A big leak I found last year was just positional play. Playing too much OOP or not enough IP. 3betting too much OOP (from blinds) and not enough IP (from button).