Inability to Add Liquidity When More Than Half of Initial Tokens Have Unlocked Due to redundant Check

Incorrect Logic in onlyOperator Modifier Leading to Denial-of-Service for Authorized Operators Across Critical Functions

Excessive Buy PID Adjustment Due to Double Fee Application in `buyNoMax`

Non-Unique Order ID Generation in `generateOrderId` Function

Allowance Not Decreased in `approveRequest()` Function in `DepositVault` and` RedemptionVaul` Contracts

Indefinite Locking of Future ETH Due to `_lockedETH` Not Updated in `refundPlayers` Function in `WinnablesTicketManager` Contract

Inconsistent Role Management in `_setRole` Function Due to Ignored `status` Parameter

Debt position interest is compounded while pool interest is simple causing inconsistency b/w `expectedLiquidity_` and `availableLiquidity_`

`PoolV3#repayCreditAccount()` use incorrect share converting function to calculate profit and loss

WhenNotPaused modifier in the CDPVault can be bypassed by users

Malicious actor can abuse the minimum shares check in `StakingLPEth` and cause DoS or locked funds for the last user that withdraws

REDEMPTION_VAULT_ADMIN_ROLE and DEPOSIT_VAULT_ADMIN_ROLE allows Pausing and Unpausing of `DepositVault` and `RedemptionVault` Contract

Missing Initialization of OwnableUpgradeable in `LenderCommitmentGroup_Smart` Contract

Malicious actor can reduce reward rate potentially preventing users from ever getting full reward in the ZivoeRewards contract.

`_totalSupply` parameter wrongly updated in `revokeVestingSchedule` function causing loss of reward for users with vesting schedule in `ZivoeRewardsVesting`

`_writeCheckpoint` wrongly updated in the `revokeVestingSchedule` function causing incorrect management of voting power.

The protocol will encounter pesisitent reverting when interacting with Uniswap due to failure to reduce the allowance left before the assert statement ensuring zero allowance

Receiver will be unable to claim redeem when address of `owner` and `receiver` are different in `requestredeem`

Any fee claim lesser than the total `yieldFeeBalance` as unit of shares is lost and locked in the `PrizeVault` contract

`PrizeVault.maxDeposit()` doesn't take into account produced fees