You can open a terminal and execute the command below to find which app is still accessing it
lsof [path to the unlocked vault which you cannot lock] (ref)
You can find the path of the unlocked vault below the “Reveal Drive” button in Cryptomator.