Submission Details
Severity:
Unsafe use of `_mint` instead of `_safeMint`
Summary
The usage of _safeMint guarantees that the receiver to address is either a smart contract that implements IERC721Receiver.onERC721Receivedor an EOA
Vulnerability Details
// Effect: mint the NFT to the recipient.
_mint({ to: params.recipient, tokenId: streamId });
Impact
Tools Used
Recommendations
According to OpenZeppelin usage of _mintis discouraged, use _safeMintwhenever possible.
See the docs: https://docs.openzeppelin.com/contracts/4.x/api/token/erc721#ERC721-_safeMint-address -uint256-
Updates
Lead Judging Commences
inallhonesty over 1 year ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
Known - LightChaser
https://github.com/Cyfrin/2024-05-Sablier/issues/1
Prize pool breakdown
Total prize
53,440 USDC
nSLOC
2,65520 USDC / LOC
45,000 USDC
3,100 USDC
5,340 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.