docs: security assumptions

[smol-ninja]

Closes #268

[smol-ninja]

Should I add bug bounty similar to lockup?

[PaulRBerg]

Yes.

[smol-ninja]

• I have mentioned the starting date for bug bounty to be Dec 1, 2024 since our audits will be done by then.
• While reviewing, main focus can be on the "Assumptions" as most content is similar to Lockup.

[andreivladbrg]

I think we should include more Flow-related points in the Assumptions section.

One suggestion could be: "Sablier holds no responsibility if the sender doesn't deposit sufficient funds for the recipient on time. This is a matter for the involved parties to resolve, as we simply provide the platform for tracking debt."

wdyt? @smol-ninja

[smol-ninja]

Sablier holds no responsibility if the sender doesn't deposit sufficient funds for the recipient on time. This is a matter for the involved parties to resolve, as we simply provide the platform for tracking debt

How is it relevant to the security assumptions? I think these are more relevant to user docs which will be hosted on docs site.

[andreivladbrg]

How is it relevant to the security assumptions? I think these are more relevant to user docs which will be hosted on docs site

IMO it is relevant to mention this to auditors as an "Assumption", but I agree, it would be better to place it in docs👍

[andreivladbrg]

[PaulRBerg]

agree with @smol-ninja, senders not paying their debt is not a matter of losing funds but of offchain agreements between users.