Attack to make ````CurveSubject```` to be a ````HoneyPot````

onBalanceChange causes previously unclaimed rewards to be cleared

If a user sets their curve token symbol as the default one plus the next token counter instance it will render the whole default naming functionality obsolete

Withdrawals can be frozen by creating null deposits

Griefing attack on `liquidity_lockbox` withdrawals due to lack of minimum deposit

Auction winner can prevent payments via `safeTransferFrom` callback

Artist signatures can be forged to impersonate the artist behind a collection

The settle feature will be broken if attacker arbitrarily transfer collateral tokens to the PerpetualAtlanticVaultLP