What are the common security vulnerabilities in DeFi lending projects?