[ECO Bounty] iopay Incorrect EVM Address Labeling and Formatting

Wallet Address Reporter: io1tkw393kejmxwnd454twc6020sxcyvh5dxqmren

App Version: ioPay v5.3.1 (3973)

Device: Redmi Note 10 Pro (Android 13)

Description

In the Wallets management screen, addresses are labeled with an "EVM:" prefix; however, the strings displayed following this prefix are Bech32-formatted addresses (starting with bc1...) rather than standard Hexadecimal EVM addresses (starting with 0x...). Specifically, the app shows "EVM:bc1p..." for multiple wallets, including "Cryptotestnet" and "UNIJAYCHIE".

This is technically contradictory as the EVM standard requires a 42-character hexadecimal string. Displaying a Bitcoin-style Bech32 address next to an "EVM" label may cause users to send incompatible assets to the wrong network, potentially resulting in a total loss of funds.

Steps to Reproduce

  1. Open the ioPay application.

  2. Navigate to the Wallets management screen (often via the top-left menu or wallet selector).

  3. Observe the labels and address formats under each wallet name (e.g., "Wallet 3", "UNIJAYCHIE").

Actual Result

Wallets display a prefix of "EVM:" followed by a non-EVM, Bech32 (bc1...) address string.

Expected Result

  • If the wallet is displaying an EVM-compatible address, it must start with 0x.

  • If the wallet is displaying a native IoTeX or Bitcoin-style address, the label should be updated to reflect the correct network (e.g., "IOTX:" or "BTC:") rather than "EVM:".

Please authenticate to join the conversation.

Upvoters
Status

In Review

Board
πŸ’‘

New Issue

Date

About 2 months ago

Author

cryptotestnet

Subscribe to post

Get notified by email when there are changes.