I found a card duplication bug on TokenTrove

For the 2nd time, I've found a bug on TokenTrove and informed the team about it. Today, TokenTrove introduced a new feature to where you're able to bundle up to 18 cards together to sell together which allows sellers to sell many cards at once and allows buyers to be able to save money from the sometimes insane gas fees that comes with buying individual cards. As I still have many cards that I need to sell, I decided to bundle some of my cards together which is how I stumbled on this bug which let's you duplicate cards even if you only own a single copy of said card.

Note: This is only a visual bug and can't be used to abuse the system as creating a bundle like this will simply show that the bundle was either removed or bought upon listing and can't be bought as the block chain prevents token duplication. I was worried that this could be used by someone to abuse the system, but after the team at TokenTrove assured me that this couldn't happen, I decided to post about it here. It's still interesting to say the least.

The bug itself is very easy to replicate. All you have to do is simply start creating a bundle and then click on the "Wallet" tab under your account. After that, you simply need to go back to the bundle tab and click "Create Bundle" and on the right hand side, you'll see where it has saved the cards that you already put into your bundle, BUT you'll see that whatever cards you put into your bundle you'll be able to put in again as the system almost seems to reset the progress for whatever reason. It'll let you go as far as actually creating and listing the bundle, but as I mentioned previously, the block chain actually prevents this and shows the bundle as either bought or removed. This is not done by the team themselves, but by the block chain.

Someone had mentioned on the Gods Unchained Discord that they noticed that TokenTrove seemed to be having some issues tonight and I told them that I had reported a bug to them and that they were currently working to resolve it which could be why they were noticing some small issues. If you're noticing any issues tonight with the website, just know that this could be the cause, but the team is currently working towards resolving the issue.

Because it wouldn't hurt to ask, I'd ask the team if I could get a bug bounty since this is now the 2nd bug that I'd found and reported to them... they politely declined.

"I don't get no respect." - Rodney Dangerfield

That's all for tonight. Just wanted to let everyone know about this as it's nothing too serious and humorous if nothing else.

As always, I hope you have an awesome night! :)