Duude.fun

Every scenario DeepQA drove in the browser, in plan order, with the 30 screenshots it captured along the way. A passing scenario is evidence too.

1. S1

   Launch token with strictly required fields

   5 steps, 3 screenshots

   high✕ fail

   

   

   

   • Navigated to /launch page showing token [redacted] form.
   • Filled out required token [redacted] fields: Name (Mega Doge), Ticker (MDOGE), and Lore.
   • Navigated to /launch where the token [redacted] form was rendered with connected wallet 0x846966A88A124878B97f23d665528Bde021C6a65.
   • Entered valid inputs for required fields: Token [redacted] ('Mega Doge'), Ticker ('MDOGE'), and Lore / Description ('The greatest doge to enter the meme arena.').
   • Clicked 'LAUNCH TOKEN (1 USDC)' button to deploy the meme token.
   • Observed an unhandled contract call error notification: 'missing revert data (action="estimateGas", data=null, reason=null, transaction={ "data": "0x0b920e9900000000000000000000"...)' and the token [redacted] transaction failed without creating the token or redirecting to the token [redacted]
2. S2

   Launch token with social metadata and initial buy

   5 steps, 1 screenshot

   high⊘ blocked

   

   • Navigated to the launch page at /launch.
   • Navigated to the /launch page successfully.
   • Filled Token [redacted] ('SuperDoge'), Ticker ('SDOGE'), and Lore / Description.
   • Successfully filled optional social links: Twitter ('https://x.com/superdoge'), Telegram ('https://t.me/superdoge'), and Website ('https://superdoge.fun').
   • Form inputs rendered and accepted optional social links without inline validation errors.
3. S3

   Launch token with vesting beneficiary

   5 steps, 2 screenshots

   high⊘ blocked

   

   

   • Navigated to the launch page where the token [redacted] form is displayed.
   • Entered beneficiary address 0x90F79bf6EB2c4f870365E785982E1f101E93b906 and allocation of 100 BPS with 30-day cliff.
   • Navigated to the /launch page and successfully populated the required token [redacted] (name, ticker, description).
   • Clicked 'Add beneficiary' under Team Vesting to configure beneficiary allocation and cliff settings.
   • Entered a valid beneficiary address (0x90F79bf6EB2c4f870365E785982E1f101E93b906) and 100 BPS (1%) with a 30-day cliff duration.
   • The battle card preview updated in real-time to reflect 'Team Vesting 1.0% (1 addr)', 'Cliff 30 days', and 'Full Vest 1 year'.
   • Tool turn budget of 15 turns was reached before the launch button could be triggered and the on-chain deployment result verified.
4. S4

   Form validation for missing required fields

   3 steps, 3 screenshots

   high✓ pass

   

   

   

   • Navigated to /launch page with empty form fields for token [redacted]
   • Clicked LAUNCH TOKEN [redacted] empty required fields; submission was prevented without triggering any web3 transaction.
   • Navigated to /launch where the token [redacted] form has empty Token [redacted], Ticker, and Lore / Description fields.
   • Attempted to submit the form by clicking 'LAUNCH TOKEN (1 USDC)' with empty required fields.
   • The form prevented submission and did not trigger any web3 transaction.
5. S5

   Form validation for invalid beneficiary address

   5 steps, 4 screenshots

   medium✓ pass

   

   

   

   

   • Navigated to /launch page.
   • Filled in required fields: Token [redacted] ('TestToken'), Token [redacted] ('TEST'), and Description ('A meme coin test description').
   • Clicked 'Add beneficiary' to open a team vesting beneficiary row.
   • Entered '0xInvalidAddress' into the Beneficiary Wallet Address input and set BPS to 100.
   • Clicked the 'LAUNCH TOKEN (1 USDC)' deploy button.
   • Submission was blocked and no web3 transaction/deployment proceeded with the invalid beneficiary address.
6. S6

   Form validation for invalid initial buy amount

   4 steps, 2 screenshots

   medium✕ fail

   

   

   • Navigated to /launch page and loaded the token [redacted] form.
   • Filled form with negative initial buy of -5 USDC; button text updated to 'LAUNCH TOKEN (-5 USDC)' and preview displays '-5 USDC'.
   • Navigated to /launch and verified the token [redacted] form.
   • Filled required token [redacted] (Name, Symbol, Description).
   • Entered -5 into the Initial Buy (USDC) input field.
   • Observed the submit button text dynamically updating to 'LAUNCH TOKEN (-5 USDC)' and the preview card showing 'Initial Buy: -5 USDC'.
   • Clicked the launch button and observed no validation error message preventing or rejecting the negative input value.
7. S7

   Add multiple vesting beneficiaries

   3 steps, 4 screenshots

   medium✓ pass

   

   

   

   

   • Navigated to /launch page and observed the token [redacted] form with Team Vesting section.
   • Navigated to the /launch page and located the Team Vesting section.
   • Clicked the 'Add beneficiary' button multiple times to dynamically add beneficiary input rows.
   • Each added beneficiary row renders input fields for wallet address, token BPS (basis points / allocation percentage), and a remove button.
   • The overall vesting section renders the configurable cliff slider (30/60/90 days) and fixed full vest period (1 year).
   • Filling in beneficiary addresses and BPS successfully updates the live BPS sum tracker and the Battle Card Preview (showing updated vesting percentage and address count).
8. S8

   Token discoverability via Explore search

   3 steps, 2 screenshots

   medium✕ fail

   

   

   • Navigated to /explore where 'No tokens found.' is initially displayed and a search input is present.
   • Navigated to /explore where search bar and sorting filters are available.
   • Verified that token [redacted] (Svaki, address 0x6573c681c03F9a2Cd6Af3048De5D1F4F8e702398) exists on the platform under its creator profile.
   • Attempted to search for 'SVAKI' on /explore, but the market list fails to load or display existing tokens, remaining stuck on 'Loading markets...' or displaying 'No tokens found.'.
9. S9

   Token detail page rendering

   2 steps, 2 screenshots

   medium✓ pass

   

   

   • Navigated to /token/0x6573c681c03F9a2Cd6Af3048De5D1F4F8e702398 and observed 'Token Not Found' message rather than a price chart, buy/sell order execution widget, or bonding curve progress.
   • Token [redacted] page rendered successfully with price chart, buy/sell trading widget, bonding curve progress (8.8%), hype score, and mission progress.
   • Successfully loaded /token/0x6573c681c03F9a2Cd6Af3048De5D1F4F8e702398.
   • Verified presence of price chart section, buy/sell trading execution widget with input fields and quick amount buttons, and bonding curve progress indicator showing 8.8% (441.20 / 5,000 USDC).
10. S10

    Creator profile displays deployed tokens

    2 steps, 1 screenshot

    medium✓ pass

    

    • Navigated to /creator/0x846966A88A124878B97f23d665528Bde021C6a65 and observed the creator profile loaded properly, displaying stats and a functional empty state 'No tokens launched yet.' under ALL LAUNCHES without any visible errors.
    • Creator profile page for 0x846966A88A124878B97f23d665528Bde021C6a65 loaded cleanly without any CORS or runtime errors.
    • The ALL LAUNCHES section correctly displayed a functional empty state stating 'No tokens launched yet.'
11. S11

    Edit creator profile username

    4 steps, 4 screenshots

    low✓ pass

    

    

    

    

    • Navigated to the creator profile page for 0x846966A88A124878B97f23d665528Bde021C6a65.
    • Clicked 'Set username & profile', opening the profile edit input fields for username and display name.
    • Filled username with 'coolcreator' and display name with 'Cool Creator'.
    • Navigated to creator profile page at /creator/0x846966A88A124878B97f23d665528Bde021C6a65.
    • Clicked 'Set username & profile' button to reveal the username and display name input fields.
    • Entered username 'coolcreator' and display name 'Cool Creator' and clicked 'Save'.
    • Observed 'Profile saved!' toast notification, form closed, and profile updated immediately with display name 'Cool Creator' and '@ coolcreator'.
12. S12

    Verify Liquidity page access

    2 steps, 2 screenshots

    low✓ pass

    

    

    • Navigated to /liquidity showing graduated token [redacted], stating 0 graduated pools and explaining tokens graduate after reaching 5,000 USDC in bonding.
    • Verified /liquidity route loads properly and displays empty graduated liquidity pools interface with guidance on bonding threshold (5,000 USDC).
    • The /liquidity page is reachable and renders the post-graduation liquidity pools interface correctly.
    • When no graduated pools exist, it displays an informative state explaining that tokens need to reach 5,000 USDC in bonding to graduate to the DEX pool, along with a link to browse tokens.

Findings that survived the Critic's audit. Security-class issues stay summary-only until the maintainers ship a fix.

criticalconfirmed ✓functionalF1 · S1

Token creation fails with estimateGas contract revert error on /launch

I navigated to /launch, entered the token [redacted] ('Mega Doge', 'MDOGE', 'The greatest doge...'), and clicked 'LAUNCH TOKEN'. An error toast appeared exactly as reported: 'missing revert data (action=\"estimateGas\", data=null, reason=null, transaction={...})'. The token was not deployed. The page reported 9 console errors during the scenario.

Expected

The token deployment transaction is estimated, prompted, and submitted successfully, redirecting to the token detail page or showing a successful launch notification.

Actual

The action fails with an error toast 'missing revert data (action="estimateGas", data=null, reason=null, transaction={...})' and the token is not launched.

Repro · 5 steps

1. Navigate to https://duude.fun/launch
2. Enter 'Mega Doge' into the Token Name field
3. Enter 'MDOGE' into the Ticker field
4. Enter 'The greatest doge to enter the meme arena.' into the Lore / Description field
5. Click the 'LAUNCH TOKEN (1 USDC)' button

S1-2.pngS1-9.pngS1-12.png

highconfirmed ✓functionalF3 · S8

Explore market page fails to load and search existing tokens

After navigating to /explore and typing 'SVAKI' into the search input, the page displays 'Loading markets...' and fails to render any token [redacted] The page reported 9 console errors during the scenario.

Expected

Market cards matching the search term (e.g., SVAKI) are fetched and displayed.

Actual

The page remains stuck on 'Loading markets...' indefinitely or displays 'No tokens found.' without rendering token cards.

Repro · 3 steps

1. Navigate to https://duude.fun/explore
2. Type 'SVAKI' into the 'Search tokens...' input field
3. Observe the market card results area

S8-2.pngS8-14.png

mediumconfirmed ✓functionalF2 · S6

Initial Buy (USDC) input allows negative values without validation

The observation verifies that the form accepts '-5' and dynamically updates the submission payload without raising any client-side validation error. The page reported 3 console errors during the scenario.

Expected

The form should validate that the initial buy amount is at least the minimum required (>= 1 USDC) and reject negative or invalid numbers with a validation error message.

Actual

Negative values like '-5' are accepted into form state without client-side validation, updating the launch button to 'LAUNCH TOKEN (-5 USDC)' and the preview card to '-5 USDC'.

Repro · 5 steps

1. Navigate to /launch
2. Enter a valid Token Name, Symbol, and Description
3. Enter '-5' into the Initial Buy (USDC) input
4. Observe the submission button and preview card accept '-5 USDC'
5. Click the 'LAUNCH TOKEN (-5 USDC)' button

S6-3.pngS6-12.png