Sablier

Summary

wrong implement of "uri = nftDescriptor.tokenURI({ sablier: this, streamId: streamId });".

Vulnerability Details

function tokenURI(uint256 streamId) public view override(IERC721Metadata, ERC721) returns (string memory uri) {
// Check: the stream NFT exists.
_requireOwned({ tokenId: streamId });

    // Generate the URI describing the stream NFT.
 @>>   uri = nftDescriptor.tokenURI({ sablier: this, streamId: streamId });
}

Impact

wrong calculation of uri.

Tools Used

Recommendations

 @>>   uri = nftDescriptor.tokenURI({ sablier:address( this), streamId: streamId });