catchain / tonscan Goto Github PK
View Code? Open in Web Editor NEWThe Open Network explorer
Home Page: https://tonscan.org
License: Other
The Open Network explorer
Home Page: https://tonscan.org
License: Other
Functional
Information is failed to load.
CORS error is displayed in Developer Console.
Contract data/source must be shown.
Medium
Desktop: Windows 10: Chrome v114.0.5735.199 (latest), Firefox v115.0 (latest)
Below are request/response dumps.
I think browsers expect CORS headers to be present in 301 redirects too.
Creator of the open source Jetton Deployer here.
We have chosen to store jettons deployed with our tool on-chain.
Quoting from our readme on the issue:
Where is this metadata stored? - The Jetton standard supports storing metadata either on-chain or in an off-chain URL (a JSON file hosted somewhere). It is our belief that the best practice is storing metadata on-chain. Why? Let's explore the alternatives:
On-chain - On-chain data is immutable, users can be guaranteed that important fields like the symbol will not change without their consent. On-chain data is also guaranteed to always be available. This deployer always stores metadata on-chain.
Off-chain IPFS (ipfs://
URL) - IPFS data is immutable so it's safe like on-chain. But IPFS data is not guaranteed to always be available. Availability depends if someone is willing to pin the data (similar to seeding in torrents). If this someone goes out of business or suffers downtime, token metadata will disappear. This is an unnecessary risk in our eyes.
Off-chain website (https://
URL) - This is by far the worst option. The owner of the website could change the metadata without user consent (not necessarily on purpose if the website is hacked). The website can also be taken down and the metadata will disappear. Users should never invest money in tokens that have their metadata stored this way.
What about the Jetton Logo URI, if it's stored on a website, can't it change? Yes, it can change and this is a feature. We believe that logos can go through rebranding without putting users at risk. Satoshi Nakamoto didn't design the current logo of Bitcoin when he wrote the initial code.
Tonscan is already able to read such jettons, but not their metadata:
Example on tonscan
Example on jetton.live
An example code for parsing such metadata can be found here
We believe it would be an important addition to support this.
Functional
The domain "pool.ton", which is owned by the address EQCNQUAB2kevusCz92kZiNWJVzjtnotO7c2MQ_4VZY7z1XJW (see https://dns.ton.org/#pool) should be listed.
High
Desktop (please complete the following information):
No response
Functional
The amount of TONNEL jettons that was sent is not shown in the history, although other transactions from 2024-01-02 show amount of TONNEL jettons received. It seems like only received amounts of jettons are shown, not sent amounts. The jetton wallet does not show it either.
Look at the wallet with tonviewer to see that the amount of TONNEL jettons sent with the 400.15 TON was approximately 2500.63.
Tonscan should show the exact amount of TONNEL jettons sent in the transaction (and the amount of LP jettons received).
Vulnerability
tonscan.org
No response
Functional/UI/UX
An invalid address message appears.
I think this is a redundant message. The address EQADXaOqEmIzxvJBN9oQeaNYEA9Q5EBIYxQUYF7uM6InWJCr is valid.
Perhaps there should be a warning about a large number of requests.
Low
Desktop (please complete the following information):
No response
This API is used for getting info about contracts, such as:
UI/UX
Extra table renderings when there is nothing.
When loading tabs, extra tables appear and immediately disappear. (tabs: History, NFTS)
In serious applications, this should not work.
Fix the application life cycle (False table views should not flicker)
Critical
Desktop (please complete the following information):
No response
UI
Search working if:
4. Resize browser window or open tonscan.org from mobile browser
5. Enter domain again
6. Get searched domain
7. Resize browser window back
8. Search now working on this domain
Get error: Domain misconfigured or does not exist
Show searched domain name.
Medium
Desktop (please complete the following information):
No response
Good morning,
one of the key feature of a blockchain is that it is transparent and can be analysed by anyone. However, in the case of the TON blockchain, which is in the top 15 according to CMC, and from a technological point of view is the most promising one, it seems impossible to know what the statistics are.
CMC
-Circulating Supply: 3,431,892,088
-Total Supply: 5,047,558,528
Tonscan
-Circulating Supply: 3,414,166,606
-Total Supply: 5,047,558,528
Tontech
-Circulating Supply: 3,436,986,739
-Total Supply: 5,089,155,274
TonStat
-Circulating Supply: ?
-Total Supply: 5,089,086,273
CG
-Circulating Supply: 1,473,591,410
-Total Supply: 5,057,362,773
Is anyone able to explain the reason for these inconsistencies, despite the source being the same and transparent?
Thank you
Functional
Preconditions:
Steps:
The user sees an image of their NFT
White background displayed instead of image.
Low
Device
Desktop (please complete the following information):
OS: [Windows]
Browser [chrome]
Version [105.0.5195.127]
The bug reproduced on three different addresses
If user move to the NFT page, the image will be displayed on NFT page
Functional
Visit
Some NFT cards are broken and error is logged on the console.
It should specify or completely hide the card if img is not available to show.
Low
Desktop (please complete the following information):
No response
Functional
Precondition: User should have an available TON wallet address
Infinity loading appears after clicking on "Contract". Status 500 appears for "source" GET request
"Contract" tab is working
Medium
Desktop:
Smartphone:
Functional
4 дня ждал получения криптовалюты TON
не приходит
Vulnerability
Desktop (please complete the following information):
Smartphone (please complete the following information):
No response
Functional
The address EQBer9OO72xjjbqbVT_8clEBd9eLX90T51f574KiHpCNWVYq owns the domains spsp.ton (https://dns.ton.org/#spsp) and trinity.ton (https://dns.ton.org/#trinity). Both should be listed under the NFTs tab.
High
Desktop (please complete the following information):
No response
Localization
I used tonscan.org for several months and it showed timestamps like 2023-07-23 15:32:48 that can be copied and pasted into spreadsheets. But some time today it stopped showing it. Instead it shows some garbage like Oct 19, 2023, 07:40 PM. That string is much harder to interpret (seconds are missing completely!) and breaks sorting of dates.
The site has no documentation so I can not read what settings are needed in the browser to get proper timestamps from tonscan.org.
Oct 19, 2023, 07:40 PM
2023-10-19 19:40:??
High
Desktop:
Also tested on Firefox/Linux but the timestamps never worked there.
No response
Other
#49
(Supplemented the ticket with transcripts. To make it clearer)
Not affiliated with #41
The ticket indicates bugs in the implementation of these two sections:
Move the ticket to the open state
Critical
ALL DEVICES
No response
Hi
Give,please, some description about .env
What does means sentry and what is lite ? Liteclient?
This repo only for ton? For freeton? Everscale?
Functional
Explorer must provide actual information. See https://tonapi.io/jetton/EQCE0Em6PpAUzfDiV66DvzTWnYLpVyn-hJHsGE6CR-L82Jxx
High
Desktop (please complete the following information):
No response
UI
If the NFT is for sale, the explorer will say that the owner is a sale-contract when you open the NFT page. However, the NFT will also display at the owner's address.
The user gets different information by opening different pages of the explorer.
This does not depend on the specific marketplace, the same is observed on Disintar and GetGems.
It is necessary to specify the information and display in more detail the specific owner of the NFT and the address of the sale contract like this:
Medium
Functional
Display the collection or explain why this NFT collection can't be displayed.
High
Desktop (please complete the following information):
No response
UX
Both branded and regular items links to same "EQCD...qB2N" address, which is an wallet linked from foundation.ton DNS NFT.
A link to DNS NFT itself (EQB43-VCmf17O7YMd51fAvOjcMkCw46N_3JMCoegH_ZDo40e
address) should be searchable too.
For example, search helper may show two regular lines - one for assigned wallet, other for NFT itself.
Medium
Desktop, Windows 10, Firefox v113. But I believe the text above is valid for any device :)
No response
Performance
The fee paid by the wallet for the transaction is not shown.
Fee is shown.
High
Tested both Chrome on Microsoft Windows and Firefox on Linux.
It worked until some time yesterday.
Functional
Look at any wallet at tonscan.org.
Only addresses are shown in the From and To fields.
Domain names are shown instead of addresses when they exist.
Medium
Linux and Microsoft Windows.
It may be because addresses are shown starting with UQ instead of EQ. Maybe it will be fixed when everyone has somehow reassigned their domain name to the UQ version of the address. But it would be better if it just worked immediately.
Other
I see 3 contracts and can't understand if they real or fake
I want to see lable "valid" or "scam" for official jetton contracts like eth, usdt, mantle and so on
Low
Any device.
It should be great if you create group or support bot in telegram to have an opportunity to contact with you.
UX
Different fees are shown for the same transaction.
It seems like tonscan shows two different fees for every transaction (even for the simplest form of transaction; from one wallet to another), as if one is what the sender pays and the other is what the recipient pays. But people say that only the sender pays transaction fee. Maybe they lie?
If only the sender pays for a transaction, show the same fee no matter where the transaction is shown.
If both sender and receiver pays for a transaction, make that clear in the user interface. Maybe a tooltip when the mouse cursor is over the word "Fee", showing the text "Paid by sender" or "Paid by recipient". (Just make sure that the tooltip does not get in the way if the user tries to select and copy the fee amount.)
Medium
Browser in Microsoft Windows or Linux.
No response
UI
Example: https://tonscan.org/address/EQCkvks2A9kMO-7klPgwXn_M9jKyxqvcC2Y5TqAo3B8svRGN
This bug opens up opportunities for scamming. (For example, selling fake domains)
The contract will appear as domainname.ton
The user is expected to be notified that the contract is not a real domain in the .ton domain zone
Medium
All browsers
No response
UI
Some of TON addresses on tonscan.org has its name tags, e.g., this one, but if the address having the name tag starts with "k" it will not display.
"kf8guqdIbY6kpMykR8WFeVGbZcP2iuBagXfnQuq0rGrxgE04": "Large Giver 1"
Instead of custom name tag, a user see the unreadable address.
The name tags should be displayed
Low
it does not depend on device type
Solution:
Change starting with "k" addresses to starting with "E".
kf8guqdIbY6kpMykR8WFeVGbZcP2iuBagXfnQuq0rGrxgE04 -> Ef8guqdIbY6kpMykR8WFeVGbZcP2iuBagXfnQuq0rGrxgPay
Functional
Both contracts should be recognized as .ton domain contracts.
High
Desktop (please complete the following information):
No response
UI
Case 1 (with slash):
Case 2 (with plus):
Case 1.
The hash with underscore, but on the backend without underscore:
Case 2.
The hash with minus, but on the backend without minus:
Case 1.
The hash must be with a slash, as on the backend (for example, if you reveal detailed information):
Case 2.
The hash must be with a plus, as on the backend (for example, if you reveal detailed information):
Medium
Desktop:
After some investigation, I may be guessing that there is can be different behaviour in getTransactions
function
(https://github.com/catchain/tonscan/blob/master/src/js/api.js#L58) and getTransaction
function (https://github.com/catchain/tonscan/blob/master/src/js/api.js#L103).
There is a feeling that as if the code in the repository has not been updated. For example, I didn't find any new API methods (for example, getTransactionsByAddress
). And so it's harder to guess what could have gone wrong.
UI
Visit:https://testnet.tonscan.org/jetton/EQBA8Rhbop8xLEC_zJ3FRw6MrnsvYFV6r0bsbq8BWSClH_Il
Here is the result:
Yet still api returns correct result:
https://testnet.api.ton.cat/contracts/jetton/EQBA8Rhbop8xLEC_zJ3FRw6MrnsvYFV6r0bsbq8BWSClH_Il
Pretty much expect api values to display in the UI.
Medium
Screenshots taken in Mozilla Firefox 104.0.2 but tested on several other devices none of which displayed correcty.
BTW:It used to work in the past as far as i remember.
Functional
Almost every time you look through one collection you will get at least one duplicate item and one will be lost.
Looking through the whole collection without any duplicates or lost NFT.
Critical
Desktop (please complete the following information):
OS: Windows 10 Pro
Browser Google Chrome
Version 105.0.5195.127
Perhaps, this behavior has a connection with how the offset is requested. For example, when I've got duplicates in the Ton Whales list,
query history was like
Response bodies for 60-82 items:
response content.zip
Video:
UI
The first NFT item always fails to load even if the "Try again" button is clicked or the page is reloaded.
All NFT items should load.
High
Desktop (please complete the following information):
The NFT in question seems to be inactive (https://tonscan.org/address/EQDSnCuPTa73vLR91L1pfy32ivel-jCulWFMQp40cARgXtCW). Anyhow, it should not be shown as a persistent error.
Functional
It looks like actual backend - https://testnet.api.ton.cat/ - is failed to provide results, it returns net::ERR_SSL_VERSION_OR_CIPHER_MISMATCH. May be SSL issue...
Info about contracts on testnet is failed to load
Info about contracts
Medium
Desktop (please complete the following information):
No response
Functional
No image for https://tonscan.org/nft/EQCjTp_1ayQs88kDS27MmE2L1qsrfnBJXc1gB7utOzt7bN9h
Correct image displayed
Medium
OS: macOS
Browser chrome
Version 105
No response
Functional
Some of NFTs' icons couldn't display. These icons are impossible to see until the whole page will be refresh.
Display all NFTs' icons of collection.
Medium
Desktop 1:
OS: Windows 10 Pro
Browser Google Chrome
Version 105.0.5195.127
Desktop 2:
OS: macOS 12.2.1
Browser Safari
Smartphone 1:
Device: Samsung Galaxy M31
OS: Android 12
Samsung Internet
Version 18.0.058
Smartphone 2:
Device: iPhone 12
OS: iOS 15.6.1
Browser Safari
Version 15.6.1
1.Records from test environments.
Microsoft Windows test video:
MacOS test video:
Android test video:
iOS test video:
UI
Aler looks outdated. Does not inform the user about what format should be. (In this case, it is not clear from which network the address can be entered)
Low
Desktop (please complete the following information):
No response
You are not displaying NFT GIFs.
Example: https://tonscan.org/nft/EQB4H3VygP7Y7PUMJdL10duuvGiCjB1qJ8oaLbFjVSA5PL0K
UX
20000 Jetton tokens show in history as 20000 TON.
The 20000 Jetton tokens are displayed differently, so I understand that these are just tokens and not TON.
Medium
Desktop
No response
Functional
Sometimes on tabbar you got 500 error from api with this response from server:
No working liteservers with ls_index=None, archival=None
And you got freezed skeleton without any modal or snackbar with error.
If problem with api from other services then need show for user modal card or snackbar with error
High
OS: macOS
Browser chrome
Version 105
Example url with 500 error
https://api.ton.cat/v2/contracts/address/EQCb5wPBb7NoRUe3yds_ip6toFajonLcKKlOaafr4DjIEXat/source
UX/Functional
Contract block not loading
The contract block is loading
Critical
Desktop (please complete the following information):
Basically, it's a server error. Most likely will work from any device.
An additional check is needed to see if the server's hard drive may be filled with logs.
No response
Functional
The auction has already ended (see https://dns.ton.org/#broadcaster).
Tonscan should not show that the domain is open for auction.
High
Desktop (please complete the following information):
No response
UI
0 ≈ 0
Learn more about regular math with 0. Correct if you can.
It might be more correct
(тождество)
But I think that in this case it will be enough to put =
or enter your operator for this case
Low
Desktop (please complete the following information):
Most likely it will be reproduced on all devices.
No response
Functional
Preconditions:
Steps:
Clicking on the Contract tab displays a preloader that does not change to wallet address information
The Contract tab displays information about the wallet address
High
Device
Desktop (please complete the following information):
OS: [Windows]
Browser [chrome]
Version [105.0.5195.127]
I tried to check on other addresses where there is any activity and I see that there is information. Below example on TON Diamond
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.