mediumLogic errorEVM-Solidity
Mellow Flexible Vaults: cancelDepositRequest() always reverts due to modifying FenwickTree with wrong index
- Payout
- $0
- Protocol
- Mellow Flexible Vaults
- Disclosed
- Jul 28, 2025
- Source
- sherlock
Mellow Flexible Vaults' DepositQueue.cancelDepositRequest() mistakenly uses the latest oracle price checkpoint's index to remove a user's pending deposit from the Fenwick tree that is indexed by deposit timestamps. Because the price-trace array has a different …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.