Wrong rounding direction will lead to user can't sell the last votes in the market due to underflow

No slippage protection for Market functions

Users will lose rewards when buying new tokens if they already own some tokens

Attacker can drain all ETH from AuctionDemo when block.timestamp == auctionEndTime

Bidder Funds Can Become Unrecoverable Due to 1 second Overlap in `participateToAuction()` and `claimAuction()`

Auction winner can prevent payments via `safeTransferFrom` callback

``FULL_RESTRICTED`` Stakers can bypass restriction through approvals

Incorrect calculations for Surplus Auction creation cause massive surplus imbalances

`transferSAFEOwnership()` does not fully transfer ownership

Unable to retrieve price information with CamelotRelayer contract

Approved address can approve other addresses for an owner's safe

Due to extremely short `votingDelay` and `votingPeriod`, governance is practically impossible.

SafeHandler contract doesn't have any method to call to `ODSafeManager.allowHandler()`, lead to DOS in some function

Decimal Limitation in CamelotRelayer and UniV3Relayer Contract Deployment

`allocator.voiceCredits` in QVSimpleStrategy contract is not getting updated in `allocate()` function causing unlimited voting power

Updating `allocator.voiceCreditsCastToRecipient` wrongly causing getting bigger voting power then expected

Recipient can't register in RFPSimpleStrategy and RFPCommitteeStrategy contract when `useRegistryAnchor == true`

`_distribute()` function in RFPSimpleStrategy contract has wrong requirement causing DOS

Reviewing recipients and registering register happen in the same time range causing missing few last registers to be review in DonationVotingMerkleDistributionBaseStrategy contract

QVSimpleStrategy contract is not functioning with native token as pool's token

The settle feature will be broken if attacker arbitrarily transfer collateral tokens to the PerpetualAtlanticVaultLP

Change of `fundingDuration` causes "time travel" of `PerpetualAtlanticVault.nextFundingPaymentTimestamp()`

User can reclaim() multiple time, causing draining the contract

Chainlink's Feed Registry is not supported in Arbitrum and Optimism leads to manipulating by admin/owner