Malicious User can call `lockOnBehalf` repeatedly extend a users `unlockTime`, removing their ability to withdraw previously locked tokens

Single plot can be occupied by multiple renters

Malicious User can call `lockOnBehalf` repeatedly extend a users `unlockTime`, removing their ability to withdraw previously locked tokens

Single plot can be occupied by multiple renters

Non-transferable `GameItems` can be transferred with `GameItems::safeBatchTransferFrom(...)`

Anyone can update the address of the Router in the DcntEth contract to any address they would like to set.

Burning any CouncilMember other than the last can prevent minting

Unauthorized Access to setCurves Function

Stuck rewards in `FeeSplitter` contract

Curves::_buyCurvesToken(), Excess of Eth received is not refunded back to the user.

If a user sets their curve token symbol as the default one plus the next token counter instance it will render the whole default naming functionality obsolete

Trading on Uniswap is done without slippage protection

Missing `onlyBalancer` modifier on `mintRebalancer` and `burnRebalancer`