2nd place to Union Finance V2 Sherlock's contest: cancelVouch doesn't update the voucher index of the last vouch of a borrower properly

Redacted Cartel code4rena's contest: A malicious early user/attacker can manipulate the pxGmx's pricePerShare to take an unfair share of future user's deposits

Union Finance V2 Sherlock's contest: UserManager.updateFrozenInfo cannot be called from UToken

OpenQ Sherlock's contest: Funders can deny rewards to last claimants by calling refundDeposit between tiers claims

OpenQ Sherlock's contest: refundDeposit function can be DoS by an unbounded loop in getLockedFunds

Fair Funding (Vyper) Sherlock's contest: The auction can be started by anyone calling settle before start_auction is called by the owner