No authorization header on the delivery.
The authorization header matched none of the configured credentials.
The body is not JSON or not an Adyen notification envelope, or a signed value is missing or lacks the type Adyen's webhook schema documents.
No additionalData.hmacSignature on an item.
A signed value other than merchantReference contains the ":" delimiter, so the values could be re-split.
Why a delivery failed verification — distinct reasons so hosts can tell a rewritten body from a bad key.