Sandwich attack to steal all ERC-20 tokens in the Fees contract

During refinance() new Pool balance debt is subtracted twice

Borrower can bypass maxLoanRatio's configuration of a pool via buyLoan()

[H-04] Lender#buyLoan - Malicious user could take over a loan for free without having a pool because of wrong access control

Attacker can steal a loan's collateral and break the protocol

update() not getting called right after a WETH amount has been sent will cause users to lose staking rewards

The `borrow` and `refinance` functions can be front-run by the pool lender to set high interest rates

Frontrun can get the full reward, no staking time required

Staking contracts should be assert TKN != WETH

Theft of collateral tokens with fewer than 18 decimals

There is no incentive to liquidate small positions

DSC protocol can consume stale price data or cannot operate on some EVM chains

Chainlink oracle will return the wrong price if the aggregator hits `minAnswer`

Lack of fallbacks for price feed oracle

Precision loss when calculating the health factor

methods used by EntryPoint has `onlyOwner` modifier