safe-global / safe-client-gateway / 21755558935

89%

main: 89%

Build Type

Pull #2909

github

Committed by PooyaRaki

Commit Message

feat: add address poisoning detection to owned safes endpoints

Detect address poisoning attacks by identifying addresses that share
the same first 4 and last 4 hex characters. Among similar addresses,
the one with the newer creation date is considered malicious.

- V2 (`GET /v2/owners/:ownerAddress/safes`): silently filters out
  poisoned addresses from the response
- V3 (`GET /v3/owners/:ownerAddress/safes`): keeps all addresses but
  flags poisoned ones in a new `flaggedAsPoisoned` field
- V1: unchanged

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Pull Request Pull Request #2909: Release 1.100.0

Run Details

2952 of 3742 branches covered (78.89%)

Branch coverage included in aggregate %.

139 of 167 new or added lines in 15 files covered. (83.23%)

2 existing lines in 2 files now uncovered.

14258 of 15531 relevant lines covered (91.8%)

572.79 hits per line