Sablier

Summary

there is o check on admin assignment as it can be equal to old admin and can be address 0.

Vulnerability Details

function transferAdmin(address newAdmin) public virtual override onlyAdmin {
// Effect: update the admin.
@>> admin = newAdmin;

    // Log the transfer of the admin.
    emit IAdminable.TransferAdmin({ oldAdmin: msg.sender, newAdmin: newAdmin });

Impact

admin can be equal to zero address or same as old admin.

Tools Used

Recommendations