Skip to content

Synchronize repository - #284191

Closed
security-alliance-bot wants to merge 1 commit into
MetaMask:mainfrom
security-alliance-bot:1ec5e0ed-241f-448d-9bf0-e022f8c23197
Closed

Synchronize repository#284191
security-alliance-bot wants to merge 1 commit into
MetaMask:mainfrom
security-alliance-bot:1ec5e0ed-241f-448d-9bf0-e022f8c23197

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Aug 20, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Cursor Bugbot is generating a summary for commit a781b0d. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Aug 20, 2026
@security-alliance-bot
security-alliance-bot deleted the 1ec5e0ed-241f-448d-9bf0-e022f8c23197 branch August 20, 2026 01:44

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

Reviewed by Cursor Bugbot for commit a781b0d. Configure here.

Comment thread src/config.json
"kiichain-airdrop.sbs",
"defillama-cfd.pages.dev",
"v2-curvefinance.com",
"swftcoin.com",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Legitimate SWFT domain blocklisted

High Severity

Adding swftcoin.com to the blocklist flags SWFT Blockchain’s long-standing domain and its live product hosts such as swap.swftcoin.com and exchange.swftcoin.com. MetaMask then shows a full phishing warning on those official swap/exchange pages, blocking a real wallet-connected service rather than a lookalike.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit a781b0d. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants