Submission Details
Severity:
no check for tokens with lower token decimals lower than 18, and can cause underflow and disruption of the protocol
Summary
The SablierFlow:_create function has checks for only higher decimals not for lower decimals than 18 which can cause underflows like USDC and other tokens with low token decimals.
Vulnerability Details
if (tokenDecimals > 18) {
revert Errors.SablierFlow_InvalidTokenDecimals(address(token));
}
Impact
Allowing tokens with fewer decimals than required can lead to rounding errors, inaccurate balances, and possible underflows in calculations.
Tools Used
Manual Review
Recommendations
- if (tokenDecimals > 18) {
- revert Errors.SablierFlow_InvalidTokenDecimals(address(token));
- }
+if (tokenDecimals != 18) {
+ revert Errors.SablierFlow_InvalidTokenDecimals(address(token));
+}
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
69929 USDC / LOC
19,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.