>

Uniswap V3 — Spearbit hooks scoping review

[PUBLISHED]
spearbit · uniswap-v3
// spearbitprotocol: uniswap-v3published: Apr 18, 2026source →

Spearbit's review of the new Uniswap V3 hooks framework surfaced one medium-severity flash-accounting bypass. The mitigation is on the framework side; existing V3 positions without hooks are not affected.

// findings · 1
  • [MEDIUM]

    Hooks framework flash-accounting balance check can be sidestepped by a malicious hook that pre-credits the pool.

    HooksFrameworkflash accounting
    Hook precredit can sidestep the balance check.
    ref: M-01
    affects:hooks
// why this might be wrong
  • This brief was generated by a multi-pass LLM editorial pipeline. Findings reflect public source material at the time of synthesis.
  • Confirm against the original audit firm source before acting on any individual finding.
  • Severity classification has been normalized across firms — the source firm uses its own scale.