Beedle - Oracle free perpetual lending

Summary

Lack of Input Validation

Vulnerability Details

The contract does not validate whether _profits is a valid ERC20 token address.

Impact

If _profits is an invalid address or not an ERC20 token, the contract could throw an exception and result in unexpected behavior.

Recommendations

Implement proper input validation to ensure that _profits is a valid ERC20 token address before proceeding with any operations. Use informative error messages and fail safely by reverting the transaction in case of invalid input. This will enhance the contract's security and prevent unexpected behavior.