mediumLogic errorEVM-Solidity
Mellow Flexible Vaults: Flawed Logic in `ShareManager` Inverts Transfer Whitelist Behavior
- Payout
- $0
- Protocol
- Mellow Flexible Vaults
- Disclosed
- Jul 28, 2025
- Source
- sherlock
Mellow Flexible Vaults' `ShareManager.updateChecks` function enforces its transfer-whitelist policy with reversed boolean logic. When the `hasTransferWhitelist` flag is enabled, the check reverts whenever the sender's `canTransfer` flag is true, which is the o …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.