Missing checks can result in funds being locked up
Summary
When SablierV2MerkleLL was created, streamDurations were not checked and cliff>total was possible. If so, the claim function will revert and the funds will be locked.
Vulnerability Details
When cliff>total, the claim function will revert due to checking when calling the createWithDurations function. As a result, no receipt can withdraw funds from SablierV2MerkleLL, and the funds transferred into the contract by the sender will be locked, possibly permanently.
Impact
Missing checks can result in funds being locked up.
Tools Used
manual
Recommendations
It is recommended that when creating the SablierV2MerkleLL contract, check that streamDurations.cliff cannot be greater than streamDurations.total
Lead Judging Commences
Info/Gas/Invalid as per Docs
https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.