UniRouter

The research assessment is adverse because key disclosures remain unresolved. Despite the name, UniRouter is unrelated to Uniswap. It is a Bitcoin liquid-staking platform built on B² Network, a Bitcoin Layer 2, and issues uBTC/stBTC against BTC staked through Babylon’s Bitcoin staking protocol. We found no audit of UniRouter’s contracts, no disclosure of the minting authority or signers for the MuSig2-aggregated custody wallet, and no unstaking or redemption mechanics in the protocol’s own architecture documentation. With public documentation this thin, the lack of a reported incident is weak evidence.

Review triggers: events that reopen the verdict
• UniRouter publishes an independent, named third-party security audit covering the staking-vault and minting contracts
• MuSig2 signer or validator set composition and threshold are publicly disclosed and independently verifiable
• Redemption and unstaking mechanics, including timing and any Babylon-unbonding-period pass-through, are documented and demonstrated at proposed size
• Twelve consecutive months with no depeg, slashing-related loss, or custody incident following the above disclosures

Watched nightly: a warning on its venues or files, or a cited document that changes, reopens the memo. The first confirmation is due 2026-11-17.

The research file

Mechanism

Users lock BTC in signature-aggregated wallets that use MuSig2 aggregation. The architecture runs directly on Babylon’s Bitcoin staking protocol. UniRouter validators start staking transactions, and appointed node operators perform validation duties on the Babylon chain. The system uses Babylon’s Extractable One-Time Signature slashing model, which exposes a staker’s key and makes funds subject to slashing if a validator equivocates. Users receive uBTC or stBTC, a staking-derivative token that represents their staked value while remaining nominally liquid.

Control and governance

UniRouter’s documentation refers to ”delegated validators” and ”node operators,” but does not state the MuSig2 signer thresholds, the committee’s members, who controls the uBTC minting authority, or whether anyone can pause or freeze the system. We found no governance token, DAO, or named multisig signers anywhere in the materials reviewed.

Incident record

We found no confirmed exploit, depeg, or security incident through this review’s 2026-08-17 search cutoff. This is only a bounded negative finding. The public documentation is so thin that a lack of reports is weak evidence that the record is actually clean. We found no audit report, audit firm name, or audit scope anywhere in the documentation or search results reviewed.

Exit

UniRouter’s architecture documentation does not explain unstaking procedures, withdrawal timelines, or redemption mechanics for uBTC or stBTC. No primary source closed this gap during the review. As a result, we cannot verify a client’s exit path from this product at all.

Comparison

This is the same hidden-control-and-exit pattern that led this registry to reject Lorenzo enzoBTC for unconfirmed redemption and authority, and Unit for a thin, unnamed guardian set. UniRouter discloses even less. It names no audit of any kind, while those two at least referred to some third-party review. Compared with native BTC held directly or Babylon staking directly, UniRouter adds an unaudited intermediary layer without a disclosed control map or exit path. Building on Babylon does not fix that gap. This registry’s independently researched Babylon Protocol memo found zero registered audits for the underlying staking protocol and no disclosure of the covenant committee’s membership or threshold. UniRouter therefore puts its own undisclosed validators and minting authority on top of a base layer that this registry already found poorly disclosed, instead of relying on a solid, vetted foundation.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• DefiLlama — UniRouter protocol record · secondary · accessed 2026-08-17
  Supports: protocol identity confirmation
• UniRouter — official site · primary · accessed 2026-08-17
  Supports: product overview
• UniRouter Dataroom — liquid-staking architecture · primary · accessed 2026-08-17
  Supports: mechanism, MuSig2 custody, Babylon integration
• UniRouter Dataroom — how to get uBTC on B² Network · primary · accessed 2026-08-17
  Supports: minting flow
• B² Network — UniRouter’s Bitcoin staking solution · secondary · accessed 2026-08-17
  Supports: ecosystem context

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.