Fees are incorrectly applied to the maker instead of the taker.

Users are able to mint tokens without spending any money.

Malicious users can obtain solo rewards by creating different pools.

MergeTgt has no handling if TGT_TO_EXCHANGE is exceeded during the exchange period

Improper Transfer Restrictions on Non-Bridged Tokens Due to Boolean Bridged Token Tracking, Allowing a DoS Attack Vector

Incorrect Logic in onlyOperator Modifier Leading to Denial-of-Service for Authorized Operators Across Critical Functions

There is no refund mechanism in `ChakraSettlement.processCrossChainCallback` or `ChakraSettlementHandler.receive_cross_chain_callback` function

Anyone can manipulate user nonce (nonce_manager) in settlement contract

The LockMint and BurnUnlock modes cannot be used

In Starknet already processed messages can be re-submitted and by anyone

Does not check if to_chain and to_handler is whitelisted in cross_chain_erc20_settlement

[H-01] Auction tokens will be lost forever when auction ends without bids

`mintToken()`, `mintWithBudget()`, and `forge()` in the `TraitForgeNft` Contract Will Fail Due to a Wrong Modifier Used in `EntropyGenerator.initializeAlphaIndices()`

The maximum number of generations is infinite

Wrong minting logic based on total token count across generations