Malicious users can withdraw more than their supplied collateral from debt-free normal positions

Full debts payback for normal borrow position reverts during liquidation

Removal of TokenID with active shares on Nexus Mutual Pool tranches will cause an accounting issues

Attacker will drain Morpho vault liquidity by exploiting price source mismatch between vault accounting and Morpho oracle

Time-based sanePrice protection weakens linearly over time to allow morpho stNXM/wNXM vault exploit

Protocol will witness DOS vulnerability due to incorrect use of wrong tickUpper in `collectFees()` and halt withdrawals and liquidations

Repayment could fail when withdrawals on leveraged positions are made with denomination token

NFTs Get Permanently Locked in Stability Pool After Liquidation

Critical Economic Design Flaw in ZENO Zero-Coupon Bond Implementation Leads to Guaranteed User Losses

[H-2] Lack of Emergency Pause in `BaseGauge::stake` and `BaseGauge::withdraw

Emergency revoke in RAACReleaseOrchestrator will freeze revoked RAAC tokens in orchestrator

Missing Liquidity Rebalancing in Repayments and Liquidations Leading to Inefficient Liquidity Management

Usage rate is increased even when no debt is present in `LendingPool`

Failure to update `lastClaimTime` mapping when users claim rewards in FeeCollector Causes Time-Based Reward Calculation Issues

balanceOf(address(this)) in StabilityPool causes reward distribution to be higher than it should be

Emergency Timelock Bypass: No Enforced 1-Day Delay for Emergency Actions

Treasury's allocated funds not tracked during withdrawals leads to accounting issue where recepient can receive more than allocated funds.

When borrowers repay USDS, it is sent to the wrong address, allowing anyone to burn Protocol Owned Liquidity and build bad debt for USDS

Impossible to change managed wallets with `proposeWallets` after first rejection

Unauthorized Access to setCurves Function

Curves::_buyCurvesToken(), Excess of Eth received is not refunded back to the user.