Public Token Transfer Function Lacks Access Controls

Unauthorized Workers Can Claim Deployment Tasks Due to Missing Validation

Attackers Can Extend Staking Periods Indefinitely

MergeTgt has no handling if TGT_TO_EXCHANGE is exceeded during the exchange period

Improper Transfer Restrictions on Non-Bridged Tokens Due to Boolean Bridged Token Tracking, Allowing a DoS Attack Vector

Lack of deadline check in forwarded request

Fee-on-Transfer Token Incompatibility in ManagedBudget Contract

ETH Balance Discrepancy in Raffle Refunds Causes Potential Fund Freezing

Malicious/Compromised organiser can reclaw all funds, stealing work from supporters

Centralization Risk for trusted organizers