Old router retains token allowance after update

Typehash for ModuleEnableMode struct is incorrect

Not Update Rewards in `handleIncomingUpdate` Function of `SDLPoolPrimary` Leads to Incorrect Reward Calculations

Attacker can exploit lock update logic on secondary chains to increase the amount of rewards sent to a specific secondary chain

Insufficient Gas Limit Specification for Cross-Chain Transfers in _buildCCIPMessage() method. WrappedTokenBridge.sol #210

Lender contract can be drained by re-entrancy in `setPool`

Zero address leads to transaction reverts

Use of magic numbers

For the borrow(), repay() & startAuction() functions in Lender.sol the public visibility modifiers should be changed to external, to help optimize gas usage

Don't initialize `uint/int` variables with default value