Stored token credits become unclaimable when Liquidity fallback is triggered

Owner cannot collect fees from native ETH positions, causing permanent loss of fee revenue

Same heartbeat for multiple price feeds is vulnerable

Transfer whitelist validation uses incorrect boolean logic causing access control bypass

MergeTgt has no handling if TGT_TO_EXCHANGE is exceeded during the exchange period

Ineffective Time-Weighted Average Implementation in Fee Distribution

Treasury Contract Deposit Function Can Be Frontrun To Deny Protocol Operations

Workingsupply would always be overwritten in boostcontroller.sol impacting reward calculations

Fee-on-transfer token handling issue in `Treasury::deposit` leads to permanent fund loss

Multiple Token Management Lets Withdraw a Token Different than Deposited Token

Unbounded Reward Accrual After Period End Enables Reward Manipulation Attacks

not adding `claimable` balance to the total assets in `_harvestAndReport` can cause losses.