E2E Test Dapp

Send Eth

Send (Mobile) Send with Deeplink

---

Piggy bank contract

Deploy Contract Deposit Withdraw

Contract Status: Not clicked

---

Failing contract

Deploy Failing Contract Send Failing Transaction

Failing Contract Status: Not clicked

---

Multisig contract

Deploy Multisig Contract Send ETH to Multisig Address

Multisig Contract Status: Not clicked

ERC 20

Token(s):

Create Token Add Token(s) to Wallet Transfer Tokens (Mobile) Transfer Tokens with Deeplink

---

Approve Tokens (Mobile) Approve Tokens with Deeplink Increase Token Allowance

---

Get Allowance

Allowance amount:

---

Transfer From Tokens

---

Transfer Tokens Without Gas Approve Tokens Without Gas

ERC 20 methods result:

ERC 721

Token(s):

Deploy

ERC 721 methods result:

ERC 1155

Token(s):

Deploy

ERC 1155 methods results:

EIP 747

EIP 747:

PPOM - Malicious Transactions and Signatures

We know we are vulnerable if any of these Transactions/Signatures are not flagged as Malicious

Transactions

Malicious Eth Transfer Malicious ERC20 Transfer (USDC) Malicious ERC20 Approval (BUSD) Malicious Contract Interaction Malicious Set Approval For All

Signatures

Malicious Permit Malicious Trade Order Malicious Seaport

PPOM - Malicious Batching and Queueing

We know we are vulnerable if any of these Transactions/Signatures are not flagged as Malicious

Transactions

Send Eth Malicious x10 Batch Send Eth Malicious x10 Queue

Signatures

Sign Malicious x10 Batch Sign Malicious x10 Queue

---

PPOM - Malicious Deeplinks

(Mobile) Malicious Eth Transfer With Deeplink (Mobile) Malicious ERC20 Transfer With Deeplink (Mobile) Malicious ERC20 Approval With Deeplink

PPOM - Malicious Warning Bypasses

We know we are vulnerable if any of these Transactions/Signatures are not flagged as Malicious

Transactions

Malicious Eth Transfer With Odd Hex Data Malicious ERC20 Approval With Odd Hex Data Malicious Eth Transfer Without 0x Prefix for Hex Value

Signatures

Malicious Permit with Padded chainId Malicious Permit with Integer Address

Eth Sign

Sign

Result:

Personal Sign

Sign

Result:

Verify

eth-sig-util recovery result:

personal_ecRecover result:

Sign Typed Data

Sign

Result:

Verify

Recovery result:

Sign Typed Data V3

Sign

Result:

Verify

Recovery result:

Sign Typed Data V4

Sign

Result:

Verify

Recovery result:

Sign Permit

Sign

Result:

r:

s:

v:

Verify

Recovery result:

Sign In With Ethereum

Sign In With Ethereum Sign In With Ethereum (w/ Resources) Sign In With Ethereum (Bad Domain) Sign In With Ethereum (Bad Account) Sign In With Ethereum (Malformed)

Result:

Malformed Signatures

Invalid Type Empty Domain Extra Data not Typed Invalid Primary Type No Primary Type Defined Invalid Verifying Contract Type

Result:

Malformed Transactions

Invalid Value Type (string) Invalid Transaction Type (not supported) Invalid Recipient (string) Invalid Gas Limit (string) Invalid Max Fee Per Gas (string)

Result: