From 2b77eb9c36d2d655c598d4ca420403c37c8dc63c Mon Sep 17 00:00:00 2001 From: coinlaunch033 Date: Wed, 14 Oct 2026 07:04:56 -0700 Subject: [PATCH] =?UTF-8?q?Whitelist=20tokenclub.fun=20&=20*.tokenclub.fun?= =?UTF-8?q?=20(false=20positive)=20=E2=80=94=20Open=20for=20Code=20Review?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ## Summary Adds `tokenclub.fun` and `*.tokenclub.fun` to `whitelist.yaml` following an automated heuristic false-positive warning in the Phantom extension. ## Domains to Allowlist - `tokenclub.fun` - `www.tokenclub.fun` - `app.tokenclub.fun` - `*.tokenclub.fun` ## Application & Architecture TokenClub is a non-custodial Solana web utility providing: - Token minting (SPL & Token-2022 standards) - Jupiter DEX swap integration - Meteora / Raydium liquidity management ## Security Posture & Non-Custodial Verification - **No Sensitive Credential Access:** The application never solicits, processes, or stores private keys or seed recovery phrases. - **Standard Wallet Adapters:** Connections are strictly handled via standard Reown AppKit / `@solana/wallet-adapter`. - **Disclosed Platform Fee:** Platform fees are disclosed in the UI prior to confirmation and routed to our verified fee recipient: `6nZ3TZhPcr4wLYFXa5jQeSB1YYKF9tozfuxzYgGPau23`. - **User-Simulated Transactions:** Every instruction is user-initiated and fully simulated within Phantom before signing. ## Full Code Review Offer Our full production source code is publicly accessible for review without restrictions: - **Public GitHub Audit Repository:** https://github.com/engrhamza83/tokenclub - **Security & File Map Document:** https://github.com/engrhamza83/tokenclub/blob/main/SECURITY_REVIEW.md We welcome and invite the Phantom Security / Trust & Safety team to inspect our codebase: --- whitelist.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/whitelist.yaml b/whitelist.yaml index d59054b4..6a22cacb 100644 --- a/whitelist.yaml +++ b/whitelist.yaml @@ -30,4 +30,5 @@ - url: "*.tistory.com" - url: "*.surge.sh" - url: revoke.cash - - url: nftplus.io \ No newline at end of file + - url: nftplus.io + - url: tokenclub.fun