Sablier
Sablier
DeFiFoundry
53,440 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

Streams start timestamp can be in the past

iamemptyset

Summary

SablierV2LockupLinear.sol, SablierV2LockupTranched.sol, and SablierV2LockupDynamic.sol contract's createWithTimestamps functions allow stream creators to create streams with past start time and past cliff time for only linear stream.

Vulnerability Details

The SablierV2LockupLinear.sol, SablierV2LockupTranched.sol, and SablierV2LockupDynamic.sol contract createWithTimestamps functions did not check if stream start time is < block.timestamp and also cliff time < block.timestamp for SablierV2LockupLinear.sol.

Impact

It will allow stream creators to create streams with past start time.

Tools Used

Manual review

Recommendations

Add below code in _create() internal function of SablierV2LockupLinear.sol, SablierV2LockupTranched.sol, and SablierV2LockupDynamic.sol contracts.

if (params.timestamps.start < block.timestamp) {
revert();
}
Updates

Lead Judging Commences

inallhonesty Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Design choice

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.