Submission Details
Severity:
Incorrect Token Decimals Error Message
Summary
The error message for token decimals validation is misleading and does not match the actual validation logic.
Vulnerability Details
The contract throws an error suggesting validation for decimals > 18, but actually throws when decimals = 0:
if (tokenDecimals > 18) {
revert Errors.SablierFlow_InvalidTokenDecimals(address(token));
}
/// @notice Thrown when trying to create a stream with an token with no decimals.✅
error SablierFlow_InvalidTokenDecimals(address token);
Impact
Misleading error messages
Confusion for integrators and users
Tools Used
Manual code review
Recommendations
Correct error message to match validation logic
Add separate validation for zero decimals
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
69929 USDC / LOC
19,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.