Try replacing
Code:
var %addr = $address($nvnick($chan,%a),5)
with
Code:
var %addr = $+($nick,*!*@*.*)
I just back checked the previous posts and realized that the format you're reporting for the addresses in the protect list don't match the format returned by $address(<nick>,5)