Beedle - Oracle free perpetual lending

Summary

BuyLoan function does not check that both pool's collateral tokens are same as it was checked in giveLoan function .

Vulnerability Details

buyLoan transfers a loan from a pool to another pool and both pools should have same collateral token , but there is no check to ensure equality of collateral tokens addresses so it can leads to loss of funds for one of lenders if a loan has been transferred from a pool to another pool that different collateral token .

Impact

loss of funds for one of lenders .

Tools Used

Manual Review

Recommendations

Check both collateral tokens are the same .