Pending bucket rewards can be reset to 0 via stake/unstake every block (lastRewardIndex reset without checkpoint)

Cashback rewards can be claimed retroactively before program deployment leading to a loss of yield/funds

Inflated emissions can be captured by staker after idle periods

Retroactive mint rate increase mints past emissions at new rate

Loss of yield trough severely reduced USDC cashback payouts on BNB

Unsafe ERC20 leftover forwarding to mutable fee treasury

Zero-supply windfall condition in RewardAccumulator

DOS in DineroWithdrawRequestManager can block withdrawals

Different Token Decimals on different chains are not accounted for when borrowing or repaying across chains, leading to a loss of funds for the protocol and users

Incorrect if clause in LendStorage::borrowWithInterest leads to cross chain borrows not being added to the borrowed amount which breaks the liquidation and LEND distribution system