Hardcoded gas used in ERC20 queries allows for block production halt from infinite recursion

IOracle.queryExchangeRate returns incorrect blockTimeMs

Pre-defined limit is different from the spec.

Incorrect names provided in `RegisterConcrete` calls break LegacyAmino signing method

MsgSwapOrder will never work for Canto nodes

Govshuttle module does not register its transaction MsgServer

Attacker can make 0 value deposit() calls to deny user from redeeming or withdrawing collateral

Design flaw and mismanagement in vault licensing leads to double counting in collateral ratios and positions collateralized entirely with kerosine

Kerosene collateral is not being moved on liquidation, exposing liquidators to loss

User can get their Kerosene stuck because of an invalid check on withdraw

DoS on IG's mint and burn through FeeManager.trackVaultFee

Vault deposit DoS through totalDeposit inflation

Malicious liquidity provider can put pool into highly manipulatable state

[M09] No slippage check in `remove_liquidity` function in omnipool can lead to slippage losses during liquidity withdrawal.

The creation of bad debt (`mark-down` of Credit) can force other loans in auction to also create bad debt

Anyone can steal all distributed rewards

`totalBorrowedCredit` can revert, breaking gauges.

ProfitManager's "creditMultiplier" calculation does not count undistributed rewards; this can cause value losses to users

Rounding errors can cause ERC20RebaseDistributor transfers and mints to fail for underflow

Anyone can prolong the time for the rewards to get distributed

Single host can unfairly skip veto period for proposal that does not have full host support

ETHCrowdfundBase.sol#processContribution - Impossible to finalize crowdfund because of minContribution check

`PartyGovernanceNFT#rageQuit()` can lead to token loss for users when dealing with zero-balance ERC20 during a `rageQuit()`

PartyGovernanceNFT advertises but does not honor the ERC-4906 standard

PartyGovernanceNFT.sol#mint - User can delegate another user funds to themselves and brick them from changing the delegation

Lenders can escape the blacklisting of their accounts because they can move their MarketTokens to different accounts and gain the WithdrawOnly Role on any account they want

Borrower has no way to update `maxTotalSupply` of `market` or close market.

Borrower can drain all funds of a sanctioned lender

Function WildcatMarketController.setAnnualInterestBips allows for values outside the factory range

Array Length of `tickTracking_ ` Can be Purposely Increased to Brick Minting and Burning of Most Users' Liquidity Positions

Redeeming a Settlement won't work for unsigned messages when the communicating dApps have different addresses on the different chains

All tokens can be stolen from `VirtualAccount` due to missing access modifier

Incorrect source address decoding in RootBridgeAgent and BranchBridgeAgent's _requiresEndpoint breaks LayerZero communication

Message channels can be blocked resulting in DoS

If RootBridgeAgent.lzReceiveNonBlocking reverts internally, the native token sent by relayer to RootBridgeAgent is left in RootBridgeAgent

Users may be forced into long lock times to be able to undelegate back to themselves.

Delegated votes are locked when owner lock is expired

Incorrect Solidity version in FullMath.sol can cause permanent freezing of assets for arithmetic underflow-induced revert

V3Proxy swapTokensForExactETH does not send back to the caller the unused input tokens

TokenisableRange's incorrect accounting of non-reinvested fees in "deposit" exposes the fees to a flash-loan attack

User can steal refunded underlying tokens from `initRange` operation inside `RangeManager`

Incorrect boundaries check in GeVault's "getActiveTickIndex" can temporarily freeze assets due to Index out of bounds error

V3 Proxy does not send funds to the recipient, instead it sends to the msg.sender

Delegated amounts can be forcefully removed from anyone in the TwabController

`VaultFactory` allows deployment of vaults with non-authentic `TwabController` and `PrizePool`

Unintended or Malicious Use of Prize Winners' Hooks

Pre-defined limit is different from the spec.

Incorrect names provided in `RegisterConcrete` calls break LegacyAmino signing method

MsgSwapOrder will never work for Canto nodes

Govshuttle module does not register its transaction MsgServer