[Eco Bounty] IoTeX Bridge Accepts Extremely Small ETH Amounts (No Minimum Validation)

Target: https://bridge.iotex.io/
Feature: Token Amount Input (Bridge Form)
Category: Input Validation / Transaction Logic
Severity: Medium


Summary

The IoTeX Bridge does not enforce a minimum transfer amount for ETH.
Users can input extremely small values (e.g., 0.00000000000000001 ETH) and proceed, even though such amounts are below gas fees and practically non-transferable on the blockchain.


Steps to Reproduce

  1. Navigate to https://bridge.iotex.io/.

  2. Choose the ETH token for bridging.

  3. In the Amount field, enter:

    0.00000000000000001 
  4. Observe that the input is accepted as valid and you can proceed to the next step.


Expected Result

The platform should reject or warn about excessively small transfer amounts (e.g., below 0.001 ETH), showing a message such as:

“Amount too low — minimum transfer is 0.001 ETH.”


Actual Result

The input is accepted without validation.
User can attempt to bridge a non-viable amount (below transaction gas cost), potentially leading to failed or stuck transactions.


Impact

  • Users may lose gas fees if they attempt to bridge untransferable amounts.

  • Poor user experience due to lack of guidance.

Possible smart contract waste or backend processing errors.

Wallet Address: io1tkw393kejmxwnd454twc6020sxcyvh5dxqmren

Device & Environment:

-Operating system: Windows 11 Pro

-Device model: A520MHP

Please authenticate to join the conversation.

Upvoters
Status

In Progress

Board
💡

New Issue

Date

4 months ago

Author

cryptotestnet

Subscribe to post

Get notified by email when there are changes.