200
Open
75
High
23
Critical
0
Resolved
42
Docs
200 findings
Overspent Wallet Detected
Overspent wallet detected
Overspent wallet identified
ManageDrop User.filter({ id }) uses client-side SDK which applies RLS
pages/admin/ManageDrop.jsx
[DOCS] Push Notifications & SMS Architecture
functions/sendPushNotification.js
[DOCS] Promoter Flow: create drop → admin approval → live → track performance
pages/PromoterDashboard.jsx
[DOCS] Admin Capabilities Overview
pages/admin/AdminDashboard.jsx
[DOCS] Token Economy: purchase → spend on boosts → wallet tracks balance
entities/TokenWallet.json
[DOCS] Entry Weighting System: free=1x, boost_5x=5x, boost_10x=10x, boost_15x=15x
entities/Entry.json
[DOCS] Referral System: code generation → share link → milestone rewards
lib/gamification.js
[DOCS] Drop Lifecycle: pending → approved → scheduled → active → closed → completed
entities/Drop.json
Games page has no deeplink from Home — users may never discover it
pages/Games.jsx
AnimatedBackground renders complex canvas/CSS animations on all pages
components/AnimatedBackground.jsx
Home page has no skeleton for FeaturedDrops section
components/home/FeaturedDrops.jsx
BottomNav active state does not match nested admin routes
components/BottomNav.jsx
Entry validation relies only on client-side checks for boost eligibility
pages/DropDetail.jsx
DropDetail page fetches data sequentially — user sees spinner for 2-4s
Drop closes_at countdown shows expired timer instead of "Closed" for old drops
components/CountdownTimer.jsx
No error boundary — any component crash whites out entire app
App.jsx
AdminDashboard re-paginates ALL users on every page load
LiveActivityFeed fetches excessive data on every Home page load
components/home/LiveActivityFeed.jsx
Token purchase flow has no loading feedback after Stripe redirect
pages/TokenStore.jsx
Drop images not using responsive srcset or lazy loading
components/DropCard.jsx
Referral code lost if user must log in before entering a drop
Sentinel Slow Response: Simulate Notification (create+delete)
Sentinel Slow Response: Simulate Token Purchase (create+delete)
Sentinel Slow Response: List Support Tickets (Admin)
Sentinel Slow Response: List Users (Admin)
Sentinel Slow Response: List Active Drops
SeatGeek Integration Blocked
Sentinel Slow Response: Simulate Support Ticket Submission (create+delete)
Sentinel Slow Response: Simulate Joining a Drop (create+delete)
Sentinel Slow Response: List Pending Drop Approvals (Admin)