Juiceswap security review

Hexens29 Jan 2026Code version: not recorded (see the report)

Audit · firm’s term: security review

Hexens reviewed Juiceswap (Juiceswap security review) on 29 Jan 2026: 7 findings, 1 critical; 5 marked fixed, 2 acknowledged.

1 critical finding, fixed

Open the report Open Juiceswap’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	1
High	0	1	1
Medium	0	1	2
Low	0	0	1

CriticalUnvalidated position allows theft of hub collateral via buyExpiredCollateralFixed

The report gives no description here.

HighFirst deposit can steal initial victim deposit in SavingsVaultJUSDFixed

The report gives no description here.

MediumJuiceSwapGateway does not check slippage on final converted amountFixed

The report gives no description here.

MediumTWAP protection ineffective due to observation cardinalityFixed

The report gives no description here.

LowProtocol fees can become permanently stuck when swap path is emptyFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Juiceswap’s security record

Juiceswap

Audits1 audit by 1 firmLast audit Jan 2026, by Hexens.

Critical findingsNo open critical findingsIn that report, 1 critical finding was reported. It is marked fixed by the firm that reported it.

Open Juiceswap’s security record

Security firm

Hexens

32 projects reviewed · 75 reports · latest Jul 2026

See Hexens’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.