Steadefi

Summary

The borrow() function does not validate that the specified borrowing amounts do not exceed the remaining debt ceiling after accounting for any existing debts.

This allows a user to call borrow() multiple times for the same amounts, accumulating duplicate borrow positions without detection. Over time, total debts could surpass intended limits.

Reproduction Steps:

1. Call borrow() to add initial debts

2. Call borrow() again without debt checks

3. Detect duplicated borrowing amounts in storage

Impact

Incorrect borrow tracking could lead to unpaid or missing debts

Tools Used

Manual Review

Recommendations

Validate borrow amounts do not duplicate existing storage debts before changing balances. Revert on duplicates to enforce unique borrowing per transaction.