<!-- canonical: https://0xsimao.com/findings/yieldoor-iii-looped-mint-redeem-overriden -->

# LoopedVault::maxMint() and LoopedVault::maxRedeem() are not overriden

Low/Info · 0xSimao · Leveraged yield farming · 23rd June 2025

Finding L-6 of the Yieldoor LoopedVault Update security review.

- Protocol: https://app.yieldoor.com/
- Report: /reports/yieldoor-iii
- Source: https://github.com/0xSimao/audits/blob/main/0xSimao/2025-06-23-yieldoor-iii.pdf

---

**Description:**

`LoopedVault::maxMint()` is [not overriden](https://github.com/spacegliderrrr/loopedVault/blob/master/src/LoopedVaultV1_1.sol#L105) and does not comply with `ERC4626` as there is a deposit cap. `LoopedVault::maxRedeem()` is also not overriden, though this functionality has been removed and is now 2 step, which means that it has no impact.

**Recommended Mitigation:**

Consider overriding maxMint().

**0xSimao:**

Fixed in [#2a378db](https://github.com/spacegliderrrr/loopedVault/commit/2a378db6c6356887fd029685cc947e4eaa2270b3).

---

Related findings:

- [`PreDepositVault::maxDeposit/Mint()` are missing `maxDepositLimit` as per the ERC4626 spec](https://0xsimao.com/findings/gaib-deposit-mint-erc4626-spec): GAIB Pre-Vaults
- [Incorrect `ERC4626ExceededMaxRedeem` event on `ManagedLeveragedVault.sol:: cancelWithdrawalIntent()`](https://0xsimao.com/findings/beraborrow-i-erc4626-exceeded-redeem-withdrawal): Beraborrow Managed Dens
- [YieldVault maxRedeem(...) unnecessarily converts shares to assets and back to shares again](https://0xsimao.com/findings/fuji-finance-yield-redeem-converts-shares): Fuji Finance
- [Missing `maxRedeem()` implementation](https://0xsimao.com/findings/aegis-missing-max-redeem-implementation): Aegis Staked YUSD
