The high risk proposals quorum can be bypassed

The transfer lock for leveraged position orders can be bypassed

The limit orders trade fee can be bypassed through reentrancy

Burn functionality breaks accounting

Artificial increase of voting power

Incorrect slippage used for swapping `SDT` to `CvgSdt` tokens while claiming rewards

Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime

Attacker can reenter to mint all the collection supply

Adversary can block `claimAuction()` due to push-strategy to transfer assets to multiple bidders

The RandomizerVRF and RandomizerRNG not produce hash value.

Auction winner can prevent payments via `safeTransferFrom` callback