You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
'Cancelled' projects are viewable on the DApp. This leaves users vulnerable to things like phishing attacks from malicious projects that have been cancelled.
Looking at the project you mentioned I tried a few different things in the project admin setting
listing project then unlisting with status of cancelled
changing status from cancelled to deactivated then back to cancelled
nothing seems to produce the expected result. the expected behaviour is that the project should not be viewable anymore on the dapp when project is cancelled.
I can see a toast message says I don't have access to view the project and I can see some typeerrors and apolloerrors in the console
Describe the bug
'Cancelled' projects are viewable on the DApp. This leaves users vulnerable to things like phishing attacks from malicious projects that have been cancelled.
To Reproduce
You can see 3 projects that were cancelled for phishing:
https://giveth.io/project/como-usar-polygon-bridge
https://giveth.io/project/swap-crypto-with-defillama-swap
https://giveth.io/project/defillama-swap-the-best-platform-to-swap-crypto
The projects can still be seen and the phishing links in the description are still clickable.
Expected behavior
the user should see.. 'This project does not exist' or some sort of error screen instead.
Not to be confused with 'Deactivated' projects.
'Cancelled' - project should be non-existent for all users
'Deactivated' - project should still be viewable but not accepting donations.
cc @divine-comedian
The text was updated successfully, but these errors were encountered: