Skip to content

Request to Whitelist solswap.cloud - Legitimate Solana DEX#1806

Open
Solswap-DEX wants to merge 4 commits intophantom:masterfrom
Solswap-DEX:master
Open

Request to Whitelist solswap.cloud - Legitimate Solana DEX#1806
Solswap-DEX wants to merge 4 commits intophantom:masterfrom
Solswap-DEX:master

Conversation

@Solswap-DEX
Copy link
Copy Markdown

@Solswap-DEX Solswap-DEX commented Apr 11, 2026

Domain: solswap.cloud and perps.solswap.cloud

Current Status: solswap.cloud is currently being blocked by Phantom Wallet with a phishing warning. This is a false positive and is actively preventing legitimate users from accessing the platform.

Description:
SolSwap is a legitimate, open-source decentralized exchange built on Solana, forked from Raydium UI v3 (Apache 2.0 license). It provides token swapping via Jupiter aggregator, bridge functionality via Li.Fi, liquidity pools, and a perpetuals trading module powered by Drift Protocol.

GitHub Organization: https://github.com/Solswap-DEX

Infrastructure:

  • solswap.cloud — main swap interface (static export, Apache)
  • perps.solswap.cloud — perpetuals trading via Drift Protocol (Next.js/PM2)

Why this is NOT a phishing site:

  • Open-source code publicly available at https://github.com/Solswap-DEX
  • No custom smart contracts — all swaps route through Raydium's own on-chain programs
  • Standard 0.10% platform fee via Jupiter referral program, publicly disclosed
  • No wallet drainers, no malicious redirects, no brand impersonation
  • Infrastructure hosted on AWS, domain registered and verifiable

Change made in this PR:
Added solswap.cloud and perps.solswap.cloud to whitelist.yaml.
Wildcard entry (*.solswap.cloud) was removed per CodeRabbit review and replaced with explicit subdomain entries. All 3 pre-merge checks passing.

Requesting urgent review and merge to restore access for legitimate users.
Happy to provide domain ownership proof or any additional documentation required.

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 11, 2026

📝 Walkthrough

Walkthrough

The whitelist.yaml file was edited to append two URL entries—solswap.cloud and perps.solswap.cloud—while retaining nftplus.io. No other entries or file structure changed.

Changes

Cohort / File(s) Summary
Whitelist Configuration
whitelist.yaml
Appended two URL whitelist entries: solswap.cloud, perps.solswap.cloud. Retained existing nftplus.io. No structural changes.
🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title directly and clearly describes the main change: whitelisting solswap.cloud domains for a legitimate Solana DEX, which matches the file modification adding these URL entries to whitelist.yaml.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@whitelist.yaml`:
- Line 35: Replace the broad wildcard entry "*.solswap.cloud" in the whitelist
with explicit, verified hostnames to enforce least privilege; update the URL
entries to enumerate known domains such as "solswap.cloud" and
"perps.solswap.cloud" (and any other vetted subdomains) and remove the
"*.solswap.cloud" pattern so new/unverified subdomains are not implicitly
allowed.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 49434217-eced-4e45-841a-0e261ec7a849

📥 Commits

Reviewing files that changed from the base of the PR and between f0e8ff9 and db92e2b.

📒 Files selected for processing (1)
  • whitelist.yaml

Comment thread whitelist.yaml Outdated
@Solswap-DEX
Copy link
Copy Markdown
Author

All checks passing. Wildcard entry has been replaced with explicit subdomains (solswap.cloud and perps.solswap.cloud) per CodeRabbit's recommendation. This is a legitimate Solana DEX — solswap.cloud — forked from Raydium UI v3. Kindly request review and merge. Thank you

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant