Spec mismatch

0x61b29EfEf2E6f866bA4AaeFDb87d2837C6a22b9c

0x61b29EfEf2E6f866bA4AaeFDb87d2837C6a22b9cMonad mainnet

1 of 30 properties failed at block 111,261,045. The vault's behavior contradicts an EIP-4626 MUST sentence.

Found by the watcher at its first Deposit event in block 110,420,469, 2026-10-06 12:55 UTC. No factory the watcher follows announced it. It was not on the hand-made list the board started from.

Request a re-checkRuns the same 30 properties at the latest block and attests the new report.

What failed

sf-maxWithdraw-honoredEIP-4626 MUST
maxWithdraw was 64,811,891,803,559,577,220,802, but withdraw(64,811,891,803,559,577,220,801) reverted with 0x08c379a0.
EIP-4626: maxWithdraw MUST return the maximum amount of assets withdraw accepts without reverting, and 0 while withdrawals are disabled.
Counterexample: test_sf_maxWithdraw_honored(3836566588494086721555546404605570038317867631420660898077202577892164914896, 492763187689062106902794095662924744209686064811891803559577220803, 115792089237316195423570985008687907853269984665640564039457584007913129639934)

A spec mismatch is a disagreement with an EIP-4626 MUST sentence, shown by a concrete call. It is not a claim that funds are at risk.

What the watcher saw

Every event the watcher recorded for this vault, newest first. Each check is a statement about one block; a re-check with the same outcome is recorded here without a new attestation.

07:13:0710-07Attested
Attestation #23 on Monad testnet tx 0xbc708f...997ac0
07:13:0610-07Checked
Spec mismatch
29 pass, 1 fail, 0 inconclusive, 0 not applicable at block 111,261,045, 59 s. Report
Why: backfill scan.
07:09:5610-07Queued
Waiting for a check: backfill scan.
07:09:5610-07Checked
All passed
30 pass, 0 fail, 0 inconclusive, 0 not applicable at block 111,224,893, 1 min. Report
Why: backfill scan.
16:35:4510-06First result
Spec mismatch
29 pass, 1 fail, 0 inconclusive, 0 not applicable.
Now failing: sf-maxWithdraw-honored
16:35:4510-06Checked
Spec mismatch
29 pass, 1 fail, 0 inconclusive, 0 not applicable at block 111,086,873, 57 s. Report
Why: first Deposit event from an unknown address.
13:54:5210-06Queued
Waiting for a check: first Deposit event from an unknown address.
13:54:5210-06Checked
Spec mismatch
29 pass, 1 fail, 0 inconclusive, 0 not applicable at block 111,055,013, 56 s. Report
Why: first Deposit event from an unknown address.
12:55:1310-06Queued
Waiting for a check: first Deposit event from an unknown address.
12:55:1310-06Found
First Deposit event from an unknown address in block 110,420,469 tx 0xd4d097...67ebf7

JSON: this vault's history

All 30 properties

In report order. Bit i is the bit the registry's passedBitmap and failedBitmap use for that property.

Bit	Property	Result	What was found
a16z/erc4626-tests at ac48546, 26 properties: 16 on EIP-4626 MUST sentences, 10 on SHOULD guidance (the round trips and the allowance checks)
0	`asset`test_assetEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: asset() does not revert
1	`totalAssets`test_totalAssetsEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: totalAssets() does not revert
2	`convertToShares`test_convertToSharesEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: convertToShares gives the same result for any caller
3	`convertToAssets`test_convertToAssetsEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: convertToAssets gives the same result for any caller
4	`maxDeposit`test_maxDepositEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: maxDeposit does not revert
5	`previewDeposit`test_previewDepositEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: deposit mints at least the shares previewDeposit quoted
6	`deposit`test_depositEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: deposit moves assets from the caller, credits shares to the receiver and spends allowance
7	`maxMint`test_maxMintEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: maxMint does not revert
8	`previewMint`test_previewMintEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: mint pulls at most the assets previewMint quoted
9	`mint`test_mintEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: mint moves assets from the caller, credits shares to the receiver and spends allowance
10	`maxWithdraw`test_maxWithdrawEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: maxWithdraw does not revert
11	`previewWithdraw`test_previewWithdrawEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: withdraw burns at most the shares previewWithdraw quoted
12	`withdraw`test_withdrawEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: withdraw burns owner shares, pays the receiver and spends share allowance
13	`withdraw-zero-allowance`test_withdraw_zero_allowanceEIP-4626 SHOULD	Pass	No counterexample in 16 fuzz runs at this block. Checks: withdraw on behalf of an owner without allowance reverts
14	`maxRedeem`test_maxRedeemEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: maxRedeem does not revert
15	`previewRedeem`test_previewRedeemEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: redeem pays at least the assets previewRedeem quoted
16	`redeem`test_redeemEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: redeem burns owner shares, pays the receiver and spends share allowance
17	`redeem-zero-allowance`test_redeem_zero_allowanceEIP-4626 SHOULD	Pass	No counterexample in 16 fuzz runs at this block. Checks: redeem on behalf of an owner without allowance reverts
18	`RT-deposit-redeem`test_RT_deposit_redeemEIP-4626 SHOULD	Pass	No counterexample in 16 fuzz runs at this block. Checks: redeem(deposit(a)) returns no more than a
19	`RT-deposit-withdraw`test_RT_deposit_withdrawEIP-4626 SHOULD	Pass	No counterexample in 16 fuzz runs at this block. Checks: withdraw(a) burns at least the shares deposit(a) minted
20	`RT-redeem-deposit`test_RT_redeem_depositEIP-4626 SHOULD	Pass	No counterexample in 16 fuzz runs at this block. Checks: deposit(redeem(s)) mints no more than s
21	`RT-redeem-mint`test_RT_redeem_mintEIP-4626 SHOULD	Pass	No counterexample in 16 fuzz runs at this block. Checks: mint(s) costs at least the assets redeem(s) paid
22	`RT-mint-withdraw`test_RT_mint_withdrawEIP-4626 SHOULD	Pass	No counterexample in 16 fuzz runs at this block. Checks: withdraw(mint(s)) burns at least s shares
23	`RT-mint-redeem`test_RT_mint_redeemEIP-4626 SHOULD	Pass	No counterexample in 16 fuzz runs at this block. Checks: redeem(s) pays no more than mint(s) cost
24	`RT-withdraw-mint`test_RT_withdraw_mintEIP-4626 SHOULD	Pass	No counterexample in 16 fuzz runs at this block. Checks: mint(withdraw(a)) costs at least a
25	`RT-withdraw-deposit`test_RT_withdraw_depositEIP-4626 SHOULD	Pass	No counterexample in 16 fuzz runs at this block. Checks: deposit(a) mints no more than the shares withdraw(a) burned
Specfirst max-honored properties, MIT, each on one EIP-4626 MUST sentence about a max function
26	`sf-maxDeposit-honored`test_sf_maxDeposit_honoredEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: deposit goes through up to min(maxDeposit, 1e6 tokens); when a smaller amount is refused the bound must go through, and refusals are counted (EIP-4626: maxDeposit MUST NOT be higher than what deposit accepts)
27	`sf-maxMint-honored`test_sf_maxMint_honoredEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: mint goes through up to min(maxMint, shares of 1e6 tokens); when a smaller amount is refused the bound must go through, and refusals are counted (EIP-4626: maxMint MUST NOT be higher than what mint accepts)
28	`sf-maxWithdraw-honored`test_sf_maxWithdraw_honoredEIP-4626 MUST	Fail	maxWithdraw was 64,811,891,803,559,577,220,802, but withdraw(64,811,891,803,559,577,220,801) reverted with 0x08c379a0. EIP-4626: maxWithdraw MUST return the maximum amount of assets withdraw accepts without reverting, and 0 while withdrawals are disabled. Checks: withdraw goes through up to maxWithdraw; when a smaller amount is refused maxWithdraw must go through, and refusals are counted (EIP-4626: maxWithdraw MUST NOT be higher than what withdraw accepts, and MUST be 0 when withdrawals are disabled) Raw result reason: withdraw(64811891803559577220801) reverted with selector 0x08c379a0 while maxWithdraw is 64811891803559577220802 runs: 0 call: test_sf_maxWithdraw_honored(3836566588494086721555546404605570038317867631420660898077202577892164914896, 492763187689062106902794095662924744209686064811891803559577220803, 115792089237316195423570985008687907853269984665640564039457584007913129639934) calldata: 0x72b950e2087b6b73e02a0628ce609abde737cfc807697be75e85f32958ef4546c02a4ed00000000004add748d7543645d6f6171e93c5342bab08f338e617c37891d376c3fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe
29	`sf-maxRedeem-honored`test_sf_maxRedeem_honoredEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: redeem goes through up to maxRedeem; when a smaller amount is refused maxRedeem must go through, and refusals are counted (EIP-4626: maxRedeem MUST NOT be higher than what redeem accepts, and MUST be 0 when redemptions are disabled)

Onchain attestation

Attestation #23 Valid

It records this exact report: the reportHash stored onchain equals the hash of the report on this page.

isCompliant is false: the attested report has failing, inconclusive or not applicable properties.

Issued: 2026-10-07 07:13 UTC
Issuer: 0x02Bc...5488
Counts: 29 pass, 1 fail, 0 inconclusive, 0 n/a
reportHash: 0xd42a27...9bee80
suiteHash: 0x67de68...c66d91
Transaction: not recorded here; look for Attested id 23 in the registry's logs
Registry: 0x3754...daF7

Report at the attested reportURI

Watch this vault

Pay per day for an alert when this vault's result changes, in your inbox and at your webhook if you register one, and for a shorter re-check cadence (the watcher's default is every 60 minutes for subscribed vaults, at most once a day for the rest). Every result stays public either way; a subscription buys delivery and freshness.

Reading the fee.

No wallet extension found in this browser. Install MetaMask or Rabby, or switch to the testnet burner above.

Connect a wallet first.

Replay this check

specfirst check 0x61b29EfEf2E6f866bA4AaeFDb87d2837C6a22b9c \
  --standard erc4626 \
  --block 111261045 \
  --runs 16 \
  --seed 0xbafcda8cf24059b4209e34d9c1bf22a8f74969d687db614c070e66203d7420e0

Same block, runs and seed. The CLI draws a fresh random sender each run; the seed also salts the 16-user pool.

Report JSON

reportHash 0xd42a27...9bee80 is keccak256 of the report's canonical JSON (RFC 8785), the value the registry stores.

Badge and API

The badge and the JSON read the registry when they are loaded, so they follow new attestations without a rebuild.

[![Specfirst ERC-4626 check](/badge/check/143/0x61b29efef2e6f866ba4aaefdb87d2837c6a22b9c.svg)](/v/143/0x61b29efef2e6f866ba4aaefdb87d2837c6a22b9c)

JSON API Badge SVG

Implementation

Proxy: eip1967
Implementation: 0x74420EF0Df3996d1DFcC1DD697c573aD655156A5
Implementation key: 0x0d4db7ea62f60e47034d78707cd94498f3869232cc2c3922735b2dcbc6e53152
Key from: Implementation behind the proxy: same compiler metadata and same code with immutables masked
Code hash: 0x864cc9ad53b338b82da1f7cab85ab0b3d5c8861acb422b6fec63cf36234f36a6
Code size: 170 bytes
Same key: No other vault on this board

Run

Block: 111,261,045, Monad mainnet
Seed: 0xbafcda8cf24059b4209e34d9c1bf22a8f74969d687db614c070e66203d7420e0
Sender: 0x3dD2554704E0E9EF66C1e25ED7C5Bdd2baa49d2A
Runs: 16 per property
Delta: 0 base units
Forge: forge Version: 1.5.1-Homebrew
forge-std: bf647bd6046f
Reject limit: 4096
Harness: 0xf5d1ee...8d0262
sf properties: 0x1d721e...dfa233
suiteHash: 0x67de68...c66d91
Started: 2026-10-07 07:12 UTC, 59 s
Report: schemaVersion 4