Submitted by 0xA5DF, also found by 0xmuxyz, 8olidity, 0x4non, and HollaDieWaldfee
https://github.com/code-423n4/2022-12-tigris/blob/496e1974ee3838be8759e7b4096dbee1b8795593/contracts/GovNFT.sol#L247 
https://github.com/code-423n4/2022-12-tigris/blob/496e1974ee3838be8759e7b4096dbee1b8795593/contracts/BondNFT.sol#L285
Both BondNFT and GovNFT are an ERC721 implementation, and they both also have a function named safeTransferMany() which its name implies is supposed to safe transfer many tokens at once.
However the function doesnt actually safe transfer.
Users might use this function, expecting it to verify that the receiver is an ERC721Receiver, but will get their funds stuck in a contract that doesnt support ERC721.
Ive added the following tests to the GovNFT tests.
1st test will succeed (tx will revert) since safeTransferFrom() does actually use safe transfer.
2nd will fail (tx wont revert), since safeTransferMany() doesnt actually use a safe transfer.
Output (Ive shortened the output. following test will also fail, since the successful transfer will affect them):
Call _safeTransfer() instead of _transfer().
TriHaz (Tigris Trade) confirmed 
Alex the Entreprenerd (judge) commented:
GainsGoblin (Tigris Trade) resolved:
