Beedle - Oracle free perpetual lending

Summary

In Ownable.sol, the transferOwnership function does not check if address supplied is zero address. Also in Lender.sol the setFeeReceiver() function does not check for zero address. This might lead to protocol funds being locked.

Vulnerability Details

The protocol owner might transfer ownership to address(0) by mistake thereby loosing control to admin functions in Lender.sol like setLenderFee(),setBorrowerFee()

Impact

Protocol owner will no longer be able to manage the protocol.

Tools Used

Manual review

Recommendations

Consider using require(_owner != address(0),"zero address") where needed.