Assets deposited before calculating shares amount to mint will cause users to mint less shares.

first depositor attack possible through multiple attack paths because the deposit function does not check 0 shares received.

Retroactive rewards allow single staker to claim all accumulated emissions

Attacker will drain unintended tokens from the contract by faking swap input value.

Missing native token handling will break swaps for users supplying native tokens

Improper Uniswap pair existence check may incorrectly assume pool presence, leading to DoS

On-chain slippage setting enables MEV sandwich risk and uncontrolled maxAmountIn