I regularly upgrade my SmithCart install, but just an FYI I am running cart version 4.24 and I also experienced the token issue; your changelog page says that it was only in v4.28. Not sure if that matters or not, but I am assuming that when a hotfix is applied that all later released versions address the issue.