Vulnerability Details

The SablierV2MerkleLL.sol allow users to claim Airdrops using Merkle proofs. These airdrops are powered by Lockup Linear streams. In the SablierV2MerkleLL.sol::constructor we max approve the Sablier contract. However, some tokens like UNI do not support the approving the spender type(uint256).max amount of tokens. In this way ASSET.forceApprove will not work for such tokens.

Impact

Tokens that don't support approve type(uint256).max amount could not be used in the SablierV2MerkleLL.sol contract.

Tools Used

Manual Review

Recommendations

Consider using a different approach to approve the spender for tokens that don't support approve type(uint256).max amount or make the contract logic to not work with such tokens.