Access Control: Suspended user Positions can be closed due to lack of validation.

No Access Control on mintRebalancer means anyone can mint rebalancer tokens

Incorrect priceFeed address information used for `StableOracleWBTC.sol` (WBTC/USD)

It is possible to steal the unallocated part of every delegation period budget

`PositionManager.moveLiquidity` could revert due to underflow

Bid state loophole allows malicious attacker to steal all liquidated collateral.

function `restructureCapTable()` in Equity.sol not functioning as expected

Reward accounting is incorrect in BathBuddy contract

DOS of market operations with malicious offers

Some offers can't be cancelled

Calling `ExpiringMarket.stop` and `ExpiringMarket.isClosed` functions cannot pause any functionlities of the market

Staking rewards can be drained

Protocol fees can be withdrawn multiple times in `Erc20Quest`