swaparc

Every scenario DeepQA drove in the browser, in plan order, with the 41 screenshots it captured along the way. A passing scenario is evidence too.

1. S1

   Connect wallet and dismiss testnet notice

   4 steps, 4 screenshots

   high✓ pass

   

   

   

   

   • Initial load displays the 'TESTNET COMPLETE!!!' modal notice with 'Explore the testnet app anyway' button.
   • Dismissed the testnet completion modal and revealed the main landing page.
   • Clicked CONNECT button which revealed 'Connect via Wallet' and 'Connect via Gmail' options.
   • Wallet connected successfully; active account 'Arc Testnet · 0x28C2...39AF' is displayed in the header.
   • Dismissing the testnet completion modal by clicking 'Explore the testnet app anyway' cleanly removed the overlay and unlocked the interface.
   • Clicking 'CONNECT' displayed options for 'Connect via Wallet' and 'Connect via Gmail'.
   • Clicking 'Connect via Wallet' connected the wallet and updated the header button to show the network and account address 'Arc Testnet · 0x28C2...39AF'.
2. S2

   Execute standard token swap

   4 steps, 4 screenshots

   high⊘ blocked

   

   

   

   

   • Navigated to Swap, configured USDC to EURC with amount 10, and submitted Swap which displayed failure feedback indicating USDC balance could not be read / RPC unavailable without connected wallet.
   • Navigated to the Swap page where USDC (sell) and EURC (buy) were configured.
   • Entered amount '10' in the Sell input and verified quote calculations updated (Expected Output: ~7.47 EURC).
   • Clicked Swap, which triggered an execution attempt and provided error feedback: 'Swap failed: Could not read USDC balance. Public RPC may be down — wait a second and retry.'
3. S3

   Swap MAX amount with USDC gas reservation

   4 steps, 4 screenshots

   high✕ fail

   

   

   

   

   • Viewed landing modal 'TESTNET COMPLETE' and will click 'Explore the testnet app anyway'.
   • Navigated to Swap view. The Pay token is already USDC by default. Checking wallet connection.
   • Triggered Max button on USDC: input field was populated with 2.9926, while displayed token [redacted] shows 2.9926.
   • Navigated to the Swap interface with USDC selected as the pay token.
   • Connected wallet with address 0x28C2...39AF which holds 2.9926 USDC total balance as shown in the Mini Wallet profile.
   • Triggered the 'Max' balance shortcut button on the Swap page for USDC.
   • The input field was populated with the exact full balance 2.9926 USDC rather than reserving funds for gas.
4. S4

   Create PrivPay payroll batch

   5 steps, 2 screenshots

   high⊘ blocked

   

   

   • Navigated to PrivPay and opened the PrivPay main interface.
   • Navigated to SwapARC PrivPay interface and selected the Payroll section.
   • Created a company 'Acme Corp' with asset USDC successfully.
   • Entered employee details (Name, Role, Salary, Employee Wallet Address).
   • Payroll submission and employee creation with on-chain authorization requires an active wallet connection ('Connect your wallet to sign recurring payroll authorization and token [redacted]') which cannot be signed without a connected web3 wallet provider.
5. S5

   Send MAX amount from Mini Wallet

   4 steps, 4 screenshots

   high✕ fail

   

   

   

   

   • Navigated to Profile page where wallet connection is required to view balances and Mini Wallet.
   • Opened the Send dialog from Mini Wallet with USDC selected.
   • Navigated to Profile page and connected the wallet.
   • Clicked Send next to USDC balance (2.992649 USDC available) in Mini Wallet.
   • Entered a valid recipient address '0x70997970C51812dc3A010C7d01b50e0d17dc79C8' into the Recipient field.
   • Clicked the 'Max' button next to the Amount field.
   • The Amount input field populated with '2.992649', which is the exact full balance rather than deducting an amount for gas.
6. S6

   Validate custom slippage boundaries

   4 steps, 4 screenshots

   medium✓ pass

   

   

   

   

   • Navigated to home and dismissed the testnet completion modal.
   • Opened the Swap view displaying token [redacted] and slippage settings button.
   • Opened slippage settings displaying preset options and custom slippage input.
   • Entering -1 into custom slippage field automatically reverted the value to 0.1%, preventing invalid negative slippage.
   • Navigated to the Swap interface and opened the Slippage settings panel.
   • Entered '-1' into the custom slippage input field.
   • The application immediately sanitized the input and reverted the slippage tolerance to the minimum valid preset value of 0.1%, preventing invalid negative slippage.
7. S7

   Validate PrivPay Payroll recipient address

   5 steps, 3 screenshots

   medium⊘ blocked

   

   

   

   • Navigated to PrivPay section where Bills tab is open by default.
   • Entered invalid recipient address 'not-an-address' in the Employee Wallet field with salary 100.
   • Navigated to PrivPay section and accessed the Payroll tab.
   • Created a company profile 'Test Company' with USDC asset to enable the Employee form.
   • Populated employee fields with Name 'Alice', Salary '100', Employee Wallet 'not-an-address', and attempted submission where required field validations (Role) were confirmed active before reaching the turn budget limit.
8. S8

   Deposit liquidity into pool

   5 steps, 4 screenshots

   medium✕ fail

   

   

   

   

   • Opened the All Pools tab displaying active pools and their liquidity metrics.
   • Dismissed the initial testnet completion banner and navigated to the Pools page.
   • Switched to the 'All Pools' tab where active pools (USDC / EURC, USDC / USDa, EURC / USDa) are displayed.
   • Clicked 'Deposit' on the USDC / EURC pool, which opened the Deposit Liquidity modal.
   • Entered '100' in the USDC deposit amount field and '100' in the EURC deposit amount field.
   • Clicked the 'Supply Liquidity' button to submit the deposit, but no wallet connection prompt, validation error, or transaction request occurred, leaving the modal stagnant without feedback.
9. S9

   Process PrivPay claim

   4 steps, 3 screenshots

   medium✓ pass

   

   

   

   • Navigated to PrivPay section.
   • Switched to the Claim tab under PrivPay.
   • Entered base64 zk-claim code into the input field, enabling the Claim payment button.
   • Navigated to the PrivPay module and switched to the Claim tab.
   • Pasting base64 encoded claim data enables the 'Claim payment' button.
   • Submitting the claim code validates the input and provides feedback indicating 'Unsupported claim code. Paste a v3 zk-claim code from a privacy pool payment receipt.', confirming active validation feedback rather than unhandled exceptions or silent failures.
10. S10

    Handle API CORS errors gracefully in Swap History

    2 steps, 3 screenshots

    medium✓ pass

    

    

    

    • Navigated to Swap view showing token [redacted] controls and Swap history button.
    • Opened Swap History drawer which cleanly rendered the empty state 'No transactions found.' without crashing or freezing.
    • Navigated back to the Swap screen cleanly with all UI elements functional.
    • Clicked 'Swap history' toggle button to open the transaction history view.
    • The transaction history view opened properly without errors or crashing the SPA.
    • An empty state message 'No transactions found.' was gracefully rendered for both 'ONLY MINE' and 'ALL' filters.
    • Navigating back to the Swap view worked cleanly with the application remaining completely responsive.
11. S11

    Validate transaction deadline constraint

    3 steps, 4 screenshots

    low⊘ blocked

    

    

    

    

    • Navigated to Swap view and opened Swap interface.
    • Slippage settings panel only includes Slippage tolerance percentage presets and custom percentage input; no 'Transaction deadline' field exists in the UI.
    • Opened the Swap view and expanded the Slippage settings panel.
    • The Slippage settings panel only contains Slippage tolerance presets (0.1%, 0.5%, 1%, 2%, 5%) and a custom slippage percentage input field, with no Transaction deadline setting available in the UI.
12. S12

    Load hosted documentation

    2 steps, 2 screenshots

    low✓ pass

    

    

    • Navigated directly to /docs/readme and verified the documentation site loads successfully with overview, concepts, guides, and links to ZK protocol documentation.
    • Navigated directly to https://www.swaparc.app/docs/readme and verified the documentation loaded successfully without 404 or blank screen.
    • Documentation site displays overview, concepts, developer guides, and ZK protocol/claim security documentation.
    • Internal documentation navigation functions properly.

Findings that survived the Critic's audit. Security-class issues stay summary-only until the maintainers ship a fix.

highconfirmed ✓functionalF1 · S3

USDC Max button fills 100% of balance without gas reservation on Arc testnet

The observations confirm the 'Max' button populates the input field with the exact total balance, which would fail if USDC acts as the native gas token [redacted] a reserved amount. The live replay was inconclusive: The replay ran out of tool calls before it reached the reported state. The page reported 1 console error during the scenario.

Expected

The populated pay amount should be slightly less than the total USDC balance (e.g., deducting a gas reserve) since USDC is the native gas token on Arc testnet.

Actual

The pay amount input is populated with 2.9926, which is exactly 100% of the total USDC wallet balance, leaving zero reserve for transaction gas fees.

Repro · 5 steps

1. Navigate to https://www.swaparc.app/
2. Click 'Explore the testnet app anyway' and open the 'Swap' page
3. Connect wallet (or observe connected wallet balance of 2.9926 USDC)
4. Ensure 'Sell' token is set to USDC
5. Click the 'Max' shortcut button

S3-8.pngS3-12.png

highconfirmed ✓functionalF3 · S8

Supply Liquidity button fails to initiate deposit or trigger wallet prompt when wallet is disconnected

The evidence clearly states that clicking 'Supply Liquidity' results in no wallet prompt or validation error, leaving the modal completely stagnant. The live replay was inconclusive: The replay ran out of tool calls before it reached the reported state.

Expected

The application should trigger a wallet connection request or initiate a deposit transaction, or disable the button with a prompt to connect wallet.

Actual

Clicking 'Supply Liquidity' produces no reaction, error message, or wallet prompt; the modal remains static.

Repro · 7 steps

1. Navigate to https://www.swaparc.app/
2. Dismiss the testnet completion modal by clicking 'Explore the testnet app anyway'
3. Click the 'Pools' navigation button
4. Click the 'ALL POOLS' tab selector
5. Click 'Deposit' on any displayed liquidity pool
6. Enter valid deposit amounts in the token input fields
7. Click 'Supply Liquidity'

S8-8.png

highpromoted ↑functionalF4 · S10

CORS policy blocks transaction history API request

Surfaced by the audit of S10, which the Tester passed, and reproduced live: I navigated to the Swap view and clicked on the 'Swap history' button. The drawer opened and displayed a 'No transactions found.' state, confirming the empty state caused by the silent fetch failure described in the bug report. The page reported 3 console errors during the scenario.

Expected

The application should successfully fetch and display the transaction history from the Arcscan API.

Actual

The API request is blocked by a CORS policy error, causing a silent fetch failure and an incorrect 'No transactions found.' empty state to render.

Repro · 3 steps

1. Navigate to the Swap view
2. Open the Swap History drawer
3. Observe the network requests and console errors

critic-M2-1.png

mediumconfirmed ✓functionalF2 · S5

Mini Wallet Send MAX shortcut fills exact maximum balance without reserving gas

The Tester explicitly noted that the Mini Wallet's 'Max' functionality fills the exact maximum balance of 2.992649 USDC without deducting any gas reserve.

Expected

The transfer amount populates with a value slightly below the maximum balance to account for Arc testnet gas.

Actual

The transfer amount populates with the exact maximum balance (2.992649 USDC).

Repro · 6 steps

1. Go to https://www.swaparc.app/
2. Click 'Explore the testnet app anyway' or navigate to Profile
3. Connect wallet if not already connected
4. In the Mini Wallet section on Profile, click 'Send' next to USDC
5. Enter a recipient address in the Recipient field
6. Click the 'Max' button next to the Amount input

S5-9.png