Bugs found in token.art NFT Wallet Viewer for Android
Token.art: NFT Wallet Viewer is a platform that makes it possible to view and purchase multi-blockchain NFT collections conveniently gathered in one place.
The app supports popular blockchains like Ethereum, Solana, Cardana, and WAX. Users can filter and sort their NFTs by name or estimated value, while searching for new NFTs can be done by traits, rarity, and more. Creating curated NFT galleries and earning with NFT staking are also possible with token.art.
As a QA agency experienced with testing web3 solutions, we support aspiring blockchain-based businesses through our Bug Crawl initiative. This time we dove into the token.art NFT marketplace, and here is what we found.
Crash when user presses "Back" button for "ThorGoldNFT" collection
Severity:
Critical
Precondition:
The app is installed. The user added a “Wax” address.
Steps to Reproduce:
- Open the app.
- Tap the “ThorGoldNFT” collection.
- Click the “100% collected” button.
- Tap the “Unowner(0)” tab.
- Tap the “Back” button.
Environment:
Galaxy A10s
Android v.11
Actual Result:
The app crashes.
Expected Result:
The user returns to the previous screen.
"Show currency prices in" drop-down is empty when connection is off
Severity:
Major
Precondition:
The app is installed.
Steps to Reproduce:
- Turn off the Internet on the device.
- Open the app.
- Tap the “Settings” button – navigation bar.
- Tap the “Show currency prices in” drop-down.
Environment:
Galaxy A10s
Android v.11
Actual Result:
The drop-down is opened. The drop-down list is empty.
Expected Result:
The user sees the “No Connection” error.
User sees eternal loaders when trying to add address (connection off)
Severity:
Major
Precondition:
The app is installed.
Steps to Reproduce:
- Turn off the Internet on the device.
- Open the app.
- Tap the “Addresses” button – navigation bar.
- Tap the “+Add address” button.
- Tap the “Cardano” button.
- Tap the “Nickname” field.
- Enter the “Test” text.
- Tap the “Address” field.
- Enter the “Test” text.
- Tap the “Save” button.
Environment:
Galaxy A10s
Android v.11
Actual Result:
The user sees eternal loaders.
Expected Result:
The user sees the “No Connection” error.
"Follow us on Twitter" button doesn't work
Severity:
Minor
Precondition:
The app is installed.
Steps to Reproduce:
- Open the app.
- Tap the “Settings” button – navigation bar.
- Scroll down to the “Follow us on Twitter” part.
- Tap the “Follow us on Twitter” button.
Environment:
Galaxy A10s
Android v.11
Actual Result:
Nothing happens. The “Follow us on Twitter” button doesn’t work.
Expected Result:
The user is redirected to the Twitter page.
"Dupes" part is not fully displayed
Severity:
Trivial
Precondition:
The app is installed. The user added a “Wax” address.
Steps to Reproduce:
- Open the app.
- Tap the “Alien Worlds” collection.
Environment:
Galaxy A10s
Android v.11
Actual Result:
“Dupes” part is cropped in the last block.
Expected Result:
All parts are displayed correctly.
Token.art NFT Wallet Viewer is the right fit for pros and average users. While testing this app, I encountered several issues of critical and minor severity, and I’d highly advise making token.art ready for no- or poor-internet scenarios.
