Fjord Token Staking

Summary

In FjordStaking in the stakeVested() there is a comment that says:
"only allow authorized stream sender to stake cancelable stream"

The stakeVested(), however, doesn't check to see if the stream is cancelable or not.

Sablier provides a function, isCancelable(), that allows the caller to see if a given stream can be canceled

Vulnerability Details

see summary

Impact

A customer can stake a canceled stream

Code Location

https://github.com/Cyfrin/2024-08-fjord/blob/main/src/FjordStaking.sol#L402C9-L403C13

Recommendations

Use the isCancelable() from Sablier to check if a stream can be cancelled or not