Uniswap v4 Permissioned Pools: On-Chain AML for Regulated DeFi

Uniswap v4 Permissioned Pools: On-Chain AML for Regulated DeFi

Crypto APIs Team

Jul 27, 2026 • 4 min

Uniswap has added permissioned pools to its v4 architecture, letting pool creators restrict who can trade based on identity, jurisdiction, or compliance status. This moves gatekeeping from off-chain interfaces to the protocol layer itself. For teams building custody, exchange, and payment infrastructure around regulated assets, it changes where compliance logic lives and how it must be enforced.

What happened

Uniswap v4 introduced hooks in early 2025, allowing developers to attach custom logic to pool lifecycle events such as swaps and liquidity changes. Permissioned pools use these hooks to enforce access control at the smart contract level. A pool can now require that any address interacting with it holds a valid credential or passes a screening check before a swap executes.

The practical effect is a set of pools where trading is gated. Tokenized treasuries, regulated stablecoins, and security tokens can sit in liquidity pools that only whitelisted counterparties reach. This is a departure from the open, permissionless model that defined earlier automated market maker (AMM) design. It answers a specific demand from institutions in the United States and the European Union that want on-chain liquidity without exposing themselves to unscreened counterparties.

The design does not replace open pools. It runs alongside them. Developers choose the compliance model per pool, which means the same protocol now serves both permissionless retail trading and gated institutional flow.

Why it matters

Regulated assets carry rules that permissionless pools cannot satisfy. Under the EU Markets in Crypto-Assets (MiCA) framework and the Financial Action Task Force (FATF) Travel Rule, firms handling certain assets must know their counterparties and screen for sanctions exposure. A trading venue that cannot enforce those checks is not usable for tokenized securities or bank-issued stablecoins.

Permissioned pools place the enforcement point inside the contract. That is a foundational shift. Compliance stops being a front-end filter that a user can bypass with a direct contract call. It becomes a condition of execution. For anyone building against these pools, the screening data has to be correct, current, and available before the transaction is signed.

This is where address verification and transaction preparation move to the center of the build. Before a swap reaches a permissioned pool, your system needs to confirm the counterparty address is not sanctioned, is not tied to known illicit activity, and matches the jurisdiction rules the pool enforces. Prepare Transactions and address screening across 20+ chains are the components that make that possible without building the checks from scratch. The same pattern applies to regulated stablecoin flows, which we covered in Fidelity's dollar stablecoin entering DeFi.

Implications

Three concrete changes land on development teams.

First, screening moves upstream. In a permissioned pool, a rejected transaction still costs gas and still fails visibly. Teams need to screen the counterparty and the pool eligibility before broadcasting, not after. That means pre-flight checks tied to your signing flow. A Transaction Simulator lets you confirm a swap will succeed against a pool's hook logic before you spend gas on it.

Second, monitoring gets more granular. A custody or exchange operation supporting permissioned pools needs to watch both the addresses it controls and the pools those addresses touch. Real-time event infrastructure matters here. Blockchain Events deliver webhook notifications in under 100 milliseconds, so your compliance and treasury systems react to on-chain activity as it settles rather than on a polling delay. For a build pattern, see our guide on monitoring blockchain addresses with webhooks.

Third, audit trails become a requirement, not an option. Regulators reviewing a firm's DeFi activity will ask which counterparties were screened, when, and against which lists. That evidence has to be reconstructable. Address history and transaction data endpoints give you the record. If a wallet is later flagged, as happened during the Argentina LIBRA case we examined in cross-exchange AML screening at scale, you need to show your screening was current at the time of each interaction.

There is a second-order effect worth flagging. Permissioned pools normalize the idea that a DeFi protocol can carry compliance logic natively. That opens the door for banks and payment service providers that have stayed out of on-chain trading. Chainlink's Project Pangea, with 50-plus banks testing settlement across 16 countries, points at the same direction. Institutional on-chain liquidity depends on enforcement that regulators accept.

What to watch next

Watch which credentialing standards the permissioned pools adopt. If pool hooks read from a shared attestation or identity registry, screening providers and address verification services will need to write to and read from those registries. Interoperability between the credential a pool checks and the screening data a compliance team maintains is the open question.

Watch jurisdiction fragmentation. A pool built for MiCA-compliant EU counterparties will encode different rules than one built for a US regulated venue. Teams operating across both will manage multiple eligibility models per asset. The pressure this puts on compliance tooling mirrors the exchange migration pressure MiCA has already created, which we tracked in the OKX and Coinbase EU migration analysis.

Watch adoption by tokenized asset issuers. Permissioned pools matter only if regulated assets flow into them. Tokenized treasuries and bank stablecoins are the early candidates. Their arrival will tell you whether this is infrastructure institutions actually use or a feature waiting for demand.

If you are building toward regulated DeFi, the components are available now. Address screening across 20+ chains, sub-100ms event webhooks, transaction simulation, and preparation endpoints cover the compliance and execution path a permissioned pool requires. Start on the free tier with no credit card, or review the full product set to map it against your build.

Related articles

Share