Flow

Sablier
FoundryDeFi
20,000 USDC
View results
Submission Details
Severity: low
Invalid

Missing Address Zero Checks in ‘SablierFlow::_create' Function

Summary

The _create function in SablierFlow.sol does not currently check if the recipient address is set to the zero address (address(0)), which is a requirement according to the documentation in the ISablierFlow.sol interface. This missing check can lead to unintended behavior, as it allows flows to be created with an invalid recipient.

https://github.com/Cyfrin/2024-10-sablier/blob/8a2eac7a916080f2022527408b004578b21c51d0/src/SablierFlow.sol#L563

Recommendations

To resolve this issue, add a check in _create to ensure that the recipient address is not address(0). This validation will prevent flows from being created with an invalid recipient.

Updates

Lead Judging Commences

inallhonesty Lead Judge 8 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.