Epoch can be settled after queueing withdrawals from EigenLayer

Execution Layer rewards are lost

RioLRTOperatorDelegator is unable to receive ether

Malicious user can stake an amount which causes zero curStakeAtRisk on a loss but equal rewardPoints to a fair user on a win

A locked fighter can be transferred; leads to game server unable to commit transactions, and unstoppable fighters

Since you can reroll with a different fighterType than the NFT you own, you can reroll bypassing maxRerollsAllowed and reroll attributes based on a different fighterType

Players have complete freedom to customize the fighter NFT when calling `redeemMintPass` and can redeem fighters of types Dendroid and with rare attributes

Fighters cannot be minted after the initial generation due to uninitialized `numElements` mapping

Non-transferable `GameItems` can be transferred with `GameItems::safeBatchTransferFrom(...)`

FighterFarm:: reroll won't work for nft id greator than 255 due to input limited to uint8

Erroneous probability calculation in physical attributes can lead to significant issues

Almost all rarity rank combinations cannot be, and are not uniformly, generated

Can mint NFT with the desired attributes by reverting transaction

DoS in `MergingPool::claimRewards` function and potential DoS in `RankedBattle::claimNRN` function if called after a significant amount of rounds passed.

Fighter created by mintFromMergingPool can have arbitrary weight and element

When borrowers repay USDS, it is sent to the wrong address, allowing anyone to burn Protocol Owned Liquidity and build bad debt for USDS

No proposal time limit traps sponsors of unpopular proposals

Suboptimal arbitrage implementation

User can claim many times the initialReleasePct of his vesting and drain the contract

It's not always possible to cancel a vesting

Once EntropyRateBps is set too high, can lead to denial-of-service (DoS) due to an invalid ETH amount

CultureIndex.sol#dropTopVotedPiece() - Malicious user can manipulate topVotedPiece to DoS the whole CultureIndex and AuctionHouse

It may be possible to DoS AuctionHouse by specifying malicious creators

Partial transfers are still possible, leading to incorrect storage updates, and the calculated account premiums will be significantly different from what they should be