Skip to content

Synchronize repository - #284187

Closed
security-alliance-bot wants to merge 1 commit into
MetaMask:mainfrom
security-alliance-bot:55efdd25-0da4-455f-a306-95cdd508ad12
Closed

Synchronize repository#284187
security-alliance-bot wants to merge 1 commit into
MetaMask:mainfrom
security-alliance-bot:55efdd25-0da4-455f-a306-95cdd508ad12

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Aug 20, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Cursor Bugbot is generating a summary for commit 0cb3e6c. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Aug 20, 2026
@security-alliance-bot
security-alliance-bot deleted the 55efdd25-0da4-455f-a306-95cdd508ad12 branch August 20, 2026 01:37

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

Reviewed by Cursor Bugbot for commit 0cb3e6c. Configure here.

Comment thread src/config.json
"kiichain-airdrop.sbs",
"defillama-cfd.pages.dev",
"v2-curvefinance.com",
"swftcoin.com",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Legitimate SWFT domain blocked

High Severity

swftcoin.com is the longstanding SWFT Blockchain domain (still used for product hosts such as swap.swftcoin.com). Adding the apex name to the blocklist also matches those subdomains, so MetaMask will treat a live cross-chain swap service as phishing and intercept visits.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 0cb3e6c. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants