Liquidator Can Be Sandwiched or Self Sandwich To Capture `tokenDifferenceFromLiquidations`

First Depositor Attack Still Works With Some Adjustments

New AMM Formula Means Splitting Order's Gives Better Prices And Vice Versa

When Chainlink Price is 0, Woofi Pool No Longer Has Price Bound Manipulation Safeguards

Share Inflation For Base LST Adapter

Utilisation Can Be Manipulated Far Above 100%

First Depositor Can Inflate Share Value to Cause Extreme Rounding Loss And Prohibitively Expensive Mints

`adjustPrice` Can by Sandwiched For Profit

IV Can be Decreased for Free

Uniswap Formula Drastically Underestimates Volatilty

Uniswap Aggregated Fees Can be Increased at Close to Zero Cost

Malicious lender can use Callbacks to create Loan that cannot be repaid

Lender Loses Collateral from Paritailly Repaid Loans that are Defaulted if repayDirect == true

When borrower rolls their loan the lender can frontrun the transaction and change the interest and duration to drain all of borrower's approved tokens

RollLoan can be called on someone else's loan giving them worse conditions or defaulting them in 1 block

Tokens with less than 18 decimals allow for draining of funds

Borrower can use Refinance to cancel auctions so they can extend their loan indefinitely

[H-04] Lender#buyLoan - Malicious user could take over a loan for free without having a pool because of wrong access control

Attacker can steal a loan's collateral and break the protocol

Fee on transfer tokens will cause users to lose funds

Rewards can be sabotaged by large deposit and withdraw

Forcing a borrower to pay a huge debt via the giveLoan()

WETH staking rewards accumulated before the first staker deposits remain unutilized and stuck in the `Staking` contract

The `borrow` and `refinance` functions can be front-run by the pool lender to set high interest rates

Malicious lender can increment the loan interest using the auction process

Fixed fee level is used when swap tokens on Uniswap

Borrower can put up a loan which is immediately "insolvent" which can immediately be auctioned off.

Users Can Bypass the Delayed Withdrawal

First Depositor Can Break Minting of Shares

Users That Deposit Into Ichi Spell Can be Unfairly Liquidated by Attacker

Permanent freezing of funds: Roll can be called infinite times without extra payment, extending the loan duration to infinity.