Failure to Update Dirty Flag in transferToUnoccupiedPlot Prevents Reward Accumulation On Valid Plot

in `farmPlots()` an underflow in edge case leading to freeze of funds (NFT)

Vaults can become immune from liquidation by setting `vault.recipient` to a blacklisted quote token address

Chainlink's `latestRoundData` might return stale or incorrect results

`executeWithdraw` may be blocked if any of the users are blacklisted from the `baseToken`

The total deposit amount limit in `AccountingManager.sol` can be bypassed

Attacker can increase the length of `withdrawQueue` by withdrawing 0 amount of tokens frequently

Incorrect modifier condition

`depositQueue.queue` in `AccountingManager` can be flooded causing a DoS

Dust donation might DOS all connectors to create new holding positions, by preventing removing existing holding positions

Attacker can make 0 value deposit() calls to deny user from redeeming or withdrawing collateral

User can get their Kerosene stuck because of an invalid check on withdraw

Value of kerosene can be manipulated to force liquidate users

Incorrect Accounting in `ZivoeVesting` can damage internal accounting of protocol

Malicious user can continuously extend the finish period of a reward token and cause reward dilution for other legit users of the Zivoe reward system.

Freezed Chain will never be unfreeze since `StateTransitionManager::unfreezeChain` is calling `freezeDiamond` instead of `unfreezeDiamond`.

Malicious user can stake an amount which causes zero curStakeAtRisk on a loss but equal rewardPoints to a fair user on a win

Creation of token whitelisting proposals can be DOS'd