Multivault Smart Contracts

ChainSecurityRepository at commit 764c15a

Audit

ChainSecurity reviewed Mellow (Multivault Smart Contracts) on 12 May 2025: 28 findings, 0 critical; 21 marked fixed, 6 acknowledged, 1 open.

No open critical findings
Open the reportOpen Mellow’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings28

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium016
Low1513
HighIncorrect Valuation of ERC-4626Fixed

The report gives no description here.

HighPending Assets Become Claimed During WithdrawalFixed

The report gives no description here.

MediumEigenLayer Queue wstETH Mix-UpFixed

The report gives no description here.

MediumEscalation of PrivilegesFixed

The report gives no description here.

MediumInsufficient Limitations for StrategiesFixed

The report gives no description here.

MediumIsolated EigenLayer Vault Not FunctionalFixed

The report gives no description here.

MediumOperator Undelegations Are Not Accounted forFixed

The report gives no description here.

MediumTransfer Pending Assets Skips AssetsFixed

The report gives no description here.

LowClaimable Assets Are Transferred as PendingFixed

The report gives no description here.

LowDouble Tracking of Withdrawals and Transferred WithdrawalsFixed

The report gives no description here.

Show 10 more
LowEigenLayer Not Ready to Be Integrated With Without UpgradesFixed

The report gives no description here.

LowgetOrCreate Never GetsFixed

The report gives no description here.

LowImplicit Minimum Deposit for EigenLayerFixed

The report gives no description here.

LowIncorrect Manager for Pausing Check for EigenLayerFixed

The report gives no description here.

LowIncorrect Maximum Computation in Ratios StrategyFixed

The report gives no description here.

LowIncorrect Maximum Deposit Computation in Ratio StrategyFixed

The report gives no description here.

LowIncorrect Target for ERC-4626 Maximum Deposit QueryFixed

The report gives no description here.

LowOld Vault Contracts Can Not Be Migrated EasilyFixed

The report gives no description here.

LowSending Pending Assets to Yourself Leads to LossesFixed

The report gives no description here.

LowShutdown Does Not Stop DepositsFixed

The report gives no description here.

Show 1 more
LowTemporary Vault DoS Due to Shutdown DelayFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (47)

  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerVault.sol at commit 764c15a91f6c322c30b9d4a736aa9d31ea06e3c7
  • https://github.com/mellow-finance/simple-lrt/src/queues/EigenLayerWstETHWithdrawalQueue.sol at commit 3b38213c942b2ed2ac5e6b28b69b77cd5592995e
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerVault.sol at commit 733df8430261584a7bfb53fcd5ce9d11b4e7123a
  • https://github.com/mellow-finance/simple-lrt/src/adapters/ERC4626Adapter.sol at commit 764c15a91f6c322c30b9d4a736aa9d31ea06e3c7
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerWstETHVaultFactory.sol at commit 764c15a91f6c322c30b9d4a736aa9d31ea06e3c7
  • https://github.com/mellow-finance/simple-lrt/src/adapters/ERC4626Adapter.sol at commit ca6b05bc665878c9aa059a3df7c8df6ec5194093
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerWstETHVault.sol at commit 3b38213c942b2ed2ac5e6b28b69b77cd5592995e
  • https://github.com/mellow-finance/simple-lrt/src/adapters/SymbioticAdapter.sol at commit 764c15a91f6c322c30b9d4a736aa9d31ea06e3c7
  • https://github.com/mellow-finance/simple-lrt/src/queues/EigenLayerWstETHWithdrawalQueue.sol at commit d11e531e24cfa08a6d9c3ca92031468f3a4ceb71
  • https://github.com/mellow-finance/simple-lrt/src/adapters/SymbioticAdapter.sol at commit 74ce3cc8feddaf862744095969b52852b49c0920
  • https://github.com/mellow-finance/simple-lrt/src/adapters/EigenLayerAdapter.sol at commit 733df8430261584a7bfb53fcd5ce9d11b4e7123a
  • https://github.com/mellow-finance/simple-lrt/src/adapters/EigenLayerAdapter.sol at commit ca6b05bc665878c9aa059a3df7c8df6ec5194093
  • https://github.com/mellow-finance/simple-lrt/src/adapters/EigenLayerWstETHAdapter.sol at commit 764c15a91f6c322c30b9d4a736aa9d31ea06e3c7
  • https://github.com/mellow-finance/simple-lrt/src/adapters/SymbioticAdapter.sol at commit 3b38213c942b2ed2ac5e6b28b69b77cd5592995e
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerWstETHVault.sol at commit 733df8430261584a7bfb53fcd5ce9d11b4e7123a
  • https://github.com/mellow-finance/simple-lrt/src/adapters/ERC4626Adapter.sol at commit d11e531e24cfa08a6d9c3ca92031468f3a4ceb71
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerWstETHVaultFactory.sol at commit 74ce3cc8feddaf862744095969b52852b49c0920
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerWstETHVault.sol at commit 764c15a91f6c322c30b9d4a736aa9d31ea06e3c7
  • https://github.com/mellow-finance/simple-lrt/src/adapters/ERC4626Adapter.sol at commit 3b38213c942b2ed2ac5e6b28b69b77cd5592995e
  • https://github.com/mellow-finance/simple-lrt/src/adapters/EigenLayerWstETHAdapter.sol at commit 733df8430261584a7bfb53fcd5ce9d11b4e7123a
  • https://github.com/mellow-finance/simple-lrt/src/adapters/SymbioticAdapter.sol at commit 733df8430261584a7bfb53fcd5ce9d11b4e7123a
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerVault.sol at commit d11e531e24cfa08a6d9c3ca92031468f3a4ceb71
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerVaultFactory.sol at commit 764c15a91f6c322c30b9d4a736aa9d31ea06e3c7
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerWstETHVault.sol at commit d11e531e24cfa08a6d9c3ca92031468f3a4ceb71
  • https://github.com/mellow-finance/simple-lrt/src/adapters/EigenLayerAdapter.sol at commit d11e531e24cfa08a6d9c3ca92031468f3a4ceb71
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerVaultFactory.sol at commit 3b38213c942b2ed2ac5e6b28b69b77cd5592995e
  • https://github.com/mellow-finance/simple-lrt/src/adapters/EigenLayerWstETHAdapter.sol at commit 74ce3cc8feddaf862744095969b52852b49c0920
  • https://github.com/mellow-finance/simple-lrt/src/adapters/EigenLayerAdapter.sol at commit 3b38213c942b2ed2ac5e6b28b69b77cd5592995e
  • https://github.com/mellow-finance/simple-lrt/src/adapters/EigenLayerAdapter.sol at commit 764c15a91f6c322c30b9d4a736aa9d31ea06e3c7
  • https://github.com/mellow-finance/simple-lrt/src/adapters/SymbioticAdapter.sol at commit ca6b05bc665878c9aa059a3df7c8df6ec5194093
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerVault.sol at commit ca6b05bc665878c9aa059a3df7c8df6ec5194093
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerWstETHVaultFactory.sol at commit 733df8430261584a7bfb53fcd5ce9d11b4e7123a
  • https://github.com/mellow-finance/simple-lrt/src/adapters/EigenLayerWstETHAdapter.sol at commit d11e531e24cfa08a6d9c3ca92031468f3a4ceb71
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerVaultFactory.sol at commit ca6b05bc665878c9aa059a3df7c8df6ec5194093
  • https://github.com/mellow-finance/simple-lrt/src/adapters/EigenLayerWstETHAdapter.sol at commit ca6b05bc665878c9aa059a3df7c8df6ec5194093
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerVaultFactory.sol at commit d11e531e24cfa08a6d9c3ca92031468f3a4ceb71
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerWstETHVault.sol at commit 74ce3cc8feddaf862744095969b52852b49c0920
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerVaultFactory.sol at commit 74ce3cc8feddaf862744095969b52852b49c0920
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerVaultFactory.sol at commit 733df8430261584a7bfb53fcd5ce9d11b4e7123a
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerVault.sol at commit 3b38213c942b2ed2ac5e6b28b69b77cd5592995e
  • https://github.com/mellow-finance/simple-lrt/src/adapters/ERC4626Adapter.sol at commit 733df8430261584a7bfb53fcd5ce9d11b4e7123a
  • https://github.com/mellow-finance/simple-lrt/src/adapters/EigenLayerWstETHAdapter.sol at commit 3b38213c942b2ed2ac5e6b28b69b77cd5592995e
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerVault.sol at commit 74ce3cc8feddaf862744095969b52852b49c0920
  • https://github.com/mellow-finance/simple-lrt/src/adapters/ERC4626Adapter.sol at commit 74ce3cc8feddaf862744095969b52852b49c0920
  • https://github.com/mellow-finance/simple-lrt/src/adapters/SymbioticAdapter.sol at commit d11e531e24cfa08a6d9c3ca92031468f3a4ceb71
  • https://github.com/mellow-finance/simple-lrt/src/adapters/EigenLayerAdapter.sol at commit 74ce3cc8feddaf862744095969b52852b49c0920
  • https://github.com/mellow-finance/simple-lrt/src/adapters/IsolatedEigenLayerWstETHVault.sol at commit ca6b05bc665878c9aa059a3df7c8df6ec5194093

Part of Mellow’s security record

Mellow
Audits5 audits by 2 firmsLast audit Nov 2025, by Nethermind Security.
Critical findingsNo open critical findingsAcross 5 reports.
Open Mellow’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us