docs: security assumptions

sablier-labs / flow

🍃 Smart contracts of the Sablier Flow protocol.

Other

8 stars 0 forks source link

docs: security assumptions #288

Closed smol-ninja closed 1 week ago

smol-ninja commented 2 weeks ago

Closes https://github.com/sablier-labs/flow/issues/268

smol-ninja commented 1 week ago

Should I add bug bounty similar to lockup?

PaulRBerg commented 1 week ago

Yes.

smol-ninja commented 1 week ago

I have mentioned the starting date for bug bounty to be Dec 1, 2024 since our audits will be done by then.
While reviewing, main focus can be on the "Assumptions" as most content is similar to Lockup.

smol-ninja commented 1 week ago

Sablier holds no responsibility if the sender doesn't deposit sufficient funds for the recipient on time. This is a matter for the involved parties to resolve, as we simply provide the platform for tracking debt

How is it relevant to the security assumptions? I think these are more relevant to user docs which will be hosted on docs site.

andreivladbrg commented 1 week ago

How is it relevant to the security assumptions? I think these are more relevant to user docs which will be hosted on docs site

IMO it is relevant to mention this to auditors as an "Assumption", but I agree, it would be better to place it in docs👍

PaulRBerg commented 1 week ago

agree with @smol-ninja, senders not paying their debt is not a matter of losing funds but of offchain agreements between users.