NFT of NFT collection or NFT drop collection can be locked when calling _mint or mintCountTo function to mint it to a contract that does not support ERC721 protocol

Possible to bypass saleConfig.limitPerAccount

Proposal which started buyout which fails is able to settle migration as if its buyout succeeded.

Fund will be stuck if a buyout is started while there are pending migration proposals

Steal NFTs from a Vault, and ETH + Fractional tokens from users.

[PNM-001] The time constraint of selling fractions can be bypassed by directly transferring fraction tokens to the buyout contract

Cash-out from a successful buyout allows an attacker to drain Ether from the `Buyout` contract

```migrateFractions``` may be called more than once by the same user which may lead to loss of tokens for other users

Malicious Users Can Exploit Residual Allowance To Steal Assets

An attacker can DoS vault's buyout with as little as 1 wei per 4 days

Use of `payable.transfer()` may lock user funds

Migration total supply reduction can be used to remove minority shareholders

Zero strike call options will avoid paying system fee