`_voteSucceeded()` returns true when `againstVotes > forVotes` and vice versa

Due to inappropriately short `votingPeriod` and `votingDelay`, it is near impossible for the governance to function correctly.

Incorrect function call in LybraRETHVault's getAssetPrice

Understatement of `poolTotalPeUSDCirculation` amounts due to incorrect accounting after function `_repay` is called

The EUSDMiningIncentives contract is incorrectly implemented and can allow for more than the intended amount of rewards to be minted

Claiming accumulated rewards while the contract is underfunded can lead to a loss of rewards

The voting thresholds in Ajna's Extraordinary Funding Mechanism can be manipulated to execute proposals below the expected threshold.

Potential unfair distribution of Rewards due to MEV in updateBucketExchangeRatesAndClaim

It is possible to steal the unallocated part of every delegation period budget

A malicious strategy can permanently DoS all currently pending withdrawals that contain it

Reward accounting is incorrect in BathBuddy contract

BathBuddy contract should implement methods to pause and unpause contract

Incorrect fee handling in Position.sol's Market Buy/Sell functions

Zero reward rate calculation impedes low-decimals token distributions

Potential infinite loop in `_borrowLimit` function

The return value of buyAllAmount is incorrect

Incorrect reward duration extension in notifyRewardAmount function

An attacker can manipulate the preDepositvePrice to steal from other users.

Staking, unstaking and rebalanceToWeight can be sandwiched (Mainly rETH deposit )

Users can fail to unstake and lose their deserved ETH because malfunctioning or untrusted derivative cannot be removed

DoS due to external call failure

Vault will be practically unuseable if collateral token decimals != 18

Vaults can mint unlimit amount of tokens

Malicious depositor can inflate the shares and steal money from other lenders.

Possible race condition when using the approve functionality

Protocol fees can be withdrawn multiple times in `Erc20Quest`