_requireVaultCollateralized() is called at the beginning of the functions mintYieldFee() and liquidate()

`Vault.mintYieldFee` FUNCTION CAN BE CALLED BY ANYONE TO MINT `Vault Shares` TO ANY RECIPIENT ADDRESS

Incorrect function call in LybraRETHVault's getAssetPrice

The relation between the safe collateral ratio and the bad collateral ratio for the PeUSD vaults is not enforced correctly

Liquidation won't work when bad and safe collateral ratio are set to default values

Invalid implementation of prioritized token rewards distribution

function `restructureCapTable()` in Equity.sol not functioning as expected

Reward accounting is incorrect in BathBuddy contract

An attacker can manipulate the preDepositvePrice to steal from other users.

Staking, unstaking and rebalanceToWeight can be sandwiched (Mainly rETH deposit )

`WstEth` derivative assumes a ~1=1 peg of stETH to ETH

Price of sfrxEth derivative is calculated incorrectly

No slippage protection on `stake()` in SafEth.sol