[Bug Report] No Cost Approval Borrowing

[slendermaan]

Credit : HelloBloc

@clpi

Description

In the following code content, the error handling of x.bankKeeper.SendCoins is missing, which will result in a malicious lender being able to set the loan status to Approve without cost, and the borrower will not receive any funds.

Impact

a malicious lender being able to set the loan status to Approve without cost, and the borrower will not receive any funds.

Likelihood

This attack can be done by any user who does not have sufficient balance.

Related-Links

Related-Code

REF

Ethics

Sorry for using github to report this issue, as I didn't find your security channle and all the effective ways to report it at that time. However, I have observed that your main-net was not online at that time, so reported the issue via github. Hope you don't mind.