Mellow Protocol audit
Audit competition · firm’s term: public best efforts audit contest
Sherlock reviewed Mellow (Mellow Protocol audit) on 28 Jul 2025: 15 findings, 0 critical; 13 marked fixed, 2 acknowledged.
No open critical findings
Open the reportOpen Mellow’s security record
Report hosted on GitHub.
Trustblock does not review code.
Findings15
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 6 |
| Medium | 0 | 2 | 7 |
| Low | 0 | 0 | 0 |
MediumstETH edge case in transfer rounding can cause denial of service for depositors and redeemers.Acknowledged
The report gives no description here.
MediumStuck stETH rewards in queue contractsAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Mellow’s security record
MellowAudits7 audits by 3 firmsLast audit Nov 2025, by Nethermind Security.
Critical findingsNo open critical findingsAcross 7 reports.
Open Mellow’s security recordSecurity firm
Sherlock46 projects reviewed · 67 reports · latest Sep 2026
See Sherlock’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us