScan v1 stages): - green = Stage 2 equivalent. Failure of any external dependency cannot cause loss of user principal or unclaimed yield. Either there are no material external dependencies, or every critical one has a documented fallback (A6) that keeps users whole. Governance cannot silently introduce new dependencies without an exit window (A9). Impacted TVS under any single-dependency failure: effectively 0. - orange = Stage 1 equivalent. Failure of some external dependency can cause loss of unclaimed yield, or can materially change expected performance (pause withdrawals, freeze positions, degrade price quality), but cannot cause loss of principal. Committee-based oracles with sanity checks, canonical-only bridges, fallback paths that exist but are incomplete, or governance-mutable dependencies protected by a ≥7-day timelock. Impacted TVS is bounded and recoverable. - red = Stage 0 equivalent. Failure of an external dependency CAN cause theft or loss of principal. Examples: single-provider oracle with no sanity check or fallback, material TVL on a non-canonical bridge with a guardian multisig, governance can hot-swap oracles or add staking modules with no timelock or exit window, unmitigated keeper-liveness dependency where positions become insolvent if bots stop. Impacted TVS is material. - unknown = checklist incomplete after inspecting source + verified contracts. Prefer unknown over guessing when A1/A6 could not be reconstructed. RESERVE unknown for cases where the CORE ARCHITECTURE itself is unverifiable — not for cases where you merely cannot enumerate every per-market dependency in a multi-market protocol. If the core router/factory/oracle architecture is verifiable on-chain and you can determine whether the core requires external dependencies, grade the architecture even when an exhaustive per-market external-dependency census is infeasible. Acknowledge the per-market gap in unknowns[] but still issue a grade. Refusing to grade a multi-market protocol because you cannot list every SY/vault/market is over-use of unknown; grade the architecture and say so. PROMPT-META CHECK (per Hard Rule 17): before finalizing, verify the verdict cites concrete contract addresses, docs, or code — not the rubric itself. If your verdict says "the protocol belongs to a category the rubric marks red", rewrite it with the A1–A9 finding that actually justifies the grade, or drop to grade=unknown. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "autonomy", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links. - Not yet assessed
Whether the protocol depends on privileged operators, whitelists, geo-restrictions, or off-chain infrastructure. This is not a signal DeFiLlama carries in a usable form; crawler-based detection lands in a later phase.
No model has graded this dimension yet. Run the slice prompt through any LLM and submit the JSON — once ≥3 independent runs agree, the quorum bot merges the verdict here.
### Per-protocol context (ground truth for this run) - protocol.slug: uniswap-v1 - protocol.name: Uniswap V1 - protocol.chains: Ethereum - protocol.category: Dexs - protocol.website: https://app.uniswap.org/ - protocol.github: Uniswap - protocol.audit_links: https://github.com/ConsenSys/Uniswap-audit-report-2018-12, https://github.com/Uniswap/uniswap-v3-core/tree/main/audits, https://github.com/Uniswap/uniswap-v3-periphery/tree/main/audits, https://github.com/code-423n4/2024-02-uniswap-foundation, https://github.com/code-423n4/2024-02-uniswap-foundation-findings, https://github.com/spearbit/portfolio/blob/master/pdfs/Kyber-Hook-Uniswap-Foundation-Spearbit-Security-Review-October-2025.pdf, https://github.com/spearbit/portfolio/blob/master/pdfs/Uniswap-The-Compact-Spearbit-Security-Review-May-2025.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2023-09-uniswap-wallet-securityreview.pdf, https://github.com/trailofbits/publications/blob/master/reviews/2024-02-uniswap-wallet-browserextension-securityreview.pdf - snapshot.generated_at: 2026-06-01T11:27:13.878Z - analysis_date: 2026-06-08 - prompt_version: 29 - address_book: null ### Pre-built read-API surfacer URLs (verbatim — fetchable as-is) (no addresses pinned in this run — discover candidates from fetched website / GitHub / audit / explorer pages, record discovered addresses in evidence[] and protocol_metadata.admin_addresses, and put any reads you couldn't perform in unknowns[]. The next assessment will inherit your discoveries.) --- You are contributing a single-slice assessment to defipunkd, a git-native transparency registry for DeFi protocols. Your JSON output will be attached to a pull request and compared against ≥2 other independent runs. Disagreements are surfaced publicly — be conservative, cite everything, return grade="unknown" when a signal cannot be determined, and resist stopping at the first damning finding. ### Per-protocol context (do not infer; these are ground truth) A "Per-protocol context" block (provided alongside this prompt — either as a user message in API mode, or as a section appended below in copy-paste mode) lists the pinned inputs (protocol.slug, name, chains, category, website, github, audit_links, snapshot.generated_at, analysis_date, prompt_version, address_book) and a list of pre-built read-API surfacer URLs for each pinned address. Treat those values as authoritative for this run. The pre-built surfacer URLs are accepted by your fetch tool's allowlist because they appear verbatim in the per-protocol context. Each surfacer page pre-executes the contract's zero-arg view methods and renders any address-typed return values as /address/{chainId}/0x… links inline — those rendered links are also fetchable post-fetch. /api/contract/read and /api/safe/owners JSON responses include a top-level `crawl.surfacers` array of /address/{chainId}/0x… URLs for every address-typed value in the result, so you can crawl directly from API responses. For addresses surfaced from non-defipunkd sources (block-explorer pages, GitHub, audit PDFs), the allowlist will reject your generated surfacer URL — record the address in protocol_metadata.admin_addresses and add a checklist-coded entry to unknowns[]; the next run will inherit it as a fetchable surfacer. ### Step 0 — Capability probe (do this before producing JSON) Identify what fetch tool your environment exposes — `web_fetch`, `browser`, `url_context`, `google_search` (with underscore, colon, or space), Bing grounding, Perplexity, `web.run`, or anything similar. Search-grounding tools ARE valid fetch paths and you should use them; they are not forbidden. The distinction that matters is what the tool returned, not its name: a grounded response with the underlying page body is sufficient evidence; a bare 1–3-line preview snippet is not. Probe: attempt one fetch of `protocol.website` and one fetch of a pre-built surfacer URL above (or the protocol's primary block-explorer page if no surfacer is pinned). Record the tool you used, the URL, and what came back (response body, HTTP status, allowlist rejection text, or "tool not present: <name>"). If either probe succeeded, proceed. If both direct probes failed, **DO NOT STOP** — try search. Issue at least two broad search queries (protocol name + "Etherscan" / "official docs" / "GitHub" / "audit"; `site:` operators against etherscan.io / github.com / the docs domain). If a search query returns the underlying page body, that page URL is fetched evidence and goes in evidence[]. Set `grading_basis: "off-chain-only"` and continue with whatever you can extract. Empty `evidence[]` + `grade="unknown"` is only valid if BOTH direct probes AND ≥2 search queries returned nothing usable; in that case, log the attempted queries and observed-zero outcomes in unknowns[]. A submission claiming "blocked" without those receipts is treated as a non-submission (zero quorum weight). Search engines do not index raw JSON API endpoints — zero results for `defipunkd.com/api/contract/read` URLs is expected and is itself a recordable failure mode, not a system restriction. ### Anti-fabrication (the most important rule on this page) Memory is not evidence. Treat your training data, prior conversations, and general knowledge as suggestions for what to look up — never as citations. Every URL in evidence[] must have been fetched in this run via any tool exposed in your environment, OR pasted into this conversation by the user. Constructing a URL is fine, but every variable part (address, commit SHA, repo path, contract name, method, args, block number) must come from a fetched/pasted source in this run, and the URL must then have been successfully fetched before it appears in evidence[]. URLs constructed from remembered addresses, repo paths, contract names, or guessed API methods are fabrication. Before emitting JSON, run an evidence ledger check on every evidence[] entry: 1. The exact URL appears in your fetch transcript or in a user-pasted source body. 2. The fetched/pasted body contains the fact you're citing in evidence[].shows. 3. Every rationale.findings / protocol_metadata claim that depends on this evidence follows directly from that body, without recourse to memory. 4. Derived (rather than verbatim) claims are explicitly labelled as derived in evidence[].shows. 5. `fetched_at` is set ONLY when you actually fetched the URL in this run; if no timestamp is available, omit the field — never invent one. If any check fails, remove the evidence entry and demote dependent claims to unknowns[]. Set grade="unknown" if demotion empties the grading basis. Do not ask the user to paste anything; do not withhold JSON; do not improvise from memory. A plausible-sounding answer backed by unsupported evidence is WORSE than grade="unknown" — it pollutes the quorum. If the assessment requires leaning on remembered public facts ("Lido is governed by LDO token-weighted voting"), historical reports, common knowledge, or likely-architecture reasoning ("UUPS proxies typically have an admin role"), return grade="unknown" with specific unknowns[] entries. Optimize for reproducibility, not completeness — if a reviewer can't re-verify each claim from the evidence URLs alone, the claim does not belong in the JSON. Empty unknowns[] on a non-trivial protocol is a red flag, not a quality signal. When the address_book is null/empty, you do not yet know any deployed address. Discover candidates from fetched website / GitHub / audit / explorer-search pages — addresses you "remember" from training data are not eligible, even for famous tokens (USDC, WBTC, stETH, UNI). If no address can be discovered after a good-faith attempt, return grade="unknown" with checklist-coded unknowns[] entries; do not invent addresses to fill the gap. ### Hard rules 1. Source classes that count as evidence: a) Public block explorers (etherscan.io, basescan.org, arbiscan.io, optimistic.etherscan.io, polygonscan.com, bscscan.com, snowtrace.io, scrollscan.com, lineascan.build, blastscan.io, era.zksync.network) for pinned addresses or addresses you discover transitively from them. b) The linked GitHub repos, at a specific commit SHA recorded in evidence[].commit. c) The audit PDFs / reports linked above. d) DeFiLlama's pinned fields (for category / chain lists only — not for risk assessment). e) DeFiPunkd's read API at https://defipunkd.com/api/{contract,safe}/... — see "On-chain reading" below. 2. If a signal cannot be determined after checking these, set grade="unknown" with ≥1 entry in unknowns[] naming what you looked for. 3. Every factual claim in rationale must map to ≥1 evidence[] entry. 4. Output exactly one JSON object matching the contract at the end, wrapped in a single ```json fenced code block. This rule applies to your FINAL assistant message only — issue tool calls freely during the run; tool-call reasoning lives in your model's tool-use channel and is not subject to this rule. Nothing before or after the fence — no prose, no follow-up questions, no requests for the user to paste anything. If evidence is incomplete, the correct response is still JSON, with claims demoted to unknowns[] and grade="unknown". ### Format rules (validation will reject submissions that violate these) 5. evidence[].url must be a bare `https://...` string — NEVER markdown link syntax. WRONG: `"url": "[Etherscan](https://etherscan.io/...)"`. RIGHT: `"url": "https://etherscan.io/..."`. 6. evidence[].commit, when present, must match `^[0-9a-f]{7,40}$` (lowercase hex, 7–40 chars). NEVER branch names or tags. Omit if you cannot pin a SHA. 7. evidence[].fetched_at, when present, must be ISO-8601 UTC (e.g. `2026-04-23T11:20:00Z`). Set whenever you actually fetched in this run. 8. evidence[].address, when present, must be `^0x[0-9a-fA-F]{40}$` (mixed case OK; checksum not validated). 9. Checklist codes (used in findings[].code and as unknowns[] prefixes) match `^[A-Z][A-Za-z0-9-]{0,16}$` — start with an uppercase letter, then digits / letters / hyphens. Examples: `E1`, `A3b`, `C2-emergency`, `V4-auditor`. No parens, spaces, dots, slashes, underscores. Use slice-defined codes verbatim. unknowns[] entries must be prefixed with the relevant code + colon (e.g. `"A3b: frontend fetch failed"`). 10. chat_url: ALWAYS null. Default share links (claude.ai/chat, chatgpt.com, gemini.google.com) require viewer login and are not publicly readable. The user enables "Share publicly" after you respond and pastes the public URL into the JSON before opening the PR. ### Thoroughness rules 11. Each per-slice body contains a "MANDATORY INSPECTION CHECKLIST". Every item must EITHER produce an evidence[] entry OR a specific unknowns[] entry naming it by code. Silent skips are rejected as incomplete. 12. Before assigning a grade other than "unknown", rationale.steelman must contain a one-sentence strongest argument for each of red / orange / green, and rationale.verdict must state which fits the evidence and why. If the steel-man for the chosen grade is weaker than for an adjacent grade, you have probably picked the wrong grade. When grade="unknown", set steelman to null and use verdict to summarize what blocked the assessment. 13. Distinguish actor classes (EOA, 2-of-3 multisig, 4-of-7+ multisig with identified signers, emergency-scoped time-capped multisig, on-chain governance vote with timelock) and function classes (claim-of-finalized vs new-request-placement, deposit vs borrow, mint vs redeem) — say which actor holds which power, on what time bound. "An admin can pause" is insufficient. 14. For on-chain slices (control, ability-to-exit, autonomy, verifiability), evidence[] must include ≥1 on-chain URL: a block-explorer URL OR a DeFiPunkd /api/{contract/read,safe/owners} URL (preferred — content-addressed when block-pinned). /api/contract/abi alone is metadata, not on-chain evidence. Source repos tell you what code SHOULD do; deployed contracts tell you what it ACTUALLY does. The "open-access" slice is exempt when claims are entirely about frontend / off-chain operator behavior. CARVE-OUT: `grading_basis="off-chain-only"` is exempt from this rule but is downweighted by the quorum bot regardless of grade. 15. Prompt-meta-check: if your verdict quotes prompt language as evidence ("the protocol meets the 'documented fallback' condition"), re-do the verdict — the prompt describes the rubric, not the protocol. Evidence cites what THIS protocol does, not what the rubric says protocols of type X do. 16. `grading_basis` is one of `"on-chain"` (default; omit field), `"off-chain-only"`, or `"mixed"`. Describes what was READ this run, not the verdict — `grade="unknown"` is allowed under any basis. Set `"off-chain-only"` ONLY when BOTH (a) ≥1 successful fetch of a docs / forum / audit / GitHub URL appears in evidence[], AND (b) ≥1 failed on-chain fetch attempt for THIS run is recorded in unknowns[] with a `-offchain` suffix. Empty `evidence[]` with `"off-chain-only"` is a category error and is rejected by the validator. Set `"mixed"` when some checklist codes were on-chain and others fell back. ABI-only finds (you read the ABI but couldn't read live state) are valid as `grade="unknown"` with the ABI cited; do not infer a grade from ABI shape alone. ### On-chain reading via the DeFiPunkd API Don't encode calldata, decode return data, or guess at ABIs by hand. Three deterministic GET endpoints return JSON with blockNumber, blockHash, raw calldata, and rawReturnData — content-addressed when block-pinned (`&block=<n>`): ABI (auto-resolves proxies): https://defipunkd.com/api/contract/abi?chainId=<id>&address=0x... View call (any view method on the merged ABI; flat scalar args): https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=getOwners https://defipunkd.com/api/contract/read?chainId=<id>&address=0x...&method=balanceOf&args=0x... Safe (threshold + owners + version in one call): https://defipunkd.com/api/safe/owners?chainId=<id>&address=0x... Use the BARE method name in `&method=` (e.g. `&method=totalSupply`, NOT `&method=totalSupply()`). Browser tools normalize `(` to `%28` and reject the normalized URL; bare names dodge that. Pass arguments via `&args=` (comma-separated, declaration order). Append `&block=<n>` for content-addressed evidence. Supported chainIds: 1 (ethereum), 10 (optimism), 56 (bsc), 130 (unichain), 137 (polygon), 324 (zksync), 8453 (base), 42161 (arbitrum), 43114 (avalanche), 59144 (linea), 81457 (blast), 534352 (scroll), 11155111 (sepolia). Use this API for any factual claim about contract ABI shape, view-method return values (owner(), getOwners(), getThreshold(), totalSupply(), implementation(), paused(), MIN_DELAY(), …), and Safe membership. Do NOT invent ABIs or return values from training data. Note on noisy address_book: the pinned address_book is sourced from prior assessments. It may include token deployments, oracle feeds, peripheral contracts, or mis-classified entries. Skip surfacer URLs that don't fit your slice — fetch only those whose role hints suggest control / pause / upgrade authority. ### Protocol metadata refresh (populate `protocol_metadata` in the output) DeFiLlama's pinned inputs may be stale or wrong. As a side-effect of this assessment, populate `protocol_metadata` with anything you verify. Leave fields null / empty arrays if you did not verify them — do NOT echo pinned inputs through; null means "not re-verified this run". - `github`: array of canonical source-code repo URLs. - `docs_url`: canonical developer / protocol documentation site. - `audits`: array of `{ firm, url, date }` (date as YYYY-MM or YYYY-MM-DD). - `governance_forum`: primary discussion forum URL (Discourse, Commonwealth, etc.). - `voting_token`: `{ chain, address, symbol }` or null. Omit if not token-governed. - `bug_bounty_url`: public bug bounty page (Immunefi, HackerOne, self-hosted). - `security_contact`: private-disclosure channel — security@ email or SECURITY.md URL. Distinct from public bug bounty. - `deployed_contracts_doc`: docs page that lists deployed addresses per chain. Don't enumerate; just link. - `admin_addresses`: array of `{ chain, address, role, actor_class }` for multisig / timelock / owner / proxy-admin addresses. `actor_class` ∈ `"eoa" | "multisig" | "timelock" | "governance" | "unknown"`. These are the anchors for future runs' address_book. - `upgradeability`: `"immutable" | "upgradeable" | "mixed" | "unknown"`. "mixed" = some core contracts immutable, others behind proxies. - `about`: 2–4 sentence plain-English description. Name the user action (stake, borrow, swap, bridge, mint, redeem), the asset / market, and the distinctive mechanism (liquid staking receipt, isolated lending pools, constant-product AMM, intents auction, etc.). Do not restate category / chains / TVL. Every non-null field in `protocol_metadata` must be backed by ≥1 entry in evidence[]. --- ### Slice: OPEN-ACCESS Evaluate who is allowed to use the protocol and whether any of that permission is granted off-chain. Scope: this slice is about ADMISSION — who can enter, exit, or transact. Operator LIVENESS (what breaks if keepers/oracles go offline) is assessed in the dependencies slice and is out of scope for the grade here. You may note operator dependencies as context, but do not let "the protocol halts if operator X disappears" drive the access grade on its own; that belongs in dependencies. Source verification / contract verification on block explorers is assessed in the verifiability slice and is out of scope here — do NOT let "contract is unverified" drive the access grade. Framing: the smart contracts are the access layer; frontends are UX. A permissionless contract is reachable by any client (SDK, third-party UI, aggregator, wallet integration). Frontend ToS, IP geo-blocking, and wallet screening are publisher policies on one specific client — they are reported as context but do NOT determine the grade. The grade hinges on (1) what the contract itself permits, and (2) whether the protocol is practically reachable without the official publisher's cooperation. Meta-check before finalizing: if your verdict cites phrases from this prompt as evidence ("the protocol meets the 'credible alternatives' condition", "this fits the 'documented fallback' rule"), redo the verdict. The prompt describes the rubric; evidence must come from the protocol. A verdict should cite what the protocol does, not what the rubric says. MANDATORY INSPECTION CHECKLIST (every item below must appear in evidence[] OR unknowns[]): - A1. Whitelist / allowlist modifiers in user-facing entry points. Grep for "onlyWhitelisted", "onlyRole", "allowlist", "isAccredited", "isKYCed". Note which functions are gated and who can add/remove from the list. - A2. Off-chain operators in the admission path: keepers, sequencers, privileged relayers, oracle posters whose approval is required to admit a user action (not just to keep the protocol live). For each, identify whether the role is held by a single operator, a permissioned committee, or is permissionless. Enumerate per user-facing function class (deposit vs withdraw-request vs claim-finalized vs transfer) which ones require operator approval to be admitted, and which ones admit users unconditionally. A function whose placement is unconditional but whose downstream settlement depends on an operator is an admission-permissionless function — flag the liveness dependency as context and defer its grading weight to the dependencies slice. - A3. Frontend restrictions on the official interface — record as context, not as a grade lever. Distinguish: - A3-passive: boilerplate ToS clauses (sanctions attestation, restricted-territory self-certification, VPN-circumvention prohibition, "comply with applicable law" eligibility, age of majority). - A3-active: runtime enforcement — IP-based geo-blocking, wallet-address screening against a sanctions oracle (Chainalysis, TRM, Elliptic), KYC wall, rendering-blocking jurisdiction banner. Record findings under the correct tier. Quote ToS text or banner text in evidence[].shows. These findings populate the headline and rationale but do NOT move the grade by themselves; the grade is set by A1, A2, and the A3b path check below. - A3b. Independent access paths (the operative grade input). Enumerate paths that do not require the official publisher's cooperation: - Published SDK / library / CLI for direct contract interaction. - Third-party frontends operated by separate legal entities. - Wallet-integrated access (MetaMask Swaps, Safe apps, etc.). - DEX / lending / yield aggregators that route through the contracts. Record at least one concrete link per path that exists. The protocol does NOT have to self-document these — the test is existence, not UX cost. An A3b-i redistribution of the official UI bound by the same ToS does NOT count as an independent path. - A4. Sanctions / compliance tooling at the contract level: does the protocol check addresses against OFAC lists or similar on-chain blocklists in the contract itself? (Frontend-only screening belongs in A3.) - A5. Differentiate read access vs write access: many protocols are read-permissionless (anyone can view state) but write-gated (only certain addresses can deposit/borrow). Record both. - A6. ToS / Legal links: locate them on the website and produce a VERBATIM quote of any jurisdictional, sanctions, or eligibility clause in evidence[].shows. If you cannot extract the clause text verbatim (SPA render failure, paywall, dead link, etc.), do NOT paraphrase or infer from general knowledge — record the ToS URL in unknowns[] with the reason extraction failed. Assertions about ToS content without a verbatim quote will be downweighted by reviewers. Then write the steel-man section per Hard Rule 11. Grade rules (admission-focused; liveness concerns belong in dependencies; source verification belongs in verifiability): - green = no contract-level whitelist/KYC on user entry/exit; no operator approval required to admit a user action; AND at least one independent A3b path exists (published SDK, third-party frontend, wallet integration, or aggregator routing). Frontend ToS posture and A3-active enforcement on the official UI do NOT block green when contracts are permissionless and an independent path exists — they are reported as context. - orange = contracts admit users unconditionally, BUT the protocol is operationally captured by the official publisher: no published SDK, no third-party frontend, no wallet integration, no aggregator routing. The contract is theoretically open but practically reachable only through the official UI. Also applies when admission requires approval from a permissioned committee that is governance-managed with a documented replacement procedure. - red = contract-level whitelist / KYC on user entry/exit, OR admission of a core user action requires approval from a single privileged operator or a small committee with no documented replacement procedure, OR enforces an on-chain blocklist updatable by a single party. - unknown = checklist incomplete after checking the sources above. Default-grade guidance: when contracts are fully permissionless AND any A3b independent path exists, the default grade is green regardless of frontend ToS or A3-active enforcement on the official UI. Frontend geo-blocking, sanctions-oracle wallet screening, and ToS sanctions clauses are publisher policies on one client and are reported in findings/headline as context, not as grade levers. To grade orange on operational-capture grounds, the auditor must affirmatively show that ALL independent paths are absent or also gated. Guideline on committees: where admission depends on a multi-operator committee, the relevant axes are (a) set size, (b) whether replacement/rotation is governed on-chain, (c) whether the replacement procedure is publicly documented. A large set with on-chain governance replacement should not be graded as a single-party operator even if rotation is not instantaneous. A small set with informal replacement should be treated as a single-party operator. --- ### JSON output contract Return exactly one JSON object inside a single ```json fenced block. Shape: { "schema_version": 4, "slug": "<copy protocol.slug from the per-protocol context>", "slice": "open-access", "snapshot_generated_at": "<copy snapshot.generated_at from the per-protocol context>", "prompt_version": 29, "analysis_date": "<copy analysis_date from the per-protocol context>", "model": "<exact model name, e.g. claude-opus-4-7 / gpt-5-thinking / gemini-3-pro>", "chat_url": null, "grading_basis": "on-chain | off-chain-only | mixed (optional; omit for on-chain)", "grade": "green | orange | red | unknown", "headline": "<one-line summary>", "short_headline": "<≤6 words, ≤80 chars; omit if you can't fit>", "rationale": { "findings": [{ "code": "E1", "text": "<concrete, source-cited finding>" }], "steelman": { "red": "<one sentence>", "orange": "<one sentence>", "green": "<one sentence>" }, "verdict": "Choosing <grade> because <reason ranking one steel-man above the others, citing specific evidence>." }, "evidence": [{ "url": "https://...", "shows": "<what this URL demonstrates>", "chain": "...", "address": "0x...", "commit": "<hex SHA>", "fetched_at": "2026-04-23T11:20:00Z" }], "unknowns": ["E3: <thing you looked for but couldn't determine>"], "protocol_metadata": { "github": ["https://github.com/org/repo"], "docs_url": "https://docs.protocol.xyz", "audits": [{ "firm": "Trail of Bits", "url": "https://...report.pdf", "date": "2025-09" }], "governance_forum": "https://forum.protocol.xyz", "voting_token": { "chain": "Ethereum", "address": "0x...", "symbol": "XYZ" }, "bug_bounty_url": "https://immunefi.com/bounty/protocol", "security_contact": "security@protocol.xyz", "deployed_contracts_doc": "https://docs.protocol.xyz/deployments", "admin_addresses": [{ "chain": "Ethereum", "address": "0x...", "role": "DAO treasury multisig", "actor_class": "multisig" }], "upgradeability": "immutable | upgradeable | mixed | unknown", "about": "<2–4 sentences>" } } Rules recap: - grade="unknown" ⇒ steelman=null; unknowns[] ≥1; evidence[] may be empty. - grade!="unknown" ⇒ steelman={red,orange,green}; evidence[] ≥1; verdict starts with "Choosing ". - findings[].code matches the slice's checklist prefix verbatim (E1, C2-emergency, V4a, …); unknowns[] entries are checklist-coded ("E3: …"). - Wrap in a single ```json fence; nothing before or after. URLs are bare strings, never markdown links.
Stage
Preview of the Phase-3 maturity framework. DeFiPunk'd will adopt DeFiScan v2's stages verbatim; the section is rendered below in its intended shape so the structure is visible today.
Uniswap V1 has not yet been assessed under the DeFiScan v2 stage framework.
The walkaway test is the central criterion. Once stages land, protocols reach Stage 1 only if users can exit in the presence of malicious operators even when the emergency council disappears.
Scope of assessment
Stages are assessed per-protocol against DeFiScan v2's criteria: governance structure, upgradeability path, timelock durations, emergency-council scope, and the walkaway test. The analysis depends on onchain discovery (roles, owners, timelocks) and deeper review of deployed contracts — neither of which DeFiPunk'd automates at Phase 0.
Stage 0 requirements pending
Governance is largely off-chain, contracts are upgradeable with short or no timelock, and the protocol depends on a multisig or team with full discretion. At Phase 0 DeFiPunk'd does not automatically evaluate these; the assessment lands with crawler-based onchain discovery.
Stage 1 requirements pending
Users can exit or opt out on their own terms even if the team disappears. Upgrades run through a meaningful timelock with an emergency security council clearly scoped. The walkaway test is the headline criterion.
Stage 2 requirements pending
Protocol is fully permissionless and immutable, or upgrades require a supermajority of token holders with a long timelock and no emergency override. This is the terminal stage of the DeFiScan v2 framework.
Stages are an opinionated assessment of maturity, not a rating of security or safety. A protocol can sit at Stage 2 and still carry substantial technical or economic risk; the framework exists to incentivize decentralization, not to rank protocols.
Contract surface
Every contract in scope for this protocol — pooled from DeFiLlama's TVL adapter (mechanical) and DEFI@home discovery submissions (LLM-curated). Verified-source flags come from Etherscan + Sourcify; owner / multisig metadata is read on-chain when available. Reviewer audit context, not a slice score. A lending protocol's adapter set will list third-party collateral tokens alongside its own contracts; attribution is the grader's job.
- 1addresses
- 1verified source
- 0proxies
| ethereum | Vyper_contract | 0xc0a4…4d95 | TVL | ✓ | — | — | — |
Protocol Info
Links
[defillama] Source: DeFiLlama [:] Source: DEFI@home quorum
- Website
- https://app.uniswap.org
- @Uniswap
- GitHub
- Uniswap
- Governance forum
- https://gov.uniswap.org/
- DefiScan
- DefiScan · Stage 2
Security
[defillama] Source: DeFiLlama [:] Source: DEFI@home quorum
- Audits
-
23 audits
- Security contact
- security@uniswap.org
Technical
[:] Source: DEFI@home quorum
- Voting token
- UNI Ethereum: 0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984
- Deployed contracts
- https://github.com/Uniswap/v3-periphery/blob/main/deploys.md
- Upgradeability
- Mixed (some immutable, some upgradeable)
Provenance
[defillama] Source: DeFiLlama [:] Source: DEFI@home quorum
- Review status
- listed
- Updated
- 2026-06-02 13:51 UTC
Hallmarks
- May '20UNI V2 Launch
- Aug '20SushiSwap launch
- Sep '20SushiSwap migration
- Sep '20LM starts
- Nov '20LM ends
- Apr '21FEI launch
- May '21UNI V3 Launch