Sandwich attack to steal all ERC-20 tokens in the Fees contract

During refinance() new Pool balance debt is subtracted twice

[H-04] Lender#buyLoan - Malicious user could take over a loan for free without having a pool because of wrong access control

Using forged/fake lending pools to steal any loan opening for auction

Attacker can steal a loan's collateral and break the protocol

The `borrow` and `refinance` functions can be front-run by the pool lender to set high interest rates

`liquidate` does not allow the liquidator to liquidate a user if the liquidator HF < 1

`DSCEngine` should deploy its own `DecentralizedStableCoin`

Unnesessery argument in getTimeout function

`tokenContract`is always an unsafe input, for fairness, it is recommended to add a whitelist for token

can mint infinite vote tokens through signature and proof replay