`SablierV2Lockup::withdrawMultiple` will revert on a blacklisted address
Summary
There are tokens which have blacklists. For example, USDC. For such blacklisted address the withdraw into the for loop of the SablierV2Lockup::withdrawMultiple will revert.
Vulnerability Details
The withdraw is executed within a for loop. If there is a withdraw to blacklisted address the loop will be prematurely stopped and the following address will not be able to withdraw their funds.
Impact
Impact is High because a blacklisted address will prevent others from withdrawing their funds.
Tools Used
Manual Review
Recommendations
Check whether there the transaction is successful on Line 454 of SablierV2Lockup.sol.
Lead Judging Commences
Info/Gas/Invalid as per Docs
https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.