[Lock] SnapSwap.io No KYC Private Crypto Swap Review Campaign | Up to $60.00

[ContentWriter]

Snapswap Review

At the Snapswap landing page, I did what I usually do when I want to be sure that I can reach the platform's support as quickly as possible by scrolling down to the supposed 24/7 Customer Support section. However, clicking the link didn’t take me to the Snapswap support. I wouldn’t know if this was intentional until I look at the code but I suggest that the Snapswap team check this out and make this element clickable and link the support instead of having it just at the footer and header. I tried with the Chrome browser, Edge and Opera with the same result.



Security Flaw



I noticed the absence of an implementation of a Content Security Policy (CSP) so I suggest your devs look into it since it is a critical security header. This should prevent the injection and execution of malicious scripts. It also forestals attackers from loading malicious resources. I don't know who wrote these codes but the absence of a CSP in a financial application is a significant security oversight. This should help:

Code:

<meta http-equiv="Content-Security-Policy" 
      content="default-src 'self'; 
               script-src 'self' https://stackpath.bootstrapcdn.com; 
               style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; 
               font-src 'self' https://fonts.gstatic.com; 
               img-src 'self' data:; 
               connect-src 'self'">

Furthermore, I think commented-out code should be removed since it could point out infrastructure detail to attackers. Though external resources are commented out, you can see there are currently no restrictions making them easy to uncomment. You should consider additional security improvements. Your devs should take a look at these headers as extra security layers:

Code:

X-Content-Type-Options: nosniff

Code:

X-Frame-Options: DENY

Code:

Referrer-Policy: strict-origin-when-cross-origin

More Code Flaws

Take a look at this:



Isn't it obvious that there is no integrity checks and that script modification in transit is a possibility, and without detection. This is clearly a Sub-Resource Integrity (SRI) flaw.




This could cause server side errors to leak stack traces even with your good-intentioned generic error messaage. href="" in codeline here could cause navigation issues.

There's no cache-control headers for static resources. Cache directives are also missing for sensitive content.

I suggest that the Snapswap team conduct a full code audit as I could point out several vulnerabilities. Maybe a code bounty would attract more members.

Bitcoin Address(SegWit): bc1qw5jnk6ncv4k0625fu7xy4lq73cf09kfmwmyjcv

[UserU]

BECH32 Address: bc1qfyaj44p3h2ncujafwcm9w2zd2xkk2cl37tzyfv

SnapSwap Review
Like what others have mentioned, it took several seconds on first-time load even on both mobile data and Ethernet connection, but there are some improvements on subsequent visits.
One thing I noticed is that when visited SnapSwap for the first time on the Brave browser with Shields/ adblocker on, it simply displayed the loader endlessly. After disabling the Shield, and re-enabling it shortly after, the site then loaded fine.


Performance-wise, there was some marginal slowdowns when it came to switching language from ENG-RU and vice versa, or refreshing webpages but as more widgets or contents are added in the near future, the team might want to look into that.


Interface
Very minimalistic, and starts with a dark theme, which I liked as it's reduces the eye strain. However, I felt that the top trading pairs widget (not sure if that's static) should remain above or below the swapping widget.
For the RUS language, several components have not been fully translated, such as the site description and the Floating/ Fixed Rate toggles. Once the trading volume starts to pick up, would want to add the 'Recent TX' widget



Footer
The icons seem to have their clickable areas extended; I moused over the space beside both X/ Twitter and Telegram icons and the hyperlinks are active



Swapping
Minimum swap threshold seemed to be noticeably higher. For instance, to swap from USDT to XMR, it costed USDT 6.28 minimum while another competitor only offered ~USDT 1, which is very irresistible if I'm only needing some gas fees. There are the standard offerings such as USDC/ USDT stablecoins. However USDC seems to only have ERC20 network on the input side, which commands high fees. Was hoping to see SOL or POL networks available. In the 'Receive' dropdown, there are noticeable slowdowns/ lags when scrolling through the list after passing through the early section of the 'ALL COIN'


And spreads are horrendous to say the least. I lost over 30% when a competitor offered way way more BNB.



Depositing
The fee should be determined by the user, since different sites might command different fees. Indicating the amount of USDT 6.80 and above seemed unnecessary.


QR code was unscannable as the corners were cutoff, unlike the one shown by a competitor below


Time was not localized and seemed to be stuck at 4:20 AM/ PM because I tried with two separate transfers and the value remained static. Also when I left the order to expire and returned several hours later, I expected to see the same page with the "Expired" status but it seemed to have refreshed while throwing a generic, "An unintended error has occurred" error at the bottom of the screen


I decided to swap some USDT - BNB, and after even after confirming the transaction from my Trust Wallet, I've still not received my BNB in the new address even after waiting for over 20 minutes. UPDATE: Apparently after contacting Support, it was caused by some node issue, and it's finally been resolved. However this could also result in lost opportunity in volatile conditions and I'm left with lesser amounts



Support
Good to see a few choices, particularly Telegram rather than solely relying on email.


Verdict
Overall the site looks promising but it could definitely see more crypto networks and reduced minimum deposits. And definitely narrow those spreads

[AnonBitCoiner]

SnapSwap Review
BTC Segwit: bc1qgjjzegg3h3wt9eacn2gvekdnlx67t0kya893vt

Experience with Interface

This tab should be fixed because if I want to move along different fields, like from support to General, I don't have to scroll up to the top, but if it is fixed, I can click.


This page is very dull and boring. Put some colors here like using different colors for headings and you use bullets for the first steps and do not use bullets for the other two steps, which looks bad, use some better bullets there like roman, numbers or small alphabets.

At the end of the page you show the leave a review, which is the part of the image but it is not required there to help other understand how to swap the tokens, but it is mentioned in the third step that don't forget to give a review the gap is too big, it should be filled. By writing the same line in front of the last review image.




At the top a live price bar should be present to enhance the usage of the forum because simply a swap platform doing its work smoothly is great but to enhance the user experience, such features are needed.

If the team find the idea I am going to give good one I will be glad  , Add a news page too about small news and announcement about the project which should be kept updated regularly and also add a small section consists of blogs for the swap and how it works and what is needed and every other topic that you can cover related to your niche because that can help you rank too.

Increase the tokens list and their network list from the send option because we can only send via erc 20, bep 20, trc20, xmr and btc.

This copy icon is at very weird place, it should be either at the end of the text box or should not be here and it is a good option to have here for someone to copy the amount if it is in decimals, like for bitcoin's satoshi, they won't have to write it manually but it is at a weird place.

Experience with Swap

It was not smooth for me because I wanted to receive funds on apt network, my funds got stuck and I sent a connection to their simplex support which they accepted after a long time so much for a platform that says 24/7 support, I am not complaining because they accepted and respond back and solved the matter quickly and released my funds, the reason they said was the wrong address for the network, probably the address type they were accepting was not the ones I gave but I gave from an exchange and many uses the same one, so I gave them what they asked and they released the funds. I have one question for them, the funds was internal transfer, how do they do that? There was no on chain presence of it.

I was stuck at this for too long, for someone who wants to swap things on time they would not like this I was testing the service fo the review purpose that's why I won't mind and let's say they chose the fixed rate and the swap stuck and the token prices drops a lot, in this situation team has to give them the amount and that person can be making a great lose and if that token's price increase the team has to face loss too.



Transaction was completed but please open the windows in new tab or at least allow us to right click the link option of each text box after the completion so we can open the explorer in new tab.

Experience with Support

They were great although a bit late for someone like me it was no prblem but as I said earlier many won't like this, it is better to have a live support chat integrated in the website than the simplex. Many will go for the simplex option for the anoynmity purpose and that can be time consuming for them. Overall the team support was nice and polite and I loved them.

[AB de Royse777]

Campaign locked. I will review the posts and bring a list with the reward distribution.

[snapswap.io]

Hello guys! Thank you everyone that participated to our review campaign. Overall it's a very good progress, helped us to solve a lot of issues. In the future we will open new campaigns, follow us and Royse to join again. One more time thank you everyone who takes time to share their review.

We have fixed a lot of UI/UX problems and make our service much better. The updates keep coming every day. Thank you 

[Faisal2202]

Hello guys! Thank you everyone that participated to our review campaign. Overall it's a very good progress, helped us to solve a lot of issues. In the future we will open new campaigns, follow us and Royse to join again. One more time thank you everyone who takes time to share their review.

We have fixed a lot of UI/UX problems and make our service much better. The updates keep coming every day. Thank you 

Glad to be part of this project and such an active team to solve and fix everything, I checked the updates and fixes you have made till now and the site's user experience has already improved great work and keep it up. (Thanks for the update though)

Best of luck.

[snapswap.io]

Hello guys! Thank you everyone that participated to our review campaign. Overall it's a very good progress, helped us to solve a lot of issues. In the future we will open new campaigns, follow us and Royse to join again. One more time thank you everyone who takes time to share their review.

We have fixed a lot of UI/UX problems and make our service much better. The updates keep coming every day. Thank you 

Glad to be part of this project and such an active team to solve and fix everything, I checked the updates and fixes you have made till now and the site's user experience has already improved great work and keep it up. (Thanks for the update though)

Best of luck.

Hey, thank you for your feedback, we keep building and growing.

[Woodie]

Campaign locked. I will review the posts and bring a list with the reward distribution.

Hi Royse any luck with this..

[AB de Royse777]

Hi Royse any luck with this..

I am still working on it.

[AB de Royse777]

Final Spreadsheet
Please check your Bitcoin Address, you will get your reward on Sunday with the campaign payments I make. While I was checking the reviews, contents were the only thing that has been taken into the consideration.

I hope the campaign was helpful for SnapSwap.io team. Thanks everyone for joining us. We will be working together again soon.

Cheers,

[AB de Royse777]

Reward for the eligible reviews were paid. Please check individual bitcoin address. Thanks all for joining us.
Thanks SnapSwap for allowing our community to review your product.

[UserU]

Reward for the eligible reviews were paid. Please check individual bitcoin address. Thanks all for joining us.
Thanks SnapSwap for allowing our community to review your product.

Thanks Royse, payment received.

Also also thank you SnapSwap for the opportunity to suggest improvements to your service!