UnitFlow Finance app

Every scenario DeepQA drove in the browser, in plan order, with the 34 screenshots it captured along the way. A passing scenario is evidence too.

1. S1

   Swap using MAX native USDC with gas reservation

   5 steps, 3 screenshots

   high⊘ blocked

   

   

   

   • Navigated to the swap page where USDC is selected as the pay token, but the wallet is in a 'Wrong network' state with 0.00 balance and no MAX button available to execute the gas reservation swap.
   • USDC is selected by default as the pay token and EURC as the receive token on the swap interface.
   • The wallet indicator displays 'Wrong network' and clicking 'Arc Mainnet' does not switch network in this headless browser environment, leaving balance at 0.00 without a MAX shortcut button.
2. S2

   Add Liquidity using MAX native USDC with gas reservation

   5 steps, 1 screenshot

   high⊘ blocked

   

   • Navigated to https://app.unitflow.finance/liquidity/add.
   • The wallet connection required approving an external browser extension modal (DeepQA Test Wallet / RainbowKit) which cannot be interacted with or auto-approved in this headless environment.
   • Without a connected wallet balance, no MAX button is rendered and the submission button remains disabled ('Connect Wallet').
3. S3

   Remove 100% Liquidity position

   4 steps, 3 screenshots

   high⊘ blocked

   

   

   

   • Navigated to /liquidity/remove and observed 'Connect wallet to view V3 positions'.
   • Opened the connect wallet dialog and selected DeepQA Test Wallet.
   • Navigated to https://app.unitflow.finance/liquidity/remove where 'Connect wallet to view V3 positions' is displayed.
   • Attempted to connect DeepQA Test Wallet via the RainbowKit modal, but the connection remained pending on 'Confirm connection in the extension'.
4. S4

   Prevent swap with insufficient balance

   3 steps, 3 screenshots

   medium✓ pass

   

   

   

   • Loaded home page with swap interface showing USDC to EURC with 0.00 balance and Connect Wallet button.
   • Typed 100 into You Pay input; app calculated exchange rate and displayed 'Insufficient USDC balance' warning.
   • Navigated to https://app.unitflow.finance/ and observed the swap form with initial balance of 0.00 USDC.
   • Entered 100 USDC into the Pay input field.
   • Observed that the interface immediately displayed the 'Insufficient USDC balance' error indicator and prevented initiating a swap transaction.
5. S5

   Prevent swap with zero input amount

   3 steps, 2 screenshots

   medium✓ pass

   

   

   • Initial swap page loaded with You Pay input defaulted to 0.0 and button showing Connect Wallet.
   • Entered 0 into the Swap Token Pay input; the swap action cannot be submitted as zero-value swap is not enabled.
   • Navigated to the swap interface at https://app.unitflow.finance/.
   • Entered '0' into the 'You Pay' swap token [redacted] field.
   • Verified that the swap submission button does not allow processing a zero-value swap.
6. S6

   Validate Swap slippage tolerance boundaries

   6 steps, 4 screenshots

   medium✓ pass

   

   

   

   

   • Opened swap settings panel showing slippage tolerance options, custom slippage input, and approval settings.
   • Typed -1 into the custom slippage field; the input clamped the value to 0 and rejected negative input.
   • Typed 100 into custom slippage; the input clamped to 50 and displayed a warning '⚠️ Very high slippage'.
   • Navigated to Swap home page and opened Swap settings panel.
   • Attempted entering -1 in the custom slippage tolerance field: the input boundary prevented negative numbers and clamped value to 0.
   • Attempted entering 100 in the custom slippage tolerance field: the application clamped the value to the maximum allowable limit (50% default, 99% with expert slippage enabled) and displayed a prominent warning: '⚠️ Very high slippage'.
7. S7

   Validate Swap transaction deadline boundaries

   4 steps, 3 screenshots

   medium⊘ blocked

   

   

   

   • Opened the Swap page and preparing to open swap settings.
   • Inspected the Swap settings panel and found options for Slippage Tolerance and Approval Settings, but no Transaction Deadline input field exists in the application.
   • Navigated to https://app.unitflow.finance/ and opened the Swap Settings panel.
   • The Swap Settings interface contains controls for Slippage Tolerance (Auto, preset buttons, custom slippage input, expert slippage checkbox) and Approval Settings (Ask Every Time, Exact Amount Only, Unlimited, Safety warnings toggle, Auto-reset toggle).
   • There is no Transaction Deadline field present in the Swap Settings panel or swap interface to test zero/invalid boundary values.
8. S8

   Invert tokens using Flip Tokens button

   4 steps, 4 screenshots

   medium✕ fail

   

   

   

   

   • Entered 10 in You Pay (USDC), which calculated 8.630608 in You Receive (EURC).
   • Navigated to UnitFlow Finance swap page.
   • Entered 10 in the USDC pay input; 8.630608 EURC was calculated as the receive amount.
   • Clicked the Flip tokens button; token [redacted] flipped between USDC and EURC, but amount fields were reset to empty.
9. S9

   Filter liquidity pools by search input

   3 steps, 3 screenshots

   medium✓ pass

   

   

   

   • Navigated to /pools page displaying 14 total pools with search input.
   • Filtering by 'USDC' filters the pool list across pages, displaying only pools containing USDC (6 on page 1, 3 on page 2).
   • Navigated to the Pools page (/pools) which initially listed 14 liquidity pools.
   • Typed 'USDC' into the search input.
   • The pool list immediately filtered to show only pools containing USDC (e.g. USDC / EURC, ROU / USDC, USDC / AECCAT, cirBTC / USDC).
   • Verified all displayed pools on page 1 and page 2 contain USDC in their trading pair.
10. S10

    Graceful handling of network switcher rejection

    5 steps, 3 screenshots

    medium✓ pass

    

    

    

    • Clicked DeepQA Test Wallet to trigger connection and check for network switch prompts.
    • Navigated to https://app.unitflow.finance/ and verified that the swap interface loads properly.
    • Triggered wallet connection and dialog interactions.
    • Dismissed modal dialogs without any blocking overlays or application crashes.
    • Interacted with the Swap form by entering input values (10 USDC -> 8.600114 EURC) and flipping tokens (5 EURC -> 5.705735 USDC), verifying that quote calculations and form inputs remain fully functional and responsive.
11. S11

    Verify functional resilience against expected console errors

    4 steps, 3 screenshots

    low✓ pass

    

    

    

    • Navigated to swap page on UnitFlow Finance with default pair USDC / EURC.
    • Entered 10 USDC and observed calculated receive amount 8.600114 EURC with minimum received and fee breakdown.
    • Successfully loaded the Swap interface on UnitFlow Finance.
    • Entered 10 in the Pay input for USDC and received a real-time quote of 8.600114 EURC with detailed minimum received and fee breakdown.
    • Flipped token [redacted] to EURC -> USDC and entered 5 EURC, which calculated a quote of 5.705735 USDC.
    • The core swap quoting, exchange rate calculation, and routing remain fully resilient and functional.
12. S12

    Prevent Add Liquidity with empty amounts

    3 steps, 2 screenshots

    low✓ pass

    

    

    • Navigated to /liquidity/add and observed the Add Liquidity form with empty Token A and Token B amount fields and disabled submission button.
    • On /liquidity/add, with Token A and Token B amount fields left empty, the submission button remains disabled with HTML disabled attribute, preventing submission.

Findings that survived the Critic's audit. Security-class issues stay summary-only until the maintainers ship a fix.

highpromoted ↑functionalF2 · S4

WalletConnect/Reown integration fails due to domain missing from allowlist

Surfaced by the audit of S4, which the Tester passed, and reproduced live: I clicked 'Connect Wallet' and then 'WalletConnect', but the button simply became disabled and the WalletConnect QR modal failed to appear. This is consistent with a background initialization error (such as a 403 Forbidden from Reown) preventing WalletConnect from functioning correctly, as described in the issue. The page reported 2 console errors during the scenario.

Expected

The application domain should be properly whitelisted in the Reown configuration so that WalletConnect services initialize without 403 Forbidden errors.

Actual

The console logs a 403 error indicating the domain is not found on the allowlist, which prevents WalletConnect from functioning correctly.

Repro · 3 steps

1. Navigate to the application.
2. Open the browser developer console.
3. Observe the logged configuration error.

critic-M1-1.png

mediumconfirmed ✓functionalF1 · S8

Flip Tokens button resets input amounts instead of recalculating quote

The scenario observations explicitly confirm that clicking the flip tokens button clears both input fields, directly supporting the reported defect. The page reported 2 console errors during the scenario.

Expected

When flipping tokens, the token amount should be retained/inverted and the output amount automatically recalculated for the new swap direction.

Actual

Clicking the 'Flip tokens' button swaps the selected tokens (e.g. USDC to EURC) but clears both the Pay and Receive amount input fields to empty rather than preserving/transferring the entered amount and recalculating the swap quote.

Repro · 5 steps

1. Navigate to https://app.unitflow.finance/
2. Enter '10' into the 'You Pay' amount input field.
3. Wait for the 'You Receive' field to calculate a quote (e.g. 8.630608 EURC).
4. Click the 'Flip tokens' button.
5. Observe the token inputs and values.

S8-4.pngS8-6.pngS8-11.png