Likely custom pricing hook on Ethereum

Uniswap v4 Hook Contract 0x3f32daecf2a7b29075203b9c324dfb74edd58088 on Ethereum · Access control

Volume (24h)
$0
Value locked (TVL)
$0
All-time volume
$0
Pools using this hook
1
Swaps (24h)
0 (0 traders)
Total swaps
0

What it does

A permissioned swap hook that runs custom logic before swaps and can take or settle tokens through its return delta, controlled by an owner and role-based signers.

How it works step by step

  • Executes custom logic in beforeSwap for each swap
  • Returns a delta that can modify swap amounts via beforeSwapReturnDelta
  • Settles or takes tokens from the pool manager during swaps
  • Verifies signed payloads, tracking used signatures in a mapping
  • Restricts routing through an allowlist of routers and a bound executor and composer
  • Uses role-based access control and Ownable administration
Swap behaviour
Runs custom logic in beforeSwap and may adjust swap accounting via return delta, settling tokens with the pool.
Liquidity behaviour
No liquidity callbacks.
Fee behaviour
Hook does not set fees via a dynamic fee override; no fee logic identified from decoded functions.
Owner & admin controls
Not stated.

Enabled Uniswap v4 callbacks

beforeSwap, beforeSwapReturnDelta

beforeSwap: a custom swap handler (beforeSwap selector 0x575e24b4) runs before each swap; beforeSwapReturnDelta: the hook can return a delta that alters swap amounts and settles tokens, with settleToken and take calls present in the bytecode.

Security & trust assessment

Risk level: high, estimated (decoded bytecode, low confidence).

Who controls it: An owner (Ownable, with ownership handover) and a role-based access system (grantRoles, revokeRoles, ROLE_SIGNER) can allowlist routers, set a composer, bind an executor and wire approvals, giving privileged keys significant influence over swaps.

Risk to user funds: The hook declares beforeSwapReturnDelta and calls settle/take functions, so it can hold or move tokens during swaps; the precise conditions under which it does so cannot be determined from decoded bytecode alone.

Security findings

  • [high] Return-delta token movement: The hook can take or settle tokens through its return delta, so it can move pool-related funds during swaps.
  • [medium] Privileged role control over swap routing: Owner and role holders control allowedRouters, composer, executor and approvals; a compromised key could redirect swap flow.
  • [medium] Signature-authorised execution: Signature-based execution (usedSignatures, domainSeparator, multiple signed-payload functions) indicates off-chain authorised actions whose validity depends on signer keys.
  • [info] Owner and arming state: Owner can transfer ownership and renounce it, and an isArmed flag gates behaviour; the exact effect of arming could not be confirmed without source.

Contract details

Verified source
No
Bytecode size
23,724 bytes
Upgradeable proxy
No
Detected patterns
moves-currency, ownable, return-delta

Pools using Likely custom pricing hook