Partly checked

EVK Vault eUSDC-1

Euler EVK (eVault)Asset USDC0x4735E245271496aEDEFF224b7dcB06fA7715cfB7Monad mainnet

0 of 30 properties passed and none failed at block 109,195,820. 30 could not be exercised.

Known to the watcher from a backfill scan in block 109,195,820, 2026-09-30 09:50 UTC.

Request a re-checkRuns the same 30 properties at the latest block and attests the new report.

All 30 properties

In report order. Bit i is the bit the registry's passedBitmap and failedBitmap use for that property.



reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0

reason: maxDeposit returned 0 for every test user; there is no max value to honor (EIP-4626 allows underestimating)
runs: 0
reason: maxMint returned 0 for every test user; there is no max value to honor (EIP-4626 allows underestimating)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0
reason: `vm.assume` rejected too many inputs (4096 allowed)
runs: 0

Bit	Property	Result	What was found
a16z/erc4626-tests at ac48546, 26 properties: 16 on EIP-4626 MUST sentences, 10 on SHOULD guidance (the round trips and the allowance checks)
0	`asset`test_assetEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: asset() does not revert Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
1	`totalAssets`test_totalAssetsEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: totalAssets() does not revert Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
2	`convertToShares`test_convertToSharesEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: convertToShares gives the same result for any caller Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
3	`convertToAssets`test_convertToAssetsEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: convertToAssets gives the same result for any caller Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
4	`maxDeposit`test_maxDepositEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: maxDeposit does not revert Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
5	`previewDeposit`test_previewDepositEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: deposit mints at least the shares previewDeposit quoted Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
6	`deposit`test_depositEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: deposit moves assets from the caller, credits shares to the receiver and spends allowance Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
7	`maxMint`test_maxMintEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: maxMint does not revert Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
8	`previewMint`test_previewMintEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: mint pulls at most the assets previewMint quoted Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
9	`mint`test_mintEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: mint moves assets from the caller, credits shares to the receiver and spends allowance Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
10	`maxWithdraw`test_maxWithdrawEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: maxWithdraw does not revert Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
11	`previewWithdraw`test_previewWithdrawEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: withdraw burns at most the shares previewWithdraw quoted Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
12	`withdraw`test_withdrawEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: withdraw burns owner shares, pays the receiver and spends share allowance Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
13	`withdraw-zero-allowance`test_withdraw_zero_allowanceEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: withdraw on behalf of an owner without allowance reverts Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
14	`maxRedeem`test_maxRedeemEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: maxRedeem does not revert Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
15	`previewRedeem`test_previewRedeemEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: redeem pays at least the assets previewRedeem quoted Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
16	`redeem`test_redeemEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: redeem burns owner shares, pays the receiver and spends share allowance Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
17	`redeem-zero-allowance`test_redeem_zero_allowanceEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: redeem on behalf of an owner without allowance reverts Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
18	`RT-deposit-redeem`test_RT_deposit_redeemEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: redeem(deposit(a)) returns no more than a Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
19	`RT-deposit-withdraw`test_RT_deposit_withdrawEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: withdraw(a) burns at least the shares deposit(a) minted Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
20	`RT-redeem-deposit`test_RT_redeem_depositEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: deposit(redeem(s)) mints no more than s Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
21	`RT-redeem-mint`test_RT_redeem_mintEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: mint(s) costs at least the assets redeem(s) paid Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
22	`RT-mint-withdraw`test_RT_mint_withdrawEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: withdraw(mint(s)) burns at least s shares Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
23	`RT-mint-redeem`test_RT_mint_redeemEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: redeem(s) pays no more than mint(s) cost Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
24	`RT-withdraw-mint`test_RT_withdraw_mintEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: mint(withdraw(a)) costs at least a Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
25	`RT-withdraw-deposit`test_RT_withdraw_depositEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: deposit(a) mints no more than the shares withdraw(a) burned Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
Specfirst max-honored properties, MIT, each on one EIP-4626 MUST sentence about a max function
26	`sf-maxDeposit-honored`test_sf_maxDeposit_honoredEIP-4626 MUST	Not applicable	Nothing to honor: maxDeposit returned 0 for every test user. EIP-4626 allows a max to underestimate, so there was no advertised amount to hold the vault to. Checks: deposit does not revert for amounts up to maxDeposit (EIP-4626: maxDeposit is the most deposit accepts without reverting) Raw result reason: maxDeposit returned 0 for every test user; there is no max value to honor (EIP-4626 allows underestimating) runs: 0
27	`sf-maxMint-honored`test_sf_maxMint_honoredEIP-4626 MUST	Not applicable	Nothing to honor: maxMint returned 0 for every test user. EIP-4626 allows a max to underestimate, so there was no advertised amount to hold the vault to. Checks: mint does not revert for shares up to maxMint (EIP-4626: maxMint is the most mint accepts without reverting) Raw result reason: maxMint returned 0 for every test user; there is no max value to honor (EIP-4626 allows underestimating) runs: 0
28	`sf-maxWithdraw-honored`test_sf_maxWithdraw_honoredEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: withdraw does not revert for assets up to maxWithdraw (EIP-4626: maxWithdraw MUST return 0 when withdrawals are disabled) Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
29	`sf-maxRedeem-honored`test_sf_maxRedeem_honoredEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: redeem does not revert for shares up to maxRedeem (EIP-4626: maxRedeem MUST return 0 when redemptions are disabled) Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0

Onchain attestation

Not attested yet.

CheckAttestationRegistry 0x3754...daF7 on Monad testnet holds no erc4626 attestation for this vault as of 2026-10-08.

Watch this vault

Pay per day for an alert when this vault's result changes, in your inbox and at your webhook if you register one, and for a shorter re-check cadence (the watcher's default is every 60 minutes for subscribed vaults, at most once a day for the rest). Every result stays public either way; a subscription buys delivery and freshness.

Reading the fee.

No wallet extension found in this browser. Install MetaMask or Rabby, or switch to the testnet burner above.

Connect a wallet first.

Replay this check

specfirst check 0x4735E245271496aEDEFF224b7dcB06fA7715cfB7 \
  --standard erc4626 \
  --block 109195820 \
  --runs 16 \
  --seed 0xfb696df4762a002dcff8b0ed6b0020080a541649eae5f073c04e39e0dfaaece7

Same block, runs and seed. The CLI draws a fresh random sender each run; the seed also salts the 16-user pool.

Report JSON

reportHash 0x5ef6c6...7822b6 is keccak256 of the report's canonical JSON (RFC 8785), the value the registry stores.

Badge and API

The badge and the JSON read the registry when they are loaded, so they follow new attestations without a rebuild.

[![Specfirst ERC-4626 check](/badge/check/143/0x4735e245271496aedeff224b7dcb06fa7715cfb7.svg)](/v/143/0x4735e245271496aedeff224b7dcb06fa7715cfb7)

JSON API Badge SVG

Implementation

Proxy: eip1967-beacon
Implementation: 0xef17750D3a162E28a302E266c474ff8989d60ECD
Implementation key: 0xdd21af250ff5c7001b35031d24abc55fd472370cf156a4146fe35134139c1901
Key from: Implementation behind the proxy: same compiler metadata and same code with immutables masked
Code hash: 0xa0d7b54b048167274d243ca61f39e97f52589f93fce9a2ea824c8350ed250e40
Code size: 366 bytes
Same key: 133 other vaults on this board

Run

Block: 109,195,820, Monad mainnet
Seed: 0xfb696df4762a002dcff8b0ed6b0020080a541649eae5f073c04e39e0dfaaece7
Sender: 0x3a3815F5aEdc65B9477A0D90e3ED250523768E01
Runs: 16 per property
Delta: 0 base units
Forge: forge Version: 1.5.1-Homebrew
forge-std: bf647bd6046f
Reject limit: 4096
Harness: 0x5b48d4...a08890
sf properties: 0x612e00...26991e
suiteHash: 0x0842a8...11026f
Started: 2026-09-30 09:50 UTC, 37 s
Report: schemaVersion 3

Same implementation

Same code, different vaults. Their results can still differ through parameters, caps and assets.

and 73 more