Beedle - Oracle free perpetual lending

Summary

Contract does not support fee-on-transfer tokens.

Vulnerability Details

Some tokens take a transfer fee (e.g. STA, PAXG), some do not currently charge a fee but may do so in the future (e.g. USDT, USDC).
So the recipient address may not receive the full transfered amount, which can break the protocol’s accounting and revert transaction.

Impact

conflict for internal accounting and loss of funds.

Tools Used

Foundry

Recommendations

Consider protocol whitelist the token address or use balance before and after check to make sure the recipient receive the accurate amount of token when token transfer is performed.