6 Commits

Include renames

Author	SHA1	Message	Date
clawbot	c755a5e944	fix: a shared ticker no longer hides one of its two real tokens (closes #276) ... Seven bundled tokens were filtered as spoofs at their own address, so a user holding FRAX, TON, REUSD, EURE, MSUSD, MUSD or JPYC could not see or spend the one the wallet happened not to pick. The known-symbol table is derived from the bundled token list, first-wins in market-cap order, so a symbol that appears twice silently condemned its second contract. Both are real tokens from the same fetch and neither is stale -- three pairs are one issuer's old and new contract, four are unrelated issuers sharing a ticker. Picking a winner would have been guessing, and dropping the ambiguous symbols would have ended spoof filtering for those tickers entirely. The table now maps a symbol to the set of addresses that legitimately bear it. A contract outside the set is still a spoof, so the check is not weakened: a third contract bearing any of the seven shared tickers is refused, and that is tested. The filter decides what is fake, not what is worth holding, so a legacy contract stays in the set -- it still holds real balances. A test walks the whole bundled list asserting no token is filtered at its own address, which is the guard whose absence let this ship.	2026-08-12 13:31:55 +02:00
clawbot	9a7aa1f4fc	fix: resolve token symbols from multiple sources (closes #51) ... When tokenBalances doesn't contain an entry for a token (e.g. before balances are fetched), the symbol fell back to '?' in addressToken and send views. Add resolveSymbol() helper that checks tokenBalances → TOKEN_BY_ADDRESS (known tokens) → trackedTokens → truncated address as last resort. Fixes USDC and other known tokens showing '?' when balance data hasn't loaded yet.	2026-02-28 11:37:38 -08:00
sneak	aca8c4b2a7	Add name and url fields to all 512 tokens in tokenList.js ... Names fetched from CoinGecko bulk API (100% coverage). URLs sourced from ethereum-lists GitHub repo + manual curation for major tokens. Some lesser-known tokens have empty URLs which can be populated incrementally.	2026-02-27 17:51:08 +07:00
sneak	9e45c75d29	Implement personal_sign and eth_signTypedData_v4 message signing ... Replace stub error handlers with full approval flow for personal_sign, eth_sign, eth_signTypedData_v4, and eth_signTypedData. Uses toolbar popup only (no fallback window) and keeps sign approvals pending across popup close/reopen cycles so the user can respond via the toolbar icon.	2026-02-27 15:27:14 +07:00
sneak	1ebc206201	Replace old 150-token list with 511-token tokenList.js ... Delete src/shared/tokens.js and migrate all consumers to src/shared/tokenList.js which has 511 tokens (vs ~150) sourced from CoinGecko with on-chain verified decimals. - prices.js: getTopTokenPrices now from tokenList - transactions.js: KNOWN_SYMBOLS now from tokenList (3.4x more symbols for spoof detection) - send.js: KNOWN_SYMBOLS for token dropdown filtering - approval.js: uses pre-built TOKEN_BY_ADDRESS map instead of constructing its own from TOKENS array - addToken.js: uses getTopTokens(25) for quick-pick buttons (only top 25 shown, not all 511)	2026-02-27 12:39:41 +07:00
sneak	e7711274b3	Add tokenList.js with 511 ERC-20 tokens ranked by market cap ... New module with top Ethereum mainnet ERC-20 tokens sourced from CoinGecko API (market cap ranking) with decimals verified on-chain via eth_call to each contract. Addresses are EIP-55 checksummed. Exports: - TOKENS: full array ordered by market cap - TOKEN_BY_ADDRESS: Map of lowercase address -> token info - KNOWN_SYMBOLS: Map of uppercase symbol -> legitimate address - getTopTokens(n): return first n tokens This module is not yet integrated into the existing token.js — it exists alongside it for now as a data source ready for integration.	2026-02-27 12:37:01 +07:00