SuperDCAStaking wipes bucket-accrued rewards on stake by resetting lastRewardIndex prematurely

Native token paired with dcatoken will DOS fee collection for listed positions as owner cannot collect fees

Attacker will redirect all token-bucket rewards to a owned pool by creating a another pool of token rewards and pinging the hook

inflated userTokenAmount due to bug in Protocol accounting

Attacker can max mint the entire supply while paying the mintfee for one token through mintBatch

Collection referrers percentage fee are also mistakenly sent to the mint referrer

_refundExcess() wont work making users lose excess ETH sent during minting in Edition

LMPVaultRegistry removeVault forgot to vault address from _vaultsByType

Option Reciever can take out collateral in put options without adding collateral Due to Rounding Errors