Beedle - Oracle free perpetual lending

Summary

State variables are updated after transfer of claimable tokens.

Vulnerability Details

In the claim() of 'Staking.sol' the state is updated after the transfer which can be vulnerable to reentrancy and can result in loss of funds.

Impact

The contract can get drained of its funds.

Tools Used

Slither

Recommendations

Update state variables before transferring tokens or use reentrancy protection. Checks-Effects-Interaction.