The fact that several attacks against POS have been described (and mitigated) makes it likely that unknown ones also exist. The Merge is a very complex system at that. With several $100B at stake I'm sure we are in for interesting times. I hope it breaks completely so we can leave Eth in the dustbin of history.