Beedle - Oracle free perpetual lending

Summary

Beedle.sol contract has mint function with onlyOwner modifier that allows contract owner to mint arbitrary amount of tokens.

Vulnerability Details

There are significant centralization risk, as Beedle contract owner has an ultimate power to mint tokens.

Impact

If contract owner account happened to be compromised, Beetle token price would go to zero and it's holder would lose their funds.

Tools Used

Observation

Recommendations

Consider adding max_supply attribute or setting Timelock/Multisig owner of the contract