Flow
Sablier
FoundryDeFi
20,000 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

Missing Token Existence Check

icon0x

Summary

Vulnerability Details

The function assumes the token address points to a valid ERC20 contract but doesn't verify this beyond the decimals call.

Proof of Concept

uint8 tokenDecimals = IERC20Metadata(address(token)).decimals(); // @audit Could revert if token doesn't exist

Tools Used

Recommendations

Add explicit token existence check:

if (!Address.isContract(address(token))) {
revert Errors.SablierFlow_InvalidTokenAddress();
}
Updates

Lead Judging Commences

inallhonesty Lead Judge 8 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.