tokenRecipient mapping maps invalid baseTokenId to founder info

Possible arbitrage from Chainlink price discrepancy

Protocol mints less rsETH on deposit than intended

Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime

Vulnerability in burnToMint function allowing double use of NFT

Auction winner can prevent payments via `safeTransferFrom` callback

Borrower has no way to update `maxTotalSupply` of `market` or close market.

Blocked accounts keep earning interest contrary to the WhitePaper

The settle feature will be broken if attacker arbitrarily transfer collateral tokens to the PerpetualAtlanticVaultLP

Improper precision of strike price calculation can result in broken protocol

Incorrect precision assumed from RdpxPriceOracle creates multiple issues related to value inflation/deflation

Sandwich attack to steal all ERC-20 tokens in the Fees contract

During refinance() new Pool balance debt is subtracted twice

[H-04] Lender#buyLoan - Malicious user could take over a loan for free without having a pool because of wrong access control

Forcing a borrower to pay a huge debt via the giveLoan()

Lender can Sandwich a borrower to seize his collateral

The `borrow` and `refinance` functions can be front-run by the pool lender to set high interest rates

Fixed fee level is used when swap tokens on Uniswap

Interest calculation error if L2 sequencer go down

Theft of collateral tokens with fewer than 18 decimals

staleCheckLatestRoundData() does not check the status of the Arbitrum sequencer in Chainlink feeds.

SetTotal revert due to allowance being set from non-zero value to non-zero value

Funds can be drained from FixedStrikeOptionTeller

PartyA can deny liquidations

PartyA and PartyB can collude together to get funds out of a suspended account

Charged trading fee and returned trading fee may be different for a quote

Invalid symbol can be used in a open quote

Quote value can be less than minAcceptableQuoteValue

`Swap` function exposes users to unlimited slippage

MarginTrading could be drained of funds by malicious user

It is possible to steal the unallocated part of every delegation period budget

function `restructureCapTable()` in Equity.sol not functioning as expected