Skip to content

Synchronize repository#266635

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:14d848fe-5572-46b5-bf38-3a7db4305ac4
Jul 11, 2026
Merged

Synchronize repository#266635
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:14d848fe-5572-46b5-bf38-3a7db4305ac4

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 11, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Medium Risk
Dropping a blocklisted domain could allow that host to pass checks if nothing else blocks it; impact is limited to one hostname and other dydx variants stay listed.

Overview
Automated config sync that removes dydx.stakingsreward.pro from the domain blocklist in src/config.json. No other entries in this diff are added or changed.

Other dYdX-related phishing hostnames on different suffixes (e.g. dydx.stakingsreward.art, dydx.stakingsrewards.pro) remain listed elsewhere in the file.

Reviewed by Cursor Bugbot for commit b63cd7d. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 11, 2026
@samczsun samczsun merged commit ac3058e into MetaMask:main Jul 11, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the 14d848fe-5572-46b5-bf38-3a7db4305ac4 branch July 11, 2026 18:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants