Flow

Summary

In the Flow Protocol, the isStream status flag does not update correctly when the stream is paused or voided. As a result, isStream remains set to true across all states, even when the stream should be inactive. This lack of state update leads to inaccurate representations of the stream’s operational status.

Vulnerability Details

The isStream flag is meant to indicate the current active status of a stream, tracking whether a stream is active or inactive. However, the code does not update this flag when the stream transitions to paused or voided states. This causes the flag to inaccurately indicate an active stream when, in reality, the stream may be temporarily paused or permanently voided.

Impact

This lack of state update leads to inaccurate representations of the stream’s operational status

Tools Used

Manual Review

Recommendations

Update isStream in State Transitions: Modify the code to toggle isStream to false whenever the stream enters a paused or voided state and set it back to true only when the stream is reactivated. This will ensure that the status reflects the stream’s true state.