Flow

Summary

The tokenURI function in FlowNFTDescriptor.sol contains a hardcoded SVG image, limiting customization options for different NFTs.

Vulnerability Details

The hardcoded SVG data within the tokenURI function restricts flexibility, as each NFT generated will display the same image. This approach limits the ability to represent unique characteristics based on parameters like streamId or sablierFlow.

Impact

This lack of customization reduces the NFT's adaptability and uniqueness, which could affect its value and utility within dynamic applications.

Proof of Concept

Each call to tokenURI returns the same base64-encoded SVG, regardless of streamId or sablierFlow values.

Recommendations

Consider dynamically generating the SVG based on streamId or other parameters to support unique visuals for each NFT.