[ECO Bounty] iopay Approval Checker Incorrect Redirect

Summary

In the ioPay wallet, clicking on the Approval Checker button/link incorrectly redirects the user to google.com instead of the intended smart contract approval management tool or block explorer.

Environment

• App: ioPay Wallet

• Version: 5.x (as of early 2026)

• Platform: Mobile (iOS/Android)

Steps to Reproduce

1. Open the ioPay application.

2. Navigate to Discover.

3. Click on the Approval Checker option.

4. Observe the destination of the in-app browser or external redirect.

Expected Result

The app should open a tool (such as IoTeXScan Approval Tool or Revoke.cash) that allows the user to view and revoke smart contract permissions for their wallet address.

Actual Result

The app redirects the user to the Google homepage (www.google.com), preventing the user from managing their token approvals.

Suggested Priority: High

Note: This is a security-related feature. If users cannot check their approvals, they cannot easily revoke permissions from potentially malicious or compromised dApps, putting their funds at risk.

Wallet Address: io1tkw393kejmxwnd454twc6020sxcyvh5dxqmren

Device & Environment:

-Operating system: Android 13

-Device model: Redmi Note 10 Pro