Witness will misroute their tx reserve sponsor onto the bridge door account's XChainCreateAccountClaimID SLE via XChainAddAccountCreateAttestation

AMMDeposit checks the sponsor's liquid XRP balance against the XRP deposit amount instead of the depositor's, causing all sponsored XRP AMM deposits where the sponsor holds less XRP than the deposit value to fail with tecUNFUNDED_AMM

LoanBrokerSet on an MPT vault with any tx reserve sponsor will always fail with tecINVARIANT_FAILED because authorizeMPToken lacks an isPseudoAccount guard and propagates the sponsor onto the broker pseudo-account's MPToken

TrustSet submitter encumbers a tx reserve sponsor onto the counterparty's trust-line side after the counterparty toggles asfDefaultRipple, because the modify path attaches txSponsorSle to any side whose reserve gate trips with no submitter==account guard