Spec mismatch

0x79b0D94d84D1EE1021E0077E6cD36091e28276c5

0x79b0D94d84D1EE1021E0077E6cD36091e28276c5Monad mainnet

2 of 30 properties failed at block 111,193,713. The vault's behavior contradicts an EIP-4626 MUST sentence.

Found by the watcher at its first Deposit event in block 110,981,283, 2026-10-06 16:51 UTC. No factory the watcher follows announced it. It was not on the hand-made list the board started from.

Request a re-checkRuns the same 30 properties at the latest block and attests the new report.

What failed

sf-maxWithdraw-honoredEIP-4626 MUST
maxWithdraw was 948,377,805,652,677,803,591,669, but withdraw(1,719) reverted with 0x23c85ecd.
EIP-4626: maxWithdraw MUST return the maximum amount of assets withdraw accepts without reverting, and 0 while withdrawals are disabled.
Counterexample: test_sf_maxWithdraw_honored(23591211398699137692442106053138452891147, 9307740202017086815948377805652677803591669, 1719)
sf-maxRedeem-honoredEIP-4626 MUST
maxRedeem was 948,377,805,652,677,803,591,669, but redeem(1,719) reverted with 0x23c85ecd.
EIP-4626: maxRedeem MUST return the maximum amount of shares redeem accepts without reverting, and 0 while redemptions are disabled.
Counterexample: test_sf_maxRedeem_honored(23591211398699137692442106053138452891147, 9307740202017086815948377805652677803591669, 1719)

A spec mismatch is a disagreement with an EIP-4626 MUST sentence, shown by a concrete call. It is not a claim that funds are at risk.

What the watcher saw

Every event the watcher recorded for this vault, newest first. Each check is a statement about one block; a re-check with the same outcome is recorded here without a new attestation.

01:36:3610-07First result
Spec mismatch
16 pass, 2 fail, 12 inconclusive, 0 not applicable.
Now failing: sf-maxRedeem-honored, sf-maxWithdraw-honored
01:36:3610-07Checked
Spec mismatch
16 pass, 2 fail, 12 inconclusive, 0 not applicable at block 111,193,713, 3 min. Report
Why: first Deposit event from an unknown address.
19:46:0310-06Queued
Waiting for a check: first Deposit event from an unknown address.
19:46:0310-06Checked
Spec mismatch
16 pass, 2 fail, 12 inconclusive, 0 not applicable at block 111,123,284, 7 min. Report
Why: first Deposit event from an unknown address.
16:51:3410-06Queued
Waiting for a check: first Deposit event from an unknown address.
16:51:3310-06Found
First Deposit event from an unknown address in block 110,981,283 tx 0xc89d15...aa4b8c

JSON: this vault's history

All 30 properties

In report order. Bit i is the bit the registry's passedBitmap and failedBitmap use for that property.

Bit	Property	Result	What was found
a16z/erc4626-tests at ac48546, 26 properties: 16 on EIP-4626 MUST sentences, 10 on SHOULD guidance (the round trips and the allowance checks)
0	`asset`test_assetEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: asset() does not revert
1	`totalAssets`test_totalAssetsEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: totalAssets() does not revert
2	`convertToShares`test_convertToSharesEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: convertToShares gives the same result for any caller
3	`convertToAssets`test_convertToAssetsEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: convertToAssets gives the same result for any caller
4	`maxDeposit`test_maxDepositEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: maxDeposit does not revert
5	`previewDeposit`test_previewDepositEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: deposit mints at least the shares previewDeposit quoted
6	`deposit`test_depositEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: deposit moves assets from the caller, credits shares to the receiver and spends allowance
7	`maxMint`test_maxMintEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: maxMint does not revert
8	`previewMint`test_previewMintEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: mint pulls at most the assets previewMint quoted
9	`mint`test_mintEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: mint moves assets from the caller, credits shares to the receiver and spends allowance
10	`maxWithdraw`test_maxWithdrawEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: maxWithdraw does not revert
11	`previewWithdraw`test_previewWithdrawEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: withdraw burns at most the shares previewWithdraw quoted Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
12	`withdraw`test_withdrawEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: withdraw burns owner shares, pays the receiver and spends share allowance Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
13	`withdraw-zero-allowance`test_withdraw_zero_allowanceEIP-4626 SHOULD	Pass	No counterexample in 16 fuzz runs at this block. Checks: withdraw on behalf of an owner without allowance reverts
14	`maxRedeem`test_maxRedeemEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: maxRedeem does not revert
15	`previewRedeem`test_previewRedeemEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: redeem pays at least the assets previewRedeem quoted Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
16	`redeem`test_redeemEIP-4626 MUST	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: redeem burns owner shares, pays the receiver and spends share allowance Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
17	`redeem-zero-allowance`test_redeem_zero_allowanceEIP-4626 SHOULD	Pass	No counterexample in 16 fuzz runs at this block. Checks: redeem on behalf of an owner without allowance reverts
18	`RT-deposit-redeem`test_RT_deposit_redeemEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: redeem(deposit(a)) returns no more than a Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
19	`RT-deposit-withdraw`test_RT_deposit_withdrawEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: withdraw(a) burns at least the shares deposit(a) minted Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
20	`RT-redeem-deposit`test_RT_redeem_depositEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: deposit(redeem(s)) mints no more than s Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
21	`RT-redeem-mint`test_RT_redeem_mintEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: mint(s) costs at least the assets redeem(s) paid Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
22	`RT-mint-withdraw`test_RT_mint_withdrawEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: withdraw(mint(s)) burns at least s shares Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
23	`RT-mint-redeem`test_RT_mint_redeemEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: redeem(s) pays no more than mint(s) cost Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
24	`RT-withdraw-mint`test_RT_withdraw_mintEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: mint(withdraw(a)) costs at least a Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
25	`RT-withdraw-deposit`test_RT_withdraw_depositEIP-4626 SHOULD	Inconclusive	Never exercised: the vault rejected nearly every amount the fuzzer tried, and forge gave up after 4096 discarded inputs. Checks: deposit(a) mints no more than the shares withdraw(a) burned Raw result reason: `vm.assume` rejected too many inputs (4096 allowed) runs: 0
Specfirst max-honored properties, MIT, each on one EIP-4626 MUST sentence about a max function
26	`sf-maxDeposit-honored`test_sf_maxDeposit_honoredEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: deposit does not revert for amounts up to maxDeposit (EIP-4626: maxDeposit is the most deposit accepts without reverting)
27	`sf-maxMint-honored`test_sf_maxMint_honoredEIP-4626 MUST	Pass	No counterexample in 16 fuzz runs at this block. Checks: mint does not revert for shares up to maxMint (EIP-4626: maxMint is the most mint accepts without reverting)
28	`sf-maxWithdraw-honored`test_sf_maxWithdraw_honoredEIP-4626 MUST	Fail	maxWithdraw was 948,377,805,652,677,803,591,669, but withdraw(1,719) reverted with 0x23c85ecd. EIP-4626: maxWithdraw MUST return the maximum amount of assets withdraw accepts without reverting, and 0 while withdrawals are disabled. Checks: withdraw does not revert for assets up to maxWithdraw (EIP-4626: maxWithdraw MUST return 0 when withdrawals are disabled) Raw result reason: withdraw(1719) reverted with selector 0x23c85ecd while maxWithdraw is 948377805652677803591669 runs: 0 call: test_sf_maxWithdraw_honored(23591211398699137692442106053138452891147, 9307740202017086815948377805652677803591669, 1719) calldata: 0x72b950e200000000000000000000000000000045540e0bb3cf1181ed6b6eac2768f4c60b00000000000000000000000000006ad8fd74f6d33d051a19c7797951329747f500000000000000000000000000000000000000000000000000000000000006b7
29	`sf-maxRedeem-honored`test_sf_maxRedeem_honoredEIP-4626 MUST	Fail	maxRedeem was 948,377,805,652,677,803,591,669, but redeem(1,719) reverted with 0x23c85ecd. EIP-4626: maxRedeem MUST return the maximum amount of shares redeem accepts without reverting, and 0 while redemptions are disabled. Checks: redeem does not revert for shares up to maxRedeem (EIP-4626: maxRedeem MUST return 0 when redemptions are disabled) Raw result reason: redeem(1719) reverted with selector 0x23c85ecd while maxRedeem is 948377805652677803591669 runs: 0 call: test_sf_maxRedeem_honored(23591211398699137692442106053138452891147, 9307740202017086815948377805652677803591669, 1719) calldata: 0x942509aa00000000000000000000000000000045540e0bb3cf1181ed6b6eac2768f4c60b00000000000000000000000000006ad8fd74f6d33d051a19c7797951329747f500000000000000000000000000000000000000000000000000000000000006b7

Onchain attestation

Not attested yet.

CheckAttestationRegistry 0x3754...daF7 on Monad testnet holds no erc4626 attestation for this vault as of 2026-10-08.

Watch this vault

Pay per day for an alert when this vault's result changes, in your inbox and at your webhook if you register one, and for a shorter re-check cadence (the watcher's default is every 60 minutes for subscribed vaults, at most once a day for the rest). Every result stays public either way; a subscription buys delivery and freshness.

Reading the fee.

No wallet extension found in this browser. Install MetaMask or Rabby, or switch to the testnet burner above.

Connect a wallet first.

Replay this check

specfirst check 0x79b0D94d84D1EE1021E0077E6cD36091e28276c5 \
  --standard erc4626 \
  --block 111193713 \
  --runs 16 \
  --seed 0x68d74f241381fd3e8f7d35cd499372a4191ffb866d75856d1da1b7d2ab751184

Same block, runs and seed. The CLI draws a fresh random sender each run; the seed also salts the 16-user pool.

Report JSON

reportHash 0x1153d3...096923 is keccak256 of the report's canonical JSON (RFC 8785), the value the registry stores.

Badge and API

The badge and the JSON read the registry when they are loaded, so they follow new attestations without a rebuild.

[![Specfirst ERC-4626 check](/badge/check/143/0x79b0d94d84d1ee1021e0077e6cd36091e28276c5.svg)](/v/143/0x79b0d94d84d1ee1021e0077e6cd36091e28276c5)

JSON API Badge SVG

Implementation

Proxy: eip1967
Implementation: 0x803190A1ea9606C9E49bF889Cc4745Cb38524a83
Implementation key: 0x5f49b048756b9cbeea9802cd1804414a49f877a40998cb9846b1cb439c156f57
Key from: Implementation behind the proxy: same compiler metadata and same code with immutables masked
Code hash: 0x17e207dc61e649fcb1bdd4309a068055936fd826c02942e22ec006d5440414ac
Code size: 163 bytes
Same key: No other vault on this board

Run

Block: 111,193,713, Monad mainnet
Seed: 0x68d74f241381fd3e8f7d35cd499372a4191ffb866d75856d1da1b7d2ab751184
Sender: 0x505C9c59216F77Aae2aFEC659aB7D811Af0dDb4d
Runs: 16 per property
Delta: 0 base units
Forge: forge Version: 1.5.1-Homebrew
forge-std: bf647bd6046f
Reject limit: 4096
Harness: 0x5b48d4...a08890
sf properties: 0x612e00...26991e
suiteHash: 0xc4ee5c...1a6c0d
Started: 2026-10-07 01:33 UTC, 198 s
Report: schemaVersion 3