Flow

location: /src/SablierFlow.sol

code:

Impact

• Description: Relying on block.timestamp can lead to manipulation by miners, who may adjust block times to their advantage, particularly in time-sensitive logic.

• Real-World Consequences: Functions relying on timestamps for critical logic could be manipulated, allowing bad actors to exploit the contract.

Recommendations

• Minimize Timestamp Use: Limit the reliance on block timestamps for critical operations. Consider using block numbers or other mechanisms for time-based logic.

• Implement Time Windows: When necessary, use a range of acceptable timestamps to reduce manipulation risks.