PM borrow liabilities are omitted from backing, allowing phantom surplus settlement

book_offers misreports funded MPT offer depth by using issuer-account transfer-rate logic instead of the MPTokenIssuance transfer-fee model

Liquidation authorizes on EMA prices but settles seizure on spot prices, causing excess collateral seizure during real Pyth EMA/spot divergence

`handle_debt_auto_deleverage` uses reserve-level debt at execution time even though debt ADL is enabled per `emode_group_id`, allowing borrowing in group B to wrongly activate ADL liquidation against users in group A

`close_pool_reward()` trusts a lazily materialized per-reward claimant counter, so ended deposit liquidity-mining pools can refund away rewards owed to passive pre-existing depositors

Epoch-boundary checkpoints retroactively qualify for the previous epoch's rewards

Arbitrum Retryable-Ticket Refund/Value Not Verified Enables Timelock ETH Exfiltration

MoneyMarket `NORMAL_WITHDRAW` clamps only internal `withdrawAmountRaw_` but forwards the original (oversized) `supplyAmount_` to Liquidity, allowing an attacker to withdraw more tokens than their position and drain pooled Liquidity

DexV2 `settle()` LL-failure fallback credits “withdraw later” storage to `to_` (recipient), but stored balances are only withdrawable by the callback contract (`msg.sender`) → permanent fund lock for EOAs

BuilderWallet `init()` is unprotected/re-initializable, enabling takeover and theft of builder fees

Cross-contract reentrancy in liquidation enables conversion of phantom shares to real shares, draining CollateralTracker assets

`RiskEngine::_getRequiredCollateralAtTickSinglePosition()` Fails to Accumulate Credits Across Multiple Legs, Leading to Potential Erroneous Liquidations

Division-by-zero in long-leg collateral requirement can block solvency checks and `dispatchFrom` (liquidation/force-exercise) for tickSpacing==1 pools

Liquidations Can Be Permanently Blocked via `getLiquidationBonus()` Unsigned Underflow (Insolvent-but-Unliquidatable Accounts)

`writeOff()` can erase all protocol debt when the last borrower is written off (unbacked COIN)

Redemption accounting can become undercollateralized: `redeem()` pays out collateral without conservatively redistributing borrower shortfalls, breaking collateral conservation and locking withdrawals