Beedle - Oracle free perpetual lending

Summary

accept zero as amountOutMinimum opening up the user to a catastrophic loss of funds via MEV sandwich attack

Vulnerability Details

the minimum amount of tokens they want to be returned from a swap should not be zero because this will opening up the user to a huge loss of funds via price slippage attacks and MEV bot sandwich attacks.

This code tells the swap that the user will accept a minimum amount of 0 output tokens from the swap

Impact

amountOutMinimum = 0 will result in huge loss of fund of the user or the protocol that will do the swap
and this allow the returned amount from the swap to be zero

Tools Used

manual review

Recommendations

the protocol should specify a slippage parameter amountOutMinimum to provide the protection from price slippage attack .