ton-blockchain / wallet-android Goto Github PK

Bug Type

Functional

Reproduction steps

1. Download app - https://play.google.com/store/apps/details?id=ton.coin.wallet
2. Open app "Toncoin Wallet"
3. Tap on the "Import existing wallet" button
4. Enter 3 secret words and log in to the home page

Actual result

Home page in "updating" status. The screen is frozen

Expected result

The home page loads correctly, the application can be used

Suggested Severity

Critical

Device

Smartphone :

Device: [Redmi Note 11 Pro]
OS: [android 11]
Browser [-]
Version [1.0.6]

Additional Context

Bug Type

Functional

Reproduction steps

Precondition: Create a wallet and log in to the app.

1. Tap on the "Receive" button
2. Tap on the "Share Wallet Address" button
3. Tap on the "Gmail" icon

Actual result

The wallet address is copied with the prefix "ton://transfer/***"

Expected result

The wallet address is copied without the prefix "ton://transfer/***"

Suggested Severity

Medium

Device

Smartphone :

Device: [Redmi Note 11 Pro]
OS: [android 11]
Browser [-]
Version [1.0.6]

Additional Context

Mnemonic (secret words) field should accept only characters not digitals. At the moment fields receive digitals and there is no max values.

Bug Type

Security

Reproduction steps

1- Open your Toncoin Wallet.

Actual result

The APP opens normally without requiring a password.

Expected result

The APP should ask for password or fingerprint so intruders don't get to know the user's balance.

Also one could possibly log user out of the APP without require a password, which would be troublesome if the user didn't back the recovery phrase up.

Suggested Severity

Vulnerability

Device

Smartphone (please complete the following information):

• Device: Redmi Note 7
• OS: Android 12
• Version 1.0.6

Bug Type

Functional

Reproduction steps

1. Download app - https://play.google.com/store/apps/details?id=ton.coin.wallet
2. Open app "Toncoin Wallet"
3. Tap on the "Create My Wallet" button
4. Tap on the "Continue" button
5. Scan a fingerprint
6. Tap on the "Back" button

Actual result

The "Back" button redirects to the home screen

Expected result

The "Back" button redirects to the previous screen

Suggested Severity

High

Device

Smartphone :

Device: [Redmi Note 11 Pro]
OS: [android 11]
Browser [-]
Version [1.0.6]

Additional Context

When recording the screen, the finger scan screen is filled with black color (security protection). Then when we press back the screen becomes black again, as if the system wants to go back to the previous screen, but redirects to the home screen. This problem with the back button is present at all stages of creating a wallet

Uploading telegram-cloud-document-2-5271798534495018358.mp4…

Bug Type

UX/Functional

Reproduction steps

Actual result

Wallet won't load. Reboot doesn't help.
The wallet was created from scratch.
Unable to specify https://ton.org/global-config-wallet.json (Tried to specify in the Json/Url)

Expected result

What "Config json" needs to be specified? (for blockchain ID == mainnet)
Make it so that the wallet data is loaded.

Suggested Severity

Critical

Device

Smartphone (please complete the following information):

• Device: Samsung A71
• OS: Android 12
• Version latest version from google play

Additional Context

No response

Bug Type

Functional

Reproduction steps

1- Go to the settings.
2- Choose Server Settings.
3- Set the Blockchain to testnet and save.

Actual result

Getting error about invalid configuration.

Expected result

To go to the testnet blockchain of the ton network.

Suggested Severity

Low

Device

Smartphone (please complete the following information):

• Device: Redmi Note 7
• OS: Android 12
• Version 1.0.6

Additional Context

No response

Bug Type

UX

Reproduction steps

1- Install the APP.
2- Open it and create a new wallet.
3- Click continue quickly.

Actual result

You get no I'm Sure Option. Some one testing out the wallet would fine this cumbersome. Plus, some people take a photo of the recovery phrase from an air gapped device and encrypt it using GPG, so this is fast for them.

Expected result

Expecting a I'm Sure option.

Suggested Severity

Low

Device

Smartphone (please complete the following information):

• Device: Redmi Note 7
• OS: Android 12
• Version 1.0.6

Additional Context

No response

When you see your 24 Secret Words for the first time, you cannot screenshot them for security reasons. But after this screen you'll be asked to check if you've noted down the words correctly, in the correct order. Fail the test and you'll see you'll be able to make a screenshot of the Secret Words screen.

Bug Type

Security

Reproduction steps

Actual result

At the step of saving the words to a physical notepad. The application has been restarted.
After that I was able to take a screenshot.

Test case:

1. Reach the page with words
2. Press the back button on the form (<-)
3. Launch the application
4. Take screenshots

Expected result

Block capturing the current screen.

Suggested Severity

Vulnerability

Device

Smartphone (please complete the following information):

• Device: Samsung A71
• OS: Android 12
• Version latest version from google play

Additional Context

No response

Gradle Sync Issues in Android Studio
app/build.gradle

INFO: The following project options are deprecated and have been removed:
android.useDeprecatedNdk
NdkCompile is no longer supported
Affected Modules: app

Not sure if the issue is with Telegram client or wallet, but when we click on an invoice URL the wallet is not opened.

Bug Type

UI

Reproduction steps

1. Download app - https://play.google.com/store/apps/details?id=ton.coin.wallet
2. Open app "Toncoin Wallet"
3. Tap on the "Import existing wallet" button
4. Scroll down on 21-24 words

Actual result

The on-screen keyboard overlaps lines 21-24. User can't see the words he/she is typing and can't understand what line he/she is on

Expected result

With the on-screen keyboard open, scrolling down to line 24 works correctly. The user sees all the words he enters

Suggested Severity

Medium

Device

Smartphone :

• Device: [Redmi Note 11 Pro]
• OS: [android 11]
• Browser [-]
• Version [1.0.6]

Additional Context

I apologize for the quality of the attached file, but on the "secret words" page the system does not allow for a screenshot

Hi!

If user accidentally taps 'Create My Wallet' on the first screen, they cannot go back from 'Congratulations 🎉' screen and chose 'Import existing wallet' instead: back button does not work.

Nothing short of clearing app data seems to help.