Payment::payWithERC20 can be used to carry griefing attacks or steal funds

ZENO Token Redemption Returns Negligible USDC Amount Compared to Purchase Price

Multiple issues from unnecessary balance increase calculation in DebtToken.mint

RToken's transfer function lead to loss of funds due to incorrect math

Users can borrow more assets than they have deposited as collateral

veRaac Token Constraint MAX_TOTAL_SUPPLY Can Be Bypassed. Vulnerability Disrupts Protocol Functionality and Undermines Governance Quorum.

`RToken::calculateDustAmount` are incorrectly calculated, leading to not be able to transfer the accrued dust amount

Multiple Token Management Lets Withdraw a Token Different than Deposited Token

Unauthorized Vote Casting Vulnerability

Missing Checkpoint Reset in `veRAACToken::emergencyWithdraw` Function

`FeeCollector::updateFeeType` wrong fee share validation leads to impossible update for some fee types

Multiple Vesting Schedules Can’t Be Created for Beneficiaries in Different Categories

Incorrect Logic in onlyOperator Modifier Leading to Denial-of-Service for Authorized Operators Across Critical Functions

Ineffective proposal threshold validation allows setting arbitrary high values

Incorrect sequence of AaveDIVAWrapper constructor parameters

`SecondSwap_Marketplace` vesting listing order affects how much the vesting buyers can claim at a given step

Minting zero tokens when underlyingToken is not Ether in cashIn()