D3 liquidation penalty weighting uses manipulable DEX pool price, enabling excess collateral seizure

Remaining tokens are not refunded to the user in the decomposeAndMint flow

Incorrect use of constant taker vault id in admin balance transfer

Incorrect unpaid X split in the view walker causes the wrong fee calculation in the queryAssetBalances()

Burnasset() function forces JIT penalty by resetting asset timestamp during fee collection

JIT penalties accumulate as unaccounted funds and are not withdrawable

Only 16 positions can be minted by the NFTMananger contract