Shib Sou V2 security review

Hexens19 Jan 2026Code version: not recorded (see the report)

Hexens reviewed Sheboshis (Shib Sou V2 security review) on 19 Jan 2026: 14 findings, 3 critical; 6 marked fixed, 8 acknowledged.

1 critical acknowledged, not fixed

Open the report Open Sheboshis’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings14

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	1	2
High	0	2	1
Medium	0	3	1
Low	0	2	2

CriticalOverpayment/Underpayment When Payment Token Differs from Target TokenAcknowledged

The report gives no description here.

HighcreatePayout underfunds token transfersAcknowledged

The report gives no description here.

HighMissing Token Funding in SOUDynamicPremiumStrategy Payout CreationAcknowledged

The report gives no description here.

MediumDonations Still Reduce PrincipalAcknowledged

The report gives no description here.

MediumSOU Splitting Can Manipulate Equal-Share RewardsAcknowledged

The report gives no description here.

MediumSOUUniversalRewardStrategy _getTokenUSDValue Uses Invalid Snapshot IDAcknowledged

The report gives no description here.

LowDonations Still Reduce PrincipalAcknowledged

The report gives no description here.

LowDoS of executeClaim via split or mergeAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Sheboshis’s security record

Sheboshis

Audits1 audit by 1 firmLast audit Jan 2026, by Hexens.

Critical findings1 critical acknowledged, not fixedReported in “Shib Sou V2 security review” by Hexens, Jan 2026. The team acknowledged it.

Open Sheboshis’s security record

Security firm

Hexens

32 projects reviewed · 75 reports · latest Jul 2026

See Hexens’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.