feat: add blocklist for NFT scam detection (#2331)

Co-authored-by: Nicole O'Brien <[email protected]>
bloomwalletio · Apr 17, 2024 · 2212d33 · 2212d33
1 parent 73fb9fe
commit 2212d33
Show file tree

Hide file tree

Showing 6 changed files with 31 additions and 4 deletions.
diff --git a/packages/desktop/App.svelte b/packages/desktop/App.svelte
@@ -28,6 +28,9 @@
     import { _ } from '@core/i18n'
     import { getAndUpdateShimmerEvmTokensMetadata } from '@core/market/actions'
     import { initializeWalletConnect } from '@auxiliary/wallet-connect/actions'
+    import { NFT_BLOCKLIST_JSON_URL } from '@core/utils/constants/nft-blocklist-json-url.constant'
+    import { nftBlocklist } from '@core/utils/stores/nft-blocklist.store'
+    import nftBlockListJson from '@core/utils/json/nft-blocklist.json'
 
     $: $activeProfile, saveActiveProfile()
 
@@ -107,6 +110,14 @@
         registerMenuButtons()
         void initializeWalletConnect()
         await getAndUpdateShimmerEvmTokensMetadata()
+
+        try {
+            const response = await fetch(NFT_BLOCKLIST_JSON_URL)
+            const blocklist = await response.json()
+            nftBlocklist.set(blocklist)
+        } catch (error) {
+            nftBlocklist.set(nftBlockListJson)
+        }
     })
 
     onDestroy(() => {

diff --git a/packages/shared/src/lib/core/nfts/utils/isScamIrc27Nft.ts b/packages/shared/src/lib/core/nfts/utils/isScamIrc27Nft.ts
@@ -1,10 +1,12 @@
 import { IIrc27Metadata } from '../interfaces'
+import { nftBlocklist } from '@core/utils/stores/nft-blocklist.store'
+import { get } from 'svelte/store'
 
 export function isScamIrc27Nft(metadata: IIrc27Metadata): boolean {
-    const SCAM_URLS = ['iotalottery.com', 'iota-lottery.com', 'lottery-iota.com', 'fly-fire.com']
-    const SCAM_PHRASES = ['lottery', 'lotto', 'raffle', 'giveaway', 'scam', 'won']
+    const { urls, keywords } = get(nftBlocklist)
+
     if (
-        SCAM_URLS.some(
+        urls.some(
             (url) =>
                 metadata?.uri?.toLocaleLowerCase()?.includes(url) ||
                 metadata?.name?.toLocaleLowerCase()?.includes(url) ||
@@ -15,7 +17,7 @@ export function isScamIrc27Nft(metadata: IIrc27Metadata): boolean {
     ) {
         return true
     } else if (
-        SCAM_PHRASES.some(
+        keywords.some(
             (phrase) =>
                 metadata?.name?.toLocaleLowerCase()?.includes(phrase) ||
                 metadata?.issuerName?.toLocaleLowerCase()?.includes(phrase) ||

diff --git a/packages/shared/src/lib/core/utils/constants/nft-blocklist-json-url.constant.ts b/packages/shared/src/lib/core/utils/constants/nft-blocklist-json-url.constant.ts
@@ -0,0 +1,2 @@
+export const NFT_BLOCKLIST_JSON_URL =
+    'https://raw.githubusercontent.com/bloomwalletio/bloom/develop/packages/shared/src/lib/core/utils/json/nft-blocklist.json'
diff --git a/packages/shared/src/lib/core/utils/interfaces/nft-blocklist.interface.ts b/packages/shared/src/lib/core/utils/interfaces/nft-blocklist.interface.ts
@@ -0,0 +1,4 @@
+export interface NftBlocklist {
+    urls: string[]
+    keywords: string[]
+}
diff --git a/packages/shared/src/lib/core/utils/json/nft-blocklist.json b/packages/shared/src/lib/core/utils/json/nft-blocklist.json
@@ -0,0 +1,4 @@
+{
+    "keywords": ["lottery", "lotto", "raffle", "giveaway", "scam", "won"],
+    "urls": ["iotalottery.com", "iota-lottery.com", "lottery-iota.com", "fly-fire.com"]
+}
diff --git a/packages/shared/src/lib/core/utils/stores/nft-blocklist.store.ts b/packages/shared/src/lib/core/utils/stores/nft-blocklist.store.ts
@@ -0,0 +1,4 @@
+import { writable } from 'svelte/store'
+import { NftBlocklist } from '../interfaces/nft-blocklist.interface'
+
+export const nftBlocklist = writable<NftBlocklist>({ urls: [], keywords: [] })
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		export const NFT_BLOCKLIST_JSON_URL =
		'https://raw.githubusercontent.com/bloomwalletio/bloom/develop/packages/shared/src/lib/core/utils/json/nft-blocklist.json'