# Is Uniswap web app + Uniswap Wallet safe to connect?

> Uniswap web app + Uniswap Wallet: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked...

Canonical: https://tradingagentstack.com/check/uniswap/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. Uniswap web app + Uniswap Wallet

# Is Uniswap web app + Uniswap Wallet safe to connect?

Self-custody wallet · Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche, other EVM networks. Checked 2026-10-28; every line links its source.

**Worst case:** Uniswap is self-custody: a leaked recovery phrase, or one malicious approval or Permit2 signature on a fake Uniswap site (often reached through search ads or fake UNI airdrops), lets an attacker drain the approved tokens or the whole wallet. Uniswap Labs can't reverse it.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Install only from wallet.uniswap.org: App Store id6443944476, Google Play com.uniswap.mobile, Chrome Web Store nnpmfplkfogfpmcngplhnbdnnilmcdcg (Chrome only), and swap only at app.uniswap.org. Uniswap Labs never asks you to install software or send funds, and supports users only by email at support@uniswap.org.

2. Keep your recovery phrase offline ('never in your notes app, email, or Google Docs', per Uniswap's security post) and never show it to anyone. Ignore 'airdrop' tokens that appear in your wallet and links promising free UNI.

3. Read every signature: Uniswap warns that 'Any onchain token approval to the Permit2 contract is vulnerable to a malicious signature approval', while its own app's permits last only 30 days. Revoke approvals you no longer need with your block explorer's approval checker, as Uniswap's help center explains.

## What it can do with your money

| Who holds the keys | You hold the keys Self-custody. The App Store listing says the recovery phrase is stored in the iPhone secure enclave so it 'never leaves your device without permission', with an optional encrypted iCloud backup. Uniswap says: 'Never share your private keys or recovery phrase with anyone.' The web app holds nothing: you connect your own wallet to it. [source](https://apps.apple.com/app/id6443944476) |
| --- | --- |
| Can funds be sent out to any address? | Yes. You sign every send and swap yourself, to any address. A token approval or Permit2 signature also lets the approved contract move those tokens. [source](https://support.uniswap.org/hc/en-us/articles/39683402190733) |
| Swaps and third parties | Swaps go through the on-chain Uniswap protocol. 'As of December 27, 2025 Uniswap Labs does not charge interface fees'; network fees and pool fees still apply, and the protocol fee is set by Uniswap governance. Uniswap Labs screens addresses with third-party blockchain-analytics providers and can block a wallet from using the Uniswap web app or Uniswap Wallet (appeals to compliance@uniswap.org, https://support.uniswap.org/hc/en-us/articles/8671777747597-Address-Screening-Guide). That guide does not say funds are frozen. Revoking an approval is different from disconnecting from a dapp. [source](https://support.uniswap.org/hc/en-us/articles/20131678274957) |

## Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

- Website: `uniswap.org`

- Website: `app.uniswap.org`

- Website: `wallet.uniswap.org`

- X: `@Uniswap`

- GitHub: `github.com/Uniswap`

- GitHub: `github.com/Uniswap/interface`

- App: `https://chromewebstore.google.com/detail/uniswap-extension/nnpmfplkfogfpmcngplhnbdnnilmcdcg`

- App: `https://apps.apple.com/app/id6443944476`

- App: `https://play.google.com/store/apps/details?id=com.uniswap.mobile`

Where we confirmed these
- https://support.uniswap.org/hc/en-us/articles/17522892515341-Official-Uniswap-Labs-links (vendor's official-links page: website Uniswap.org, support@uniswap.org, help center support.uniswap.org, GitHub 'Uniswap', Discord 'Uniswap', X @Uniswap, @UniswapBuilders and @UniswapAuctions; no Telegram listed)

- https://blog.uniswap.org/uniswap-extension-is-now-available-for-everyone (vendor blog, 2024-07-16: links Chrome Web Store nnpmfplkfogfpmcngplhnbdnnilmcdcg, app.uniswap.org, wallet.uniswap.org, twitter.com/Uniswap, github.com/Uniswap and github.com/Uniswap/interface)

- https://blog.uniswap.org/uniswap-wallet-android (vendor blog, 2023-11-14: links App Store id6443944476; says to get the Android app from Google Play but gives no link)

- https://cdn.jsdelivr.net/gh/uniswap/interface@main/README.md (vendor README: web app https://app.uniswap.org, wallet https://wallet.uniswap.org, x.com/Uniswap, discord.com/invite/uniswap)

- github.com/Uniswap/interface source, apps/mobile/android/app/build.gradle at commit bdbace6 (2026-10-22): release applicationId "com.uniswap.mobile" (dev and beta builds use .dev and .beta)

- https://chromewebstore.google.com/detail/nnpmfplkfogfpmcngplhnbdnnilmcdcg ('Uniswap Extension', offered by Universal Navigation Inc, developed by Uniswap Labs, website uniswap.org, email web-store-publishing@uniswap.org, 100,000 users, v1.85.0.1 updated 2026-10-15)

- https://apps.apple.com/app/id6443944476 ('Uniswap: Crypto & NFT Wallet', seller Universal Navigation Inc., developer website wallet.uniswap.org, privacy policy uniswap.org/privacy-policy, v1.85.0, 20K ratings)

- https://play.google.com/store/apps/details?id=com.uniswap.mobile ('Uniswap: Crypto & NFT Wallet' by Uniswap Labs, legal entity UNIVERSAL NAVIGATION INC., website wallet.uniswap.org, email google-play@uniswap.org, 1M+ downloads, updated 2026-10-14)

- https://ethereum.org/apps/uniswap/ (listing reviewed July 2025: website app.uniswap.org, x.com/Uniswap, github.com/uniswap, discord.com/invite/uniswap; creator Uniswap Labs)

- https://ethereum.org/wallets/find-wallet/uniswap-wallet/ (website wallet.uniswap.org, x.com/Uniswap, github.com/Uniswap/interface, discord.gg/uniswap; swap fee 0%)

### Known fakes

- `uniswaplp.com` · 2022-07-13 [source](https://www.bleepingcomputer.com/news/security/8-million-stolen-in-large-scale-uniswap-airdrop-phishing-attack/)

- `app.uniswapweb-launch.org` · 2024-12-16 [source](https://www.pcrisk.com/removal-guides/31640-uniswap-uni-airdrop-scam)

- `airdrop-uniswapp.com` · 2024-12-16 [source](https://www.pcrisk.com/removal-guides/31640-uniswap-uni-airdrop-scam)

- `unlchalindefi.com` · 2024-10-15 [source](https://cointelegraph.com/news/scammers-fake-uniswap-l2-unichain-hype)

## Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

| Date | What happened | Amount | Outcome | Source |
| --- | --- | --- | --- | --- |
| 2026-05-25 | A sponsored Google ad led to a fake Uniswap clone site that drained wallets when they connected; at least ~$400,000 was stolen (community alert by b-block, reported by ForkLog). Security Alliance (SEAL) separately reported blocking 356+ malicious ad links between March 13 and 30 (third-party report; no domain named). (third-party report) | at least ~$400,000 | not recovered (none reported) | [source](https://forklog.com/en/news/fake-uniswap-ad-on-google-nets-scammers-400000) |
| 2025-01-13 | ScaleBit (a BitsLab subsidiary) said a flaw in the Uniswap Wallet mobile app let anyone holding an unlocked phone bypass the wallet's authentication and read the recovery phrase in under three minutes. Cointelegraph could not verify it, and Uniswap did not comment (third-party report). (third-party report) |  | no losses reported; no fix confirmed in the coverage | [source](https://cointelegraph.com/news/bitslab-flags-uniswap-wallet-vulnerability) |
| 2024-10-15 | Google search ads showed the real Unichain URL but sent users to a fake Unichain site (unlchalindefi.com) that pushed wallet transactions; flagged by Scam Sniffer (third-party report). (third-party report) |  | site taken down quickly; losses unknown | [source](https://cointelegraph.com/news/scammers-fake-uniswap-l2-unichain-hype) |
| 2022-11-17 | The Uniswap web app loaded as a blank page for some users for more than four hours; Uniswap blamed a Cloudflare routing problem and pointed users to its IPFS link. |  | no impact on funds reported | [source](https://www.theblock.co/post/187963/uniswap-website-goes-dark-for-some-users-after-cloudflare-routing-problem) |
| 2022-07-11 | Fake 'UniswapLP' airdrop: a token sent to ~73,399 addresses pointed to uniswaplp.com, where 'claiming' signed a setApprovalForAll that handed over Uniswap V3 liquidity-position NFTs. About 7,574 ETH was taken and 7,500 ETH sent to Tornado Cash. Uniswap Labs said 'there was no exploit' of the protocol. (third-party report) | ~$8M (about 7,574 ETH) | not recovered | [source](https://www.bleepingcomputer.com/news/security/8-million-stolen-in-large-scale-uniswap-airdrop-phishing-attack/) |

## Check a link

Got a link, @handle or repo that claims to be Uniswap web app + Uniswap Wallet? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for Uniswap web app + Uniswap Wallet

We email you if we add an incident, a freeze report, a known fake or a deadline for Uniswap web app + Uniswap Wallet. Free; unsubscribe anytime.

## More checks: Wallets
[Phantom](https://tradingagentstack.com/check/phantom/)[MetaMask](https://tradingagentstack.com/check/metamask/)[Rabby Wallet](https://tradingagentstack.com/check/rabby/)[Trust Wallet](https://tradingagentstack.com/check/trust-wallet/)[Exodus](https://tradingagentstack.com/check/exodus/)[Backpack](https://tradingagentstack.com/check/backpack/)[Solflare](https://tradingagentstack.com/check/solflare/)[Coinbase Wallet](https://tradingagentstack.com/check/coinbase-wallet/)[Electrum](https://tradingagentstack.com/check/electrum/)[Keystone](https://tradingagentstack.com/check/keystone/)[Ledger Live (now Ledger Wallet)](https://tradingagentstack.com/check/ledger-live/)[Trezor Suite](https://tradingagentstack.com/check/trezor-suite/)[OKX Wallet](https://tradingagentstack.com/check/okx-wallet/)[Bitget Wallet](https://tradingagentstack.com/check/bitget-wallet/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)