Summary

When a stream is created, a NFT is minted to that recipient. However _mint is used, which can cause problems.

Vulnerability Details

In the current implementation, if the recipient is a smart contract that can not receive ERC721 tokens, the minting will go though as there is no check for this. The _safeMint function does just that - it has a check if the recipient can handle ERC721 tokens.

Impact

Minting ERC721 tokens to contracts that can not handle them.

Tools Used

Manual Review

Recommendations

Use _safeMint instead of _mint, but also add nonReentrant modifiers, since _safeMint can reenter.