Security Checklist Completeness
You are preparing a pre-deployment security checklist for a Uniswap V4 hook.
Context
A development team is about to deploy a V4 hook that:
- Implements beforeSwap and afterSwap callbacks
- Stores some state for tracking purposes
- Makes one external call to an oracle
- Has an admin function for configuration updates
Questions
- What security checks should be performed before deployment?
- Create a comprehensive security checklist covering all major vulnerability categories.
- What testing methodologies should be applied to this hook?
- What ongoing security measures should be in place after deployment?
Requirements
Your response should include checks for:
- Access control (PoolManager verification, admin functions)
- Reentrancy protection for external calls
- Delta accounting correctness
- Input validation and edge cases
- Gas considerations (no unbounded loops)
- Token handling hazards
- Testing requirements (unit, fuzz, invariant)
- Audit recommendations based on risk level
Expected Output
A comprehensive, actionable security checklist that covers all critical areas for V4 hook deployment.