From d384d41c829dbc3a9df02ed3724372480a7fc054 Mon Sep 17 00:00:00 2001
From: sneak <sneak@sneak.berlin>
Date: Wed, 25 Feb 2026 16:06:33 +0700
Subject: [PATCH] Show full addresses in wallet list

Display complete addresses instead of truncated ones. Address
poisoning attacks use matching prefixes/suffixes to fool users
into copying fraud addresses. Showing the full address mitigates
this.
---
 src/popup/index.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/popup/index.js b/src/popup/index.js
index d1ac45f..5720d51 100644
--- a/src/popup/index.js
+++ b/src/popup/index.js
@@ -134,7 +134,7 @@ function renderWalletList() {
 
         wallet.addresses.forEach((addr, ai) => {
             html += `<div class="address-row flex justify-between items-center py-1 border-b border-border-light cursor-pointer hover:bg-hover px-1" data-wallet="${wi}" data-address="${ai}">`;
-            html += `<span class="text-xs">${truncateAddress(addr.address)}</span>`;
+            html += `<span class="text-xs break-all">${addr.address}</span>`;
             html += `<span class="text-xs">${addr.balance} ETH</span>`;
             html += `</div>`;
         });