[ECO Bounty] iopay Incorrect DApp Icon/Image Displayed for PancakeSwap Entry

Description: In the Manage DApp Auth page, the entry for https://pancakeswap.finance is incorrectly displaying the IoTeX Hub logo and name instead of the correct PancakeSwap branding. This is a metadata mismatch where the wrong DApp identity has been applied to the PancakeSwap authorization entry.

Steps to Reproduce:

  1. Open the ioPay mobile application.

  2. Navigate to Settings > Manage DApp Auth.

  3. Observe the list of authorized DApps.

  4. Locate the entry with the URL https://pancakeswap.finance.

Expected Result: The PancakeSwap entry should display:

Actual Result: The PancakeSwap entry incorrectly displays:

Impact:

  • High — This is a misleading display that could confuse users about which DApp they have authorized. Users may not be able to identify or properly revoke permissions for PancakeSwap if it appears under a different DApp's identity.

Suggested Fix: Review the DApp metadata resolution logic. The app appears to be pulling the name and icon from a cached or incorrect source. The fix should ensure that:

  1. DApp metadata (name, icon) is fetched directly from the authorized DApp's URL (via its manifest or favicon).

  2. Fallback metadata does not incorrectly map to another DApp's identity.

Wallet Address: io1tkw393kejmxwnd454twc6020sxcyvh5dxqmren

Device & Environment:

-Operating system: Android 13

-Device model: Redmi Note 10 Pro

Please authenticate to join the conversation.

Upvoters
Status

In Review

Board
💡

New Issue

Date

3 days ago

Author

cryptotestnet

Subscribe to post

Get notified by email when there are changes.