The buyer of a club could be frontrun by club owner, who transfers club's tokens and players before the trade executes

JUSDV1 - There is no mechanism for taking JUSD out of JUSDBank and refunding it with the JUSDExchange

A temporary issue shows in the staking functionality which leads to the users receiving less minted tokens.

An attacker can manipulate the preDepositvePrice to steal from other users.

Staking, unstaking and rebalanceToWeight can be sandwiched (Mainly rETH deposit )

Reth.sol: Withdrawals are unreliable and depend on excess RocketDepositPool balance which can brick the whole protocol

`WstEth` derivative assumes a ~1=1 peg of stETH to ETH

Users will be able to purchase fewer NFTs than the project had anticipated

Users can end up buying and paying for a different Tray than the one they were trying to acquire