sneak/AutistMask
0
0
Fork 0
Code Issues 4 Pull Requests 1 Actions 160 Packages Projects Releases Wiki Activity

fix: the bundled token list names tokens on Ethereum Mainnet only (closes #632)
check / check (push) Waiting to run
Details
e2e / e2e-chrome (push) Waiting to run
Details
e2e / e2e-firefox (push) Waiting to run
Details

Browse Source 
bundledToken(address, chainId) in tokenList.js answers only for Ethereum
Mainnet's chain id. Every reader of TOKEN_BY_ADDRESS now goes through it,
with the chain id of the transaction, balance or history entry it draws.
The token sources the screens build carry that chain id. The Uniswap
decoder sets the transaction's chain id on them. fetchTokenBalances()
takes the chain id of the network it asks about.

isSpoofedSymbol() takes the chain id of the token's network. It checks the
bundled list's symbols only on Ethereum Mainnet. The native asset's labels
stay reserved on every network.

Twenty existing tests and four shared test helpers read the bundled
list without naming a network. Each now names Ethereum Mainnet.

Model: opus-5-5
This commit is contained in:
clawbot
2026-11-03 02:07:42 +00:00
committed by sneak
parent ae0b86a8ac
commit 80ae229931
25 changed files with 732 additions and 115 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/README.md
+7 -5
View File
@@ -377,11 +377,13 @@ point-in-time snapshot of the highest-market-cap Ethereum mainnet ERC-20s, fixed
at build time and updated only when a new release ships a newer snapshot. If a
transaction or balance claims to involve a known symbol (like "ETH" or "USDT")
but comes from an unrecognized contract, it is identified as a spoof and hidden.
In your transaction history this is the "Hide fake tokens impersonating a known
symbol" setting, which you can switch off; doing so also stops new entries being
added to the fraud contract blocklist below, since detecting a spoof is what
fills it. The send token list always applies the check. Your balance list always
applies the check too.
On Sepolia, only "ETH" and "SepoliaETH" count as known symbols, because the
bundled list holds Ethereum Mainnet tokens. In your transaction history the
check is the "Hide fake tokens impersonating a known symbol" setting, which you
can switch off; doing so also stops new entries being added to the fraud
contract blocklist below, since detecting a spoof is what fills it. The send
token list always applies the check. Your balance list always applies the check
too.
**Low-holder token filtering.** Tokens with fewer than 1,000 holders are hidden
from transaction history and the send token list, and are left out of your