[Sponsored Fees XLS-0068] XChainAddAccountCreateAttestation misroutes the submitter's sponsor onto a door-owned claim-ID

DexV2 settle fallback will lock funds for to_ (EOA) recipients

Users can avoid higher in-window fee at exact window start

jDola vault violates multiple ERC-4626 MUST requirements, breaking integration compatibility

Re-adding a previously removed reward token leads to incorrect userRewardPerTokenPaid values for some users, causing them to receive excess rewards at the expense of others

Low decimal rewards will not be distributed if _updateReward is called too often

Any user can starve emissions for a all tokens (economic DoS) by front-running distribution with a 1-wei stake and unstake

Owner calling collectFees() will revert on native ETH pair, DoS’ing fee collection

System underpays cashback on BNB: hardcoded “USDC = 6 decimals” causes 1e12× underpayment when USDC is 18-dec

Emissions back-dating when pool is empty leads to over-minting and misallocation on first stake/next accrual

Full-restricted stakers can still deposit via a clean receiver (policy bypass)

Liquidation stalls when top-of-book is outside divergence band (STANDARD & BACKSTOP), allowing under-margined positions to persist

User participation updates will incorrectly modify token allocation, leading to incorrect token distributions

RToken's transfer function lead to loss of funds due to incorrect math

Incorrect Logic in onlyOperator Modifier Leading to Denial-of-Service for Authorized Operators Across Critical Functions