This payment streaming contract requires the payer to pay out USDC or USDT.
However, there are no validity checks on whether the payment token is in the whitelist or not.
The payer can forge a payment system with unethical token to payees which could be the leak of this contract.