Beedle - Oracle free perpetual lending

Summary

Avoid Block.timestamps.

Vulnerability Details

Avoid making decisions based on block timestamps as they can be manipulated by rogue miners.
The vulnerabilities are present in the
Fees.sol line 36:27
and
Lender.sol contracts (lines 257:33, 284:17, 418:44, 429:17, 448:51, 455:17, 471:13, 474:31, 531:13, 557:17, 690:44, 706:17, 723:31).

Impact

If an attacker manages to manipulate the contract, there will be potential financial loss in the contract.

Tools Used

Solhint

Recommendations

To mitigate this vulnerability, default to a more reliable source, use an oracle like Chainlink, to avoid relying on potentially manipulated block timestamps.