Subtraction in `variance()` will revert due to underflow

[H-01] Auction tokens will be lost forever when auction ends without bids

A malicious User can DOS all offchain orders making them unexecutable and leaving the protocol in an insolvent state. Also all offchain Trades can also be DOSed for honest parties that do not meet the fillorder requirements (no try and catch)

The overflow in the `_calculateStreamedAmount` function can lead to unexpected results.

Missing the `lookback` parameter when invoking the `getWstethUsdPrice()` in the `getTokenPrice` function

Single-step process for critical ownership transfer is risky

Zero address leads to transaction reverts

Multiple accesses of a mapping/array should use a local variable cache.

The `for loops` inside the borrow(), repay(), giveLoan() & startAuction() functions in Lender contract are probably gas-guzzlers

Use of magic numbers

For the borrow(), repay() & startAuction() functions in Lender.sol the public visibility modifiers should be changed to external, to help optimize gas usage

Use assembly to check for `address(0)`

NatSpec documentation for function is missing

Large multiples of ten should use scientific notation

Constants in comparisons should appear on the left side

Floating pragma in all contracts

Conformance to Solidity naming conventions

[L-06] Some imported libraries are not used

No use of Ownable in Staking contract.

Pragma isn't specified correctly which can lead to nonfunction/damaged contract when deployed on Arbitrum

Constants should be be used for hardcoded values

[I-1] NatSpec `@param` is missing

NatSpec `@return` argument is missing

[I-4] Constants in comparisons should appear on the left side

[I-10] Functions not used internally could be marked external

Use `assembly` to check for `address(0)`

Use assembly to check for `address(0)`

NatSpec `@param` is missing

NatSpec `@return` argument is missing

Constants in comparisons should appear on the left side

StakedCitadel: wrong setupVesting function name

Funding.deposit() doesn't work if there is no discount set