# Security review evidence

Read the independent report and understand exactly what it covers.

## Hexens · October 2025

[Download the original security review](/downloads/Hexens-Thesauros-October-2025-Final.pdf).

The review examined the automated rebalancing contracts. It reported two medium-severity findings, alongside lower-severity findings and optimization observations. The report distinguishes fixes from findings acknowledged by the team; consult each finding's disposition.

| Evidence | Revision |
| --- | --- |
| Reviewed repository | `Thesauros/contracts` |
| Reviewed commit | `8ad87397735cf4148e41b4544aa9c7a99ab54911` |
| Remediation commit listed in report | `460c30b788e3d385e0c0e85158f963f2348d15c8` |
| Review began | 20 October 2025 |

The report discusses withdrawal liquidity, reentrancy, rounding, incentives, accrual calculations and slippage protection. These are useful inputs to integration review and operational testing.

## Apply the report to your integration

Match the deployed code to the reviewed and remediated revisions. Record subsequent changes, adapter coverage and any additional review evidence. The report does not by itself establish audit coverage for the newer optimized rebalancer, Partner API, SDKs or your application.

Bring the deployment pack and your customer transaction flow to the technical review. [Prepare your deployment review](/security/deployments/).