fix: add a Settings toggle for known-symbol spoof verification (closes #176)

src/shared/transactions.js

@@ -267,12 +267,19 @@ function filterTransactions(txs, filters = {}) {
     const dustThresholdGwei = filters.dustThresholdGwei ?? 100000;
     const newFraud = [];
     const filtered = [];
+    // Fail-safe, unlike the three flags below: this one is off only when the
+    // caller says so explicitly, so a caller that omits the key keeps the
+    // check rather than silently losing it.  The setting also governs the
+    // blocklist learning below, which exists only to serve this check —
+    // leaving learning on while the check is off would re-hide the very rows
+    // the user asked to see, through the fraud-contract rule.
+    const hideSpoofed = filters.hideSpoofedSymbols !== false;
 
     for (const tx of txs) {
         const contract = normalizeAddress(tx.contractAddress);
 
-        // Always filter spoofed known symbols and record the fraud contract
-        if (isSpoofedSymbol(tx)) {
+        // Filter spoofed known symbols and record the fraud contract
+        if (hideSpoofed && isSpoofedSymbol(tx)) {
             if (contract && !fraudSet.has(contract)) {
                 fraudSet.add(contract);
                 newFraud.push(contract);