Shido security record

As of 6 Mar 2025, Trustblock’s record for Shido holds 2 audit reports by 1 audit firm (May 2024 to Jul 2024) and 1 incident (Feb 2024). The latest audit is “Shido” by Zokyo, dated 30 Jul 2024. Those reports list no open critical findings.

Critical findings

No open critical findings

Across the 2 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it. See the findings

Incident

Incident 28 Feb 2024

Source: De.Fi incident database. 2 audits have been published since. See the incident

Open the latest report Get the label for your site

Record last updated 6 Mar 2025. It holds audits, findings and contracts up to Oct 2026, and incidents up to Sep 2026. Statuses are the audit firms’ own. Trustblock does not review code.

Audits: 2; by 1 firm, May 2024 to Jul 2024
Last audit: 30 Jul 2024; by Zokyo
Incidents on record: 1; 28 Feb 2024; data ends Sep 2026

Issues (34)

	Low	Medium	High	Critical	Total
Not fixed	-	-	-	-	0
Acknowledged	27	3	-	-	30
Fixed	2	1	-	1	4
Total	29	4	0	1	34

Reported rekts

This project has no active rekts.

Audits (2)

#	Name	Auditor	Date	Chains	Issues
1	Shido	Zokyo	2024/07/30	Ethereum	No open critical findings
2	Shido Smart Contract Review	Zokyo	2024/05/28	Ethereum	No open critical findings

Contracts (51)

#	File Name
1	Scope not recorded here: see the report
2	./libraries/FullMath.sol
3	./base/PeripheryImmutableState.sol
4	./libraries/TransferHelper.sol
5	./libraries/Oracle.sol
6	./libraries/PoolAddress.sol
7	./libraries/PoolTicksCounter.sol
8	./libraries/SafeCast.sol
9	./base/SelfPermit.sol
10	./libraries/HexStrings.sol

Get your label

Is this your project? Add a free label to your website. It shows the audits published on Trustblock, with the latest firm and date, and links to this page. It updates by itself.

HTML

<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
<div
  data-tb-project-widget
  data-tb-project-slug="shido"
  data-tb-variant="label"
  data-tb-color="light"
></div>

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us

#	File Name
1	Scope not recorded here: see the report
2	./libraries/FullMath.sol
3	./base/PeripheryImmutableState.sol
4	./libraries/TransferHelper.sol
5	./libraries/Oracle.sol
6	./libraries/PoolAddress.sol
7	./libraries/PoolTicksCounter.sol
8	./libraries/SafeCast.sol
9	./base/SelfPermit.sol
10	./libraries/HexStrings.sol

Shido security record

Issues (34)

DoS in CometBFT Block Sync (github.com/cometbft/ cometbft/blocksync)Acknowledgedacknowledged/medium

Incorrect Access Control via Malicious CosmWasm ContractAcknowledgedacknowledged/medium

Uncontrolled Resource Consumption in go-jose (github.com/dvsekhvalnov/jose2go)Acknowledgedacknowledged/medium

GoBoolExpressionsAcknowledgedacknowledged/low

GoBuildTag (rpc/namespaces/ethereum/debug/trace.go: 18)Acknowledgedacknowledged/low

Reported rekts

Audits (2)

Contracts (51)

Get your label

Audits (2)