Documentation / How it works
Security checks
Listed hooks are checked by v4 Marketplace. Standalone hook addresses are checked by v4 Pairs with the same rules.
Verdicts
| Verdict | Rule | Can launch |
|---|---|---|
| Safe | low or info findings only | yes |
| Warning | a medium finding | yes |
| Failed | any high finding, or any swap the hook made fail | stack: no; address: only flagged |
| Unchecked | no record on the hook's current code | stack: no; address: only flagged |
What runs
The pattern checker and Slither on the Sourcify-verified source, then 1,000 swaps through a fresh coin/ETH pool with the hook, on a local fork of chain 4663. The verdict, the counts and a report hash are written to HookAddressChecks (0xA58430472Ea574c7c2ADb321103e4d5Cb178317D), keyed by the hook address and its code hash, so a redeployed contract needs a new check.
The Unchecked flag
A coin launched on a hook with no passing record carries uncheckedHook = true in the factory forever: a red Unchecked hook label on its page and in /api/coins, the MCP and the SDK. A later passing check does not clear it.