-
-
Notifications
You must be signed in to change notification settings - Fork 267
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Address poisoning attack: Label unverified token transactions in TX detail #8434
Labels
Comments
@matejkriz Do we have the logic on mobile for this detection? |
@sime We utilise |
This is about integrating tokens definitions redux from this #10034 to suite-native and replacing isZeroValuPhishing by more general isPhishingTransaction. |
PeKne
added a commit
that referenced
this issue
Feb 22, 2024
PeKne
added a commit
that referenced
this issue
Feb 23, 2024
PeKne
added a commit
that referenced
this issue
Feb 26, 2024
trezor-ci
pushed a commit
that referenced
this issue
Feb 27, 2024
github-project-automation
bot
moved this from 🔎 Needs review
to 🤝 Needs QA
in Suite Mobile
Feb 27, 2024
PeKne
added a commit
that referenced
this issue
Feb 27, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
Related to preventions done by Desktop Suite: #8119
BACKGROUND
Related to #7278
Scammers employ a similar logic to that of zero-value transactions by utilizing unverified tokens that hold no fiat value but still carry a positive number of units in the transaction.
Example of the token: https://etherscan.io/token/0x8744dab2fa43055130a85c70d6b0676a82ae4704
Transaction example: https://etherscan.io/tx/0xfd7788d4ac55a9b1024d39a5d124f9e2012fc2dca197daa10c12e178d50b26ec
PROPOSED CHANGES
Check the token contract address against Ethereum definitions
If the contract address is not in Ethereum definitions label tx in the tx history
Design remains as it is
The text was updated successfully, but these errors were encountered: