"Is it safe" is a reasonable question and an awkward one, because the honest answer depends on which part of the thing you mean. Software can be safe while the company running the website is not. A protocol can work exactly as designed while the token you bought through it turns out to be worthless.
That gap matters more with something like Uniswap than with an ordinary app. What people call "Uniswap" is at least three separate things: a set of contracts on Ethereum that nobody can change, a website that Uniswap Labs runs and can take offline, and a governance token that votes on a narrow set of settings.
Those three carry genuinely different risks, and most of the losses people attribute to Uniswap did not come from the contracts at all. Here is what each part can actually do to you.
What auditing the contracts actually proves
The verdict is that you can use Uniswap as designed and still lose coins, because an audit is a dated review of named code. The protocol is a set of onchain contracts that other wallets can call if they pay gas. A Labs FAQ can call that set one of crypto's safest products, which is marketing copy. Think of a building inspection: an inspector can walk the structure on a given day and write a report, and that report still leaves you unpaid if a pipe bursts next year. Uniswap v4 went through named reviews before launch, and Labs writes that v4 had nine independent audits by OpenZeppelin, Spearbit, Certora, Trail of Bits, ABDK, and Pashov Audit Group. The same post says third party contracts that were not deployed by Uniswap Labs sit outside the bounty (source: Uniswap Blog, $15.5M Bug Bounty for Uniswap v4). That list is a real process.
Ethereum's own developer docs put the remaining weight on you. Smart contracts cannot be deleted by default, and "interactions with them are irreversible" (source: ethereum.org, Introduction to smart contracts). A swap that lands is a swap that stays, and a bad signature that lands stays too, because there is zero Uniswap help desk that rolls the chain back.
Labs 101 answers the safety question by calling the Uniswap Protocol one of crypto's safest and most secure protocols (source: Uniswap 101: What is Uniswap?). Keep that sentence on the page that wrote it, and skip turning it into a BloFin score. Skip pasting the volume sentence that follows it as a fact, because volume is a marketing neighbor of safest.
Four kinds of loss sit on four different things, and mixing them into one 100/100 grade is how a review-site score misses the title:
- The core pool contracts, which other wallets can call if they pay gas.
- The website or wallet UI that asked you to sign.
- UNI the vote token, whose price and governance path are separate from a pool bug.
- The venue that holds the keys, which may be your wallet or an exchange.
If a review table says the protocol has stayed unhacked, ask which of those four it meant. A phishing drain of a wallet is a different event from a PoolManager bug. A hook on one v4 pool is a different event from every v4 pool, and an exchange outage is a different event from Uniswap. What Uniswap is is the protocol picture, and the title here is a kinds question, with the contracts as one kind.
What the website you click can spend
The Labs web app can go down while the pools keep running, and connecting a wallet is still a connect rather than a swap. A Permit2 signature can spend tokens later without a new onchain approval from you, so the risk here is the tab in front of you rather than the constant-product math.
Uniswap Labs support draws the host line in plain text: the official Uniswap app protocol will always be from https://app.uniswap.org/ or the current Permit2 contract if the wallet shows that address. The same article adds that once you sign the data or send a transaction that is accepted by the blockchain, there is zero way to reverse this action (source: Uniswap Labs support, Crypto Wallet Signature Scams). A search result can rhyme with that host and still be a clone, and a bookmark from last year can rot, so read the host before you sign.
Permit2 is a Labs approval contract that lets you share token allowances across apps, and support is blunt about the failure mode. "Any onchain token approval to the Permit2 contract is vulnerable to a malicious signature approval" (source: Uniswap Labs support, What is a Permit2 approval?). The second step is a signature with zero network fee, which is why a fake prompt asking you to prove wallet ownership is dangerous: you think you are logging in, but the signature may be a spend.
Three prompts get mixed in one wallet popup, and only the last two move coins:
- Connect, which lets a site see your address and offer transactions.
- An onchain approve, which costs gas and sets a spend limit for a contract.
- A Permit2 signature, which can spend after that approve, with zero extra fee.
Connect stays cheap only until you sign the next prompt without reading it, so treat a rushed Sign as a send. Smart-contract wallet risks is the generic picture of what a wallet contract can do besides hold keys. The Uniswap connect path is the topic here. If a tab asks you to type a recovery phrase to sync Uniswap, close it, because that is a different script from how the official app talks.
Extra code on a v4 pool
A v4 pool can attach a hook, which is extra code that runs when that pool swaps or moves liquidity. The core PoolManager is a different program from that extra code, so hook risk is pool-specific rather than a score for every Uniswap version.
Docs are explicit that the extra program is optional: hooks are optional for Uniswap v4 pools, each pool can attach one, and the hook is set when the pool is created (source: Uniswap Docs, v4 hooks). A v2 or v3 pool you already used stays hook-free, and a v4 pool with zero hook is a different pool from a v4 pool with a custom one.
The same docs family warns that hooks sit in a sensitive place, because hooks sit inside the core swap execution pipeline, and incorrect assumptions or unsafe patterns can compromise pool integrity, price trades incorrectly, or expose liquidity providers to losses (source: Uniswap Docs, v4 security framework). That is Uniswap's own security page talking to hook builders, and it is the reason a v4-was-audited headline leaves every pool you click unsettled.
Trail of Bits reviewed v4 core and later wrote about application hooks, and on July 30, 2026 it described the Cork and Bunni incidents as app-level, together accounting for more than $20M in losses. Then: "Neither incident stemmed from a flaw in the Uniswap v4 core protocol or the PoolManager" (source: Trail of Bits, Building secure Uniswap v4 hooks). Read those two sentences as a split, because a headline that says Uniswap hack can still be a hook team rather than the singleton.
If you are depositing into a v4 pool, ask whether that pool names a hook, and if you cannot tell, you are still missing the pool you are about to use. Uniswap v4 and hooks is the later Uniswap page for how v4 is built, so hook risk is named here and the workshop stays there.
What holding UNI actually exposes you to
Holding UNI is a different choice from locking tokens in a pool, because UNI can fall in price while every Uniswap contract keeps running. Governance can change fees or treasury policy without a hack headline, and a decentralization ranking is a different question, so skip pasting a fake ranking here.
UNI is the ERC-20 used to vote, and it is optional for a swap, while it is also a token with zero pro-rata claim on protocol fees. A CEX UNI balance also stays unable to vote until it sits in a wallet the governor can see. Price risk is ordinary token risk, which is a different kind from a smart-contract kind, and it is a reason to keep reading the other three.
Governance risk is parameter risk and treasury risk, because people who vote can turn fee switches, mint rules, or spend paths, and they still leave every old v2 pool's bytecode in place if they only publish a blog post. If you hold UNI because you want a say, you are taking that path on purpose. UNI governance is the dated process page, and the kinds question should leave that process on its own page.
How decentralized the system is sits one hop away, so how decentralized Uniswap is is that essay, and it still leaves you without a fake ranking. Skip pasting a review-site AAA onto UNI because the pools are old, since a concentrated vote and an immutable pool are different facts, and mixing them is how a score gets written.
If you only wanted to buy UNI on a book, the kinds question is the wrong tool, because you wanted a buy path, which is a separate Uniswap how-to. Name the thing you are about to sign before you chase a grade.
Venue custody and a pool call
A Uniswap swap from a wallet you control is self-custody risk, while UNI on an exchange is third-party custody. BloFin is that second venue, Uniswap is the protocol plus the Labs app, and naming both is the honest split.
Investor.gov puts the third-party failure in one sentence: "If the third-party custodian is hacked, shuts down, or goes bankrupt, you may lose access to your crypto assets" (source: Investor.gov, Crypto asset custody basics). That line is about the firm that holds keys rather than about a v2 pair, so a BloFin UNI line can be fine while a hook pool you never used drains, and a pool can be fine while an exchange pauses withdrawals, which are different days.
Self-custody flips the failure, because you hold the keys, so a clone site, a bad Permit2, or a lost phrase is on you, and the chain will leave it unreversed. Crypto security is the generic habit page, and the venue change is what moves the risk kind.
BloFin lists two UNI perpetuals: UNIUSDT at up to 75x, listed January 12, 2023, and UNIUSD, an inverse contract settled in UNI, at up to 20x. A 75x perpetual is a price bet, and it is a different product from UNI you can send, so confirm the screen says spot if you wanted the coin.
BloFin has listed UNI/USDT on spot since January 15, 2024. Uniswap the DEX is still a competing venue, and BloFin does not run those pools, so holding UNI here is exchange risk, while holding UNI in a wallet you connect to app.uniswap.org is protocol-plus-interface risk. Pick the thing you hold before you pick a score.
Reading a Permit2 prompt before you sign
You wanted to swap 200 USDC for UNI, searched, connected, and almost signed a Permit2 for UNI you did mean to keep. The tell was the asset on the prompt, and the official host was a different tab from the one you opened.
Here is a quick walkthrough: you typed uniswap into search, and the first result looked like the app, then the tab connected your wallet with one click and only showed your address, then a second popup asked you to sign, with zero gas line. The decoded text mentioned UNI rather than USDC, and you had zero UNI in that wallet, so you closed the tab.
A real swap of 200 USDC would name USDC as the token being spent, show a pool or route, and ask for a network fee on Ethereum if that is the chain, while a fake Permit2 often asks you to verify or claim. Support already warned that a site may ask you to prove you own the wallet, so treat a no-fee UNI signature as a stop, then type the official host by hand and start over.
The 200 USDC figure is a teaching size, and the useful check is the mismatch. If you came to spend USDC and the wallet asks to allow UNI, you are outside the swap you planned. If the host is a different host from the official app host, you are outside Labs software. A popup that asks for seed words is a different script from Uniswap, so walk away, open a fresh tab, type the host, then connect once.
You needed to read the prompt to stop, because the clone was interface risk and the missing USDC line was the giveaway, and the core contracts never saw your 200 USDC because you never sent the swap.
Fake tokens, clone sites, and LP results
Most coin loss around Uniswap sits outside a core-contract bug, because it is a fake token, a fake site, a wrong network, or an LP result someone called a hack, so name the loss first, then decide whether Uniswap the protocol was even in the path.
A look-alike UNI token can fill a search box, because the ticker matches while the contract differs. Uniswap scams and fake tokens is that checklist, and phishing in crypto is the generic clone-site pattern, so those losses are their own kind, and they leave the PoolManager unimplicated.
Wrong network is a send error, because bridged UNI uses a different contract on that chain, so the coins can sit where your Ethereum-only view cannot see them. How to send and receive UNI is the later send page, so treat a missing balance as a network-label question first, and as a Uniswap exploit only after that label matches.
Impermanent loss is an LP result, so if you skipped minting a position, you skipped that result, and if you did mint, the pool can be honest and you can still lag a hold. What impermanent loss is is the generic Trading page, and Uniswap impermanent loss is the Uniswap-specific follow-on, and neither page is a safety score.
After a scare, sort the event:
- Did you sign on a host that differed from the official app?
- Did you approve Permit2 or an unknown spender?
- Did you buy a token that differed from the UNI contract you meant?
- Did you send on a chain your wallet was skipping?
- Were you an LP, and did the pair move?
If the answer is one of those five, you are looking at a different event from a core exploit. If none of them fit, you still skip a score and ask a narrower question: which contract, which hook, which venue. That is the useful form of is Uniswap safe.
Frequently asked questions
If my UNI sits on BloFin, can a Uniswap v4 hook drain it?
A hook runs on a v4 pool you interact with from a wallet, while UNI on BloFin is an exchange ledger line, so the hook reaches that line only after you withdraw, send to a wallet, and then use that pool. A BloFin outage is still venue risk, which is a different failure from Cork-style hook code, so keep those two failures apart. Withdrawing into a hooked pool is a new choice.
Does a nine-audit badge mean I can leave an unlimited Permit2 approval in place?
The v4 bounty post names nine independent audits of Labs-deployed v4 code, while Permit2 is an approval path on the interface side. An old unlimited allowance can still be used by a signature you did mean to skip. Revoke tools cost gas, and an audit headline leaves a leftover approve live. If you forget what you signed, treat the allowance as live until you check it.
The swap confirmed, then a banner offered LP rewards. Did I already take impermanent loss?
The success screen is a second prompt. Open the transaction on a block explorer and look for a mint or add-liquidity call, rather than only a swap. If the only call is a swap, you paid the pool fee and you sit outside the pair. If a mint is there, you have a position even if you thought you only traded. That mint is a new choice.
If I hold zero UNI, can a Uniswap pool still drain my USDC?
Pool and Permit2 risk sit on the tokens you approve and send. A USDC and ETH pool can spend USDC you approved even if the wallet has zero UNI, and UNI in the wallet leaves that spend uncapped. Zero UNI also leaves a fake Permit2 on USDC unblocked. Holding UNI is a governance choice.
Is Unichain the same safety question as Uniswap?
Unichain is an OP Stack L2 with its own gas and its own blocks, while Uniswap the AMM is a set of contracts that can be deployed on more than one chain. A Unichain outage is chain risk, and a Uniswap pool bug on Ethereum is contract risk. UNI sitting on Unichain stays a different fact from a safer ticker match. Name the chain, then name the contract, then name the UI.
If a review cites Uniswap TVL as the safety number, is that a cap on what I can lose?
Total value locked (TVL) is value sitting in pools on a given day. It is not an insurance fund that pays you if a signature is bad, if a hooked pool you used fails, or if an exchange pauses. A larger TVL can sit next to a clone tab. Your loss is the tokens you signed for, so skip treating TVL as a deductible or a coverage limit.
A token page inside my wallet offered an Open Uniswap button. Should I treat that as the official app?
Wallet dapp browsers often open a URL the token page supplied, which is a different rule from the typed-host rule in Labs support. Read the host in the browser chrome before you sign. If it differs from app.uniswap.org, treat the tab as a random site. A signature that differs from the current Permit2 address, when that is what you meant to use, is the same stop. The Open button is a shortcut.
Researched and written by the BloFin Academy editorial team with AI-assisted drafting. Updated September 2026. Primary sources include Uniswap 101, the Uniswap v4 bounty post, Uniswap v4 docs, Trail of Bits on v4 hooks, Labs Permit2 support, and investor.gov custody basics. All facts independently verified against cited documentation current as of September 2026.
This article is educational and general in nature, not financial or investment advice. Cryptocurrencies like UNI carry real risks, including price volatility, venue risk, smart-contract exploits in ecosystem apps, and the chance of losing funds. Nothing here is a recommendation to buy, sell, hold, or participate in any project. Do your own research, and consider speaking with a licensed professional before making financial decisions. BloFin does not provide investment advice.