Malicious actor can `claimRefund` to steal the other users' refunds.

`onCall` function has missing fee deduction update prior swap.

Liquidation type 1 can cause loss of funds to admin due to wrong address ether recipient.

DOS on liquidation type 1 due to underflow in cds profits computation

Withdrawal of funds can be DOSed due to large accrued treasury shares

Withdrawals logic allows MEV exploits of TVL changes and zero-slippage zero-fee swaps

Lack of slippage and deadline during withdraw and deposit

`executeWithdraw` may be blocked if any of the users are blacklisted from the `baseToken`

`depositQueue.queue` in `AccountingManager` can be flooded causing a DoS

No incentive to liquidate small positions could result in protocol going underwater

Owner of a position can prevent liquidation due to the 'onERC721Received' callback

Violation of ERC-721 Standard in VerbsToken:tokenURI Implementation

Bidder can use donations to get VerbsToken from auction that already ended.

Auction winner can prevent payments via `safeTransferFrom` callback

No checking for status of L2 sequencer on whether it is active or not

Chainlink's latestRoundData return stale or incorrect result

Use of Deprecated Chainlink Function: latestAnswer()

Calling `ExpiringMarket.stop` and `ExpiringMarket.isClosed` functions cannot pause any functionlities of the market