Owner of lend offer can delete the offer more than once, completely messing up DLOFactory’s storage

Users won't liquidate positions because the logic used to calculate the liquidator's profit is incorrect

The collateral remainder cap is incorrectly calculated during liquidation

Multicall does not work as intended

Invalid validation allows users to unlock early

Players have complete freedom to customize the fighter NFT when calling `redeemMintPass` and can redeem fighters of types Dendroid and with rare attributes

FighterFarm:: reroll won't work for nft id greator than 255 due to input limited to uint8

NFTs can be transferred even if StakeAtRisk remains, so the user's win cannot be recorded on the chain due to underflow, and can recover past losses that can't be recovered(steal protocol's token)

Fighter created by mintFromMergingPool can have arbitrary weight and element

Rewards can be drained because of lack of access control

Users can not remove some amount of collateral from contract because of wrong implementation of "canRemoveCollateral()"