Beedle - Oracle free perpetual lending

Summary

The Blend lending protocol contains a several vulnerabilities where multiple token transfers are executed without proper validation for failure, potentially leading to unpredictable outcomes. The affected functions performs various token transfers as part of setting or updating pool configurations. The lack of error handling in these transfers may result in unintended token losses, contract failures, or other unpredictable consequences, posing a significant risk to the overall protocol's security and stability.

Vulnerability Details

Impact

Loss of tokens

Tools Used

Manual

Recommendations

Implementing robust error handling and transaction revert-on failure mechanisms for all token transfers within the smart contract will immediately help solve the issue.