Sablier

Summary

Hook operations exist in multiple places in the protocol. Users can use these hooks to steal gas.

Vulnerability Details

For example, when the sender calls the renounce function, the receiver can call the withdraw function through onLockupStreamRenounced to withdraw the funds that can be received. And in the same transaction, users can call functions such as SablierV2MerkleLL.claim to complete other operations.

Impact

Both sender and receiver may have gas stolen.

Tools Used

manual

Recommendations

It is recommended to strictly limit the gas consumed by the call.