Probably exploiting the lack of modularity is a safe bet. Create an error in a seemingly benign part of the code and have a cascading error into consensus which would cause some obvious problems. In general it found memory exploits and those are pretty common in C/C++ codebases. CVE 2024-52911 is STILL a huge problem with older versions.