Pausing and resuming gauge deletes its' rewards

Voting for pool once and not calling `poke` will keep undecayed vote weight in subsequent weeks

Malicious first liquidity provider can DoS a stable pair pool

Users won't liquidate positions because the logic used to calculate the liquidator's profit is incorrect

The collateral remainder cap is incorrectly calculated during liquidation

Permisionless `depositReward` allows substantial grief of `rewardRate`

Revoking a vesting schedule after funds have been withdrawn breaks LP totalSupply accounting

Splitting ITO into 2 or more airdrops is more profitable

Splitting deposits in `ZivoeTranches` is more profitable than depositing all at once

`OCL_ZVE.pushToLockerMulti` will always revert

`OCE_ZVE.forwardEmissions()` will forward freshly deposited balance alongside decayed one

Highest bidder can cancel bid through `_cancelAllBids`

`Vesting.sol` can be drained due to reentrancy

`Vesting.sol` not compatible with nativeETH

Blacklisted users can still call `claim`

Repayments and liquidations can be forced to revert by an attacker that repays miniscule amount of shares