A user can steal an already transfered and bridged reSDL lock because of approval

Not Update Rewards in `handleIncomingUpdate` Function of `SDLPoolPrimary` Leads to Incorrect Reward Calculations

A user can lose funds in `sdlPoolSecondary` if tries to add more sdl tokens to a lock that has been queued to be completely withdrawn

Attacker can exploit lock update logic on secondary chains to increase the amount of rewards sent to a specific secondary chain

Insufficient Gas Limit Specification for Cross-Chain Transfers in _buildCCIPMessage() method. WrappedTokenBridge.sol #210

Lack of storage gap in SDLPool.sol can lead to upgrade storage slot collision.

Can lock Fund for 1 sec and unlock in same transaction to gain profit

Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime

Attacker can reenter to mint all the collection supply

Adversary can block `claimAuction()` due to push-strategy to transfer assets to multiple bidders

Bidder Funds Can Become Unrecoverable Due to 1 second Overlap in `participateToAuction()` and `claimAuction()`

Missing minimum token amounts in the emergency contract functions allows MEV bots to take advantage of the protocols emergency situation

Setting minSharesAmt high always leads to processDeposit failure

Fee-on-transfer tokens aren't supported

Constructor of `Escrow` should make sure that `buyer`, `seller`, `arbiter` are different from each other.

Disable mint function

Hardcoded address error

Improper conditioning

In the calculation of amountToSellUnits, the scaling of decimal is not properly done.

Sandwich attack could result in substantial losses

ERC20 of Missing Return Values causes tokens to get stuck

With an ERC20 token with No Revert on Failure, the token is recognized as withdrawn even though it has not been withdrawn.

Collaterals can be stacked in the contract, so if the loan defaults, the lender loses everything.

Disable the liquidation function.

Market owners and protocol owners can steal user funds by front-running transactions and raising commissions.

Fee-on-transfer tokens cannot be deposited.

Shares are not received even though the user has made a deposit

Supply cap of VariableSupplyERC20Token is not properly enforced