The latest articles on DEV Community by atik hasan (@atik_hasan_1a2e95b5a38f3e). https://dev.to/atik_hasan_1a2e95b5a38f3e https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F2373603%2Fc21c522c-1921-4a04-a58e-21c3dd9ff07f.png https://dev.to/atik_hasan_1a2e95b5a38f3e en atik hasan Mon, 14 Sep 2026 15:41:17 +0000 https://dev.to/atik_hasan_1a2e95b5a38f3e/spout-finance-beta-sell-flow-fails-zero-balance-read-on-held-assets-bug-report-3a75 https://dev.to/atik_hasan_1a2e95b5a38f3e/spout-finance-beta-sell-flow-fails-zero-balance-read-on-held-assets-bug-report-3a75 <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fe8cleo5k1p0g3xt5biex.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fe8cleo5k1p0g3xt5biex.png" alt=" " width="800" height="178"></a></p> <p>Summary: During testing of the Spout Finance beta (Solana-based DeFi brokerage for tokenized equities), all sell orders for BSOL failed. Root cause appears to be a token-mint mismatch: the sell panel queries a different mint than the one holding user balance, reading zero shares.<br> Environment: beta.spout.finance/buy, Phantom wallet, Sep 14 2026, ~7:50–8:10 PM local.</p> <p>Steps to reproduce:<br> Buy BSOL via the BUY panel (flow succeeds)<br> Open SELL panel for BSOL<br> Observe "Shares owned: 0" despite confirmed holdings<br> Submit sell order → order appears in Activity as "Failed"<br> Expected: Sell panel reflects on-chain token balance; order executes.<br> Actual: Balance reads zero; all sell orders fail. Two earlier buy orders also failed (~$4.00, $5.88) without any reason surfaced. </p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fd0s5ihxghdjyy8w5hsf5.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fd0s5ihxghdjyy8w5hsf5.png" alt=" " width="800" height="379"></a></p> <p>State management: failed orders never transition out of "Open Orders"; the Cancel button is present and unresponsive on terminal orders.<br> Error handling: all failures render identical "Failed" badges with no error code, cause, or guidance (insufficient balance vs. slippage vs. mint mismatch are indistinguishable to the user).</p> <p>Risk beyond this bug: Spout's core product is 0% borrowing against tokenized equity collateral at 50% LTV. If balance/collateral reads are mint-dependent anywhere in that pipeline, the same class of bug could produce phantom collateral valuations — a far more serious failure mode in the borrow flow. Recommend auditing collateral valuation against mint authority and token account derivation.</p> <p>Recommendations:<br> Derive user token accounts from the canonical mint per asset, or index across all valid mints for a ticker<br> Surface failure reason codes in UI (balance, slippage, market hours, routing)<br> Auto-expire terminal orders from Open Orders and disable actions on them<br> Add an indexer-vs-onchain balance consistency check in the portfolio service.</p> crypto testing feedback