`bytes data` param is not passed to ERC721 recipient as expected by EIP-721

_onTransferReceived() does not work as intended

Incorrect set up and logic of `referralInfoMap` in `SystemConfig::updateReferrerInfo` function

TokenManager - Unlimited withdraw

Native token withdrawal fails until manually approved

Incosistent message generation in TempleTeleporter.quote() and TempleTeleporter.teleport() results in inaccurate required fee calculation by TempleTeleporter.quote()

Users won't liquidate positions because the logic used to calculate the liquidator's profit is incorrect

Neither `sellCreditMarket‎()` nor `compensate‎()` checks whether the credit position to be sold is allowed for sale

Inadequate checks to confirm the correct status of the sequecnce/sequecncerUptimeFeed in `PriceFeed.getPrice()` contract.

hardcoding aave pool address is a serious aave integration flaw because valid pool addresses can change

Anyone can update the address of the Router in the DcntEth contract to any address they would like to set.

Protocol and referral fee would be permanently stuck in the Curves contract when selling a token

Missing slippage protection in `liquidity_lockbox::withdraw`

Since buyToken function has no slippage checking, users can get less tokens than expected when they buy tokens directly

ETHCrowdfundBase.sol#processContribution - Impossible to finalize crowdfund because of minContribution check

users still forced to follow previously set cooldownDuration even when cooldown is off (set to zero) before unstaking

when funding pool with a fee on transfer token, the strategy contract's tokenBalance is increased with wrong amount.

Rounding error in `WUSDA` can result in loss of user funds, especially when manipulated by an attacker

possible reeentrancy if rewardToken is ERC777 or execute arbitrary code on senders/receivers using hooks

`_getDiscountedPaymentAmount` doesn't work for tokens with more than 18 decimals

Incorrectly implemented modifiers in LybraConfigurator.sol allow any address to call functions that are supposed to be restricted

No check for Individual mint amount surpassing 10% when the circulation reaches 10_000_000 in mint() of LybraEUSDVaultBase contract

Invalid implementation of prioritized token rewards distribution

Multiple issues with decimal scaling will cause incorrect accounting of hTokens and underlying tokens

Residual ETH unreachable and unuitilized in SafEth.sol

Borrower can lose partial fund during minting of Power Token as excess ETH are not refunded automatically