
Description: I performed a security test to see if ioPay would trigger a warning when attempting to send funds to a known malicious scam address. Despite other wallets (like MetaMask or Rabby) often flagging high-risk addresses via third-party security APIs, ioPay allowed the transaction setup to proceed to the final confirmation screen without any visual warning or risk alert.
Steps to Reproduce:
Open ioPay and select "Send."
Input a known malicious/scam address (as identified in the attached screenshot).
Enter an amount and proceed to the next screen.
Observed Result: The wallet displays the standard transaction summary with no "High Risk" or "Scam Warning" banner.
Expected Result: A prominent warning notification alerting the user that the recipient address has been flagged for malicious activity.
Supporting Evidence:
I have attached a screenshot showing the transaction screen with the suspicious address where no warning is present.
Note to Support: The address used in my test has been reported on several block explorers and scam databases.
Recommended Fix: Integrate a real-time security API (such as Scam Sniffer, GoPlus Security, or Hapi) to cross-reference recipient addresses against global blacklists before a user confirms a transaction.
Wallet Address: io1tkw393kejmxwnd454twc6020sxcyvh5dxqmren
Device & Environment:
-Operating system: Android 13
-Device model: Redmi Note 10 Pro
Please authenticate to join the conversation.
In Review
New Issue
2 months ago

cryptotestnet
Get notified by email when there are changes.
In Review
New Issue
2 months ago

cryptotestnet
Get notified by email when there are changes.