Lack of checks in `FluidLocker::provideLiquidity` allows staked amount to be provided as liquidity resulting in double-spending of FLUID amount.

Adding cross-chain borrow records with incorrect src & dst ids lowers overall debt of borrowers.

Incorrect applied interest to `borrowed` return value from `getHypotheticalAccountLiquidityCollateral` in `CoreRouter` results in unnecessary DoS and unnecessary liquidations.

Insurance Fee Deduction on incorrect redeem amount results in User redeeming more than intended and protocol insolvency

Mishandling of receiving HYPE in the StakingManager , lead to user can't confirm withdrawal and inflate the exchange ratio

Incorrect Balance Check in Validator Redelegation Process May Block Legitimate Rebalancing Operations

Lack of access control in `payWithERC20` results in unauthorized token transfers.

Unauthorized `BlueprintCore::submitDeploymentRequest` Calls Lead to Workflow Disruption

Multiple issues from unnecessary balance increase calculation in DebtToken.mint

Incorrect Return Values and Double Scaling in `RToken.burn` Function Leads to Denial of Service

LendingPool deposits do not work with CurveVault due to lack of funds

Liquidation Cannot Be Closed Even With Healthy Position Due To Strict Debt Check

`RToken::calculateDustAmount` are incorrectly calculated, leading to not be able to transfer the accrued dust amount

Adversary can win proposals with voting power as low as 4%

Incorrect sequence of AaveDIVAWrapper constructor parameters

LamboFactory can be permanently DoS-ed due to createPair call reversal

Minting zero tokens when underlyingToken is not Ether in cashIn()

Users can list assets with price < 1 ERC20 (ETH, WETH), leading to potential DoS vulnerability.