Traders will buy synthetic-pool inventory materially below its correct ratio from LPs

Traders will buy low-priced assets below a correct fresh report from LPs

A fee-manager transition will freeze Chainlink updates for dependent pool users

Accrual suppression via bucket index resets allows zero-reward accruals for a chosen token bucket

Trades that have started before campaign, regardledless its ended or not yet.., these trades will claim for the period where campaign wasn't being active yet

Owner/gauge rate change can over/under-allocate rewards to all stakers due to missing index update at the mintrate-change

Idle-period reward back-capture when `totalStakedAmount == 0` lets stakers scoop emissions

xSUMR voting power remains inflated after vesting recall/goal negation

DOS to genuine redeemers becasue most of the `max redeem amount limit` in that period gets filled by DOSers

hashProposal uses wrong typeshash when hashing the encoded Proposal struct data

DOS to `withdrawProtectedListing`

Users can manipulate the `unlock price` and their `ProtectedListingHealth`

Manipulating collection token's total supply to manipulate `utilizationRate`

Native ETH royalty can never be claimed by anyone

All the royalties can be looted by anyone

Donation fees are sandwichable in one transaction

poolFee can never be set

`removeFeeExemption` will always revert due to wrong validation

Fees are burnt instead of deposited to uniswap implementation during unlocks

Refunding unused native tokens to user is wrong

Double fee charged on price modification of a liquid listing

Code doesn't implement what the spec from readme says regarding BUIDL redemption threshold

`RedemptionVaultWithBUIDL.redeemInstant` will always revert

Swap will revert if `fee0` or `fee1` is zero

`_redeemPT` uses 0 slippage

`_sellStakedUSDe` is prone to slippage and MEV

Withdrawal fee is charged but not collected, prone to MEV extraction

Wrong way of rounding when `expectedAmounts` calculation on withdrawal processing

PerAddressContinuousVestingMerkle.claim will always revert

Depositing `stETH` to puffer finance will revert due to wrong implementation of `PufETHAdapter._stake` call

Missing stake limit validation on `RenzoAdapter._stake`

Less rsETH minted than intended in volatile conditions. due to zero slippage when staking ETH to mint rsETH

Slippage on `MetapoolRouter.addLiquidityOneETHKeepYt`

`swapETHForYt` will revert even if contract has enough ETH to repay flashloan and refund remaining to user

Vestable ZVE amounts can be inflated or deflated to any victim despositor

`ZivoeRewards` lacks reward rate and balance check on `depositReward()`

A revoked vesting recipient can still vote with checkpoints worth `vestingAmount

wrong `_totalSupply` accounting causing DOS on `ZivoeRewardsVesting.withdraw` and `ZivoeRewardsVesting.revokeVestingSchedule`

`OCY_Convex_C.claimRewards` will revert if extra rewards > 0

ZivoeRewards.sol does Inefficient reward distribution

Interest payments can be skipped for at least one interval.

`pushToLockerMulti` which adds liquidity to pool will fail 90% of the time due to strict allowance check

Yield calculations are accounted by reading the stale ema supply amounts

Price of a base token can be inflated by swapping same base tokens, leading to slippage reverts causing DOS to Woo system