A TWAP oracle uses too short a window or too few observations, so a well-capitalized actor can still move the average across a couple of blocks, partially defeating the time-weighting.
uint32 window = 1800; // 30-min TWAP; ensure pool cardinality & liquidity suffice
Largest recorded losses in the same failure class — related, not the same bug:
The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0025 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.