Skip to main content
Mellow vault contracts are audited by independent security firms and through public audit contests. Reports are grouped by architecture, most recent first.

Core Vaults

Core Vaults are Mellow’s current vault architecture. Reports cover the flexible-vaults codebase.

MixBytes, July 2026

SyncRedeemQueue security audit

Nethermind, June 2026

Custom hook audit (NM_0956)

Nethermind, May 2026

Core Vaults audit (NM_0930)

Nethermind, April 2026

Permissioned oracle audit (NM_0891)

Nethermind, January 2026

Core Vaults audit (NM_0812)

Nethermind, January 2026

Core Vaults audit (NM_0798)

Nethermind, December 2025

Core Vaults audit (NM_0758)

Nethermind, November 2025

Core Vaults audit (NM_0735)

Nethermind, November 2025

Core Vaults audit (NM_0703)

Nethermind, October 2025

Core Vaults audit (NM_0682)

Nethermind, September 2025

Deployment verification

Nethermind, August 2025

Core Vaults audit (NM0587)

Sherlock contest, August 2025

Public audit contest report

Earlier architectures

The vaults below are earlier generations of Mellow vault infrastructure, documented for existing deployments. Core Vaults are the current architecture for new deployments.

MultiVault

StateMind

Statemind Mellow Multi Vault Audit Report

ChainSecurity

ChainSecurity Mellow Multivault Audit

Interoperable Vault

Nethermind

Nethermind Mellow Interop Audit Report

Decurity

Decurity Mellow Interop Audit Report

Simple LRT and DVV

StateMind

StateMind Mellow LRT report with deployment

Sherlock contest

Sherlock Mellow Modular LRTs Audit Report

MixBytes

Mellow Finance Simple-LRT and DVV Vault Security Audit Report

ChainSecurity

ChainSecurity Mellow Finance Mellow LRT Audit