Built on audited Uniswap V3 contracts · not a TangoSwap product audit

Security & audit posture

Built on audited Uniswap V3 contracts. Clear about what that does — and does not — mean. Upstream Uniswap V3 audit heritage is not a separate TangoSwap-commissioned audit or score. Sepolia kit deployment exists; mainnet presence is TBA until you deploy and verify.

Status at a glance

Third-party audit of this deployment: TBA
TangoSwap-owned deployment: Sepolia (see deployments/11155111.json)
Mainnet / other chains: TBA until independently verified for this project
Upstream Uniswap V3: public protocol with its own audit history — separate from TangoSwap

Contract scope

Contract	Source	Notes	Custom
UniswapV3Factory	Uniswap/v3-core (upstream)	Upstream Uniswap V3 has public audit history; not a TangoSwap-specific audit.	Upstream
UniswapV3Pool	Uniswap/v3-core (upstream)	Immutable pool logic once deployed.	Upstream
SwapRouter	Uniswap/v3-periphery (upstream)	On-chain amountOutMinimum / deadline protections.	Upstream
NonfungiblePositionManager	Uniswap/v3-periphery (upstream)	LP positions as NFTs.	Upstream
QuoterV2	Uniswap/v3-periphery (upstream)	Quotes are estimates; always apply slippage.	Upstream
WETH9	Canonical WETH9 pattern / chain-specific	Minimal wrapper — verify address per chain.	Verify

Practices & caveats

Upstream lineage, not a badge

Core AMM contracts follow Uniswap V3 open-source design. That does not mean TangoSwap has completed a third-party audit of this deployment.

Immutable pools

Pool contracts are not designed for admin upgrades. Configuration risk sits mainly in factory ownership and ops — not silent pool logic changes.

On-chain slippage protection

Swaps should pass amountOutMinimum to the router so execution reverts if price moves beyond your tolerance.

Verify deployments

Always check addresses in contracts/deployments/{chainId}.json (or published equivalents) before sending funds.

Operational hygiene (TBA / recommended)

After mainnet deploy: rotate deployer keys and move factory ownership to a multisig. Status: TBA until confirmed.

Third-party audit

A professional third-party audit of this TangoSwap deployment is TBA. Do not treat this page as an audit certificate.

Disclaimer: This page describes kit architecture and upstream heritage. It is not financial advice and not a substitute for your own review before mainnet deploy. Upstream V3 audits ≠ a TangoSwap product audit. Prefer testnet and independent verification.

Questions about security status?

Contact