removed observers are still able to vote

Refunds retry logic is flawed causing loss of funds

Ballot threshold logic fails to account for tombstoned observers

User is able to DOS and grief node by repeatedly calling deposit

Jailed validators are able to participate in voting

TON transactions risk being lost due to flawed transaction handling

Wrong postGasPrice() implementation can lead to loss of funds

SUI's recipient address remains insufficiently checked upon withdrawal causing DOS and Loss of Funds

User can drain TSS funds

User can reset the INDEFINITE_FUTURE mintTime

Axelar cross chain token transfers balance tracking logic is completely broken for rebasing tokens and the transfers of these type of tokens can be exploited

stale price can be prolonged

Updating depthtreelimit is ineffective

Incorrect withdraw queue balance in TVL calculation

Withdrawals logic allows MEV exploits of TVL changes and zero-slippage zero-fee swaps

Fetched price from the oracle is not stored in `xRenzoDeposit`

Deposits will always revert if the amount being deposited is less than the bufferToFill value

Price updating mechanism can break

retryMessage unable to handle edge cases.

Holders array can be manipulated by transferring or burning with amount 0, stealing rewards or bricking certain functions

Malicious users can prevent holders from claiming their rewards during a reward cycle by skipping it.

`LiquidInfrastructureERC20.sol` disapproved holders keep part of the supply, diluting approved holders revenue.