QVSimpleStrategy contract will not receive nor distribute ETH because it lacks a `receive()` function

Fee-On-Transfer tokens are not supported by Allo contract

If a winner is blacklisted on any of the tokens they can't receive their funds

Potential DOS due to Gas Exhaustion Due to Large Array Iteration in `_distribute` Function

NatSpec `@param` is missing

Incorrect internal accounting when calling `_poolRepayAll`

D3Oracle will return the wrong price if the Chainlink aggregator returns price outside min/max range

Chainlink oracle return values are not handled properly

No secondary price oracle and no check for L2 sequencer uptime feed and grace period

Using wrong oracle address will cause the protocol to buy wrong amount of collateral and mint wrong amount of USSD token

Oracle will return too expensive price of DAI because of excessive precision scaling

Precision loss can cause protocol to sell no collateral and leaving it unable to rebalance to peg

Not using slippage parameter or deadline while swapping on UniswapV3

Chainlink oracle return values are not handled properly

Use `SafeERC20` functions where applicable

Re-org attack in factory