Unchecked token transfers across withdrawal paths

Description

The affected control does not preserve its security invariant across every reachable state transition.

Involvements

src/LiquidityPool.sol:41

TokenVault::withdraw

Return value is not checked

src/TokenVault.sol:188

Bridge::release

Return value is not checked

Impact

An attacker can violate accounting assumptions and put user funds at risk.

Proof of concept

1. Prepare the boundary state.
2. Call the affected entry point.
3. Observe the invariant break.

Recommended mitigations

Enforce the invariant at the state-transition boundary and add a regression test for the adversarial path.