mediumLogic errorEVM-Solidity
Mellow Flexible Vaults: DoS in Redemption Due to Unchecked Asset Support in Subvaults
- Payout
- $0
- Protocol
- Mellow Flexible Vaults
- Disclosed
- Jul 28, 2025
- Source
- sherlock
Mellow Flexible Vaults' redemption path aggregates token balances from every subvault during getLiquidAssets() and then attempts to pull the asset from each subvault, without first confirming that subvault supports the asset. Because subvaults enforce an allow …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.