safe-global / safe-client-gateway / 21755558935 / 2

89%

main: 89%

Pull #2909

github

feat: add address poisoning detection to owned safes endpoints

Detect address poisoning attacks by identifying addresses that share
the same first 4 and last 4 hex characters. Among similar addresses,
the one with the newer creation date is considered malicious.

- V2 (`GET /v2/owners/:ownerAddress/safes`): silently filters out
  poisoned addresses from the response
- V3 (`GET /v3/owners/:ownerAddress/safes`): keeps all addresses but
  flags poisoned ones in a new `flaggedAsPoisoned` field
- V1: unchanged

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2237 of 3959 branches covered (56.5%)

Branch coverage included in aggregate %.

25245 of 30603 relevant lines covered (82.49%)

234.11 hits per line