Beedle - Oracle free perpetual lending

Summary

Used of block.timestamp which is manipulated by miner to make transactions in their favour it very well know mistakes in smart contract.

Vulnerability Details

Used of block.timestamp on Pool creation, Loan Process and special in calculated interestRate is very dangerous miner have some extended power to manipulate timestamp.

Impact

The most biggest impact will be interestRate and currentAuctionRate manipulate which will create problems for other uses in market

Tools Used

Foundry, Code Review and Static analyse tool

Recommendations

Used Block.number it is good approach, I made changes in code to test it with different Block.Number it work on all test-case which are define , to test it , I assume 1 Block count is equal to one day then i test it.