Order Id Generation will Override Existing Order in the Same Block

ProcureTokens Allows Users to Steal Leftover Allowances

Incorrect Logical Operator in PythOracle:currentValue

Malicious User can Poison Bracket.sol with Blacklisted Accounts

Attacker can make 0 value deposit() calls to deny user from redeeming or withdrawing collateral

Design flaw and mismanagement in vault licensing leads to double counting in collateral ratios and positions collateralized entirely with kerosine

Attacker can frontrun to prevent vaults from being removed from the dNFT owner's position

Since you can reroll with a different fighterType than the NFT you own, you can reroll bypassing maxRerollsAllowed and reroll attributes based on a different fighterType

Fighters cannot be minted after the initial generation due to uninitialized `numElements` mapping

FighterFarm:: reroll won't work for nft id greator than 255 due to input limited to uint8

Can mint NFT with the desired attributes by reverting transaction

Unauthorized Access to setCurves Function