Beedle - Oracle free perpetual lending

Summary

It has been identified that the buyLoan function, which allows someone to buy a loan in auction, does not update the auctionLength attribute in the loan, causing the loan to retain the auctionLength of the old pool rather than the new one.

Vulnerability Details

The issue is in the buyLoan function, which allows someone to buy a loan in auction. The function does not update the auctionLength attribute in the loan, causing the loan to retain the auctionLength of the old pool rather than the new one. This can lead to inconsistencies and potential inaccuracies in the auction process.

Impact

This vulnerability can lead to significant inaccuracies in the auction process, which can affect the fairness of the loan terms and potentially lead to financial losses for either the borrower or the lender.

Tools Used

Manual Review

Recommendations

To mitigate this vulnerability, it is recommended to revise the buyLoan function to correctly update the auctionLength attribute in the loan when a loan is bought in auction.