@exodus/solana-api 3.26.6 → 3.27.0

package/CHANGELOG.md

@@ -3,6 +3,16 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [3.27.0](https://github.com/ExodusMovement/assets/compare/@exodus/solana-api@3.26.6...@exodus/solana-api@3.27.0) (2026-01-08)
+
+
+### Features
+
+
+* feat: filter SOL poisoning txs (#7212)
+
+
+
 ## [3.26.6](https://github.com/ExodusMovement/assets/compare/@exodus/solana-api@3.26.5...@exodus/solana-api@3.26.6) (2026-01-08)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/solana-api",
-  "version": "3.26.6",
+  "version": "3.27.0",
   "description": "Transaction monitors, fee monitors, RPC with the blockchain node, and other networking code for Solana",
   "type": "module",
   "main": "src/index.js",
@@ -33,7 +33,7 @@
     "@exodus/fetch": "^1.7.3",
     "@exodus/models": "^12.0.1",
     "@exodus/simple-retry": "^0.0.6",
-    "@exodus/solana-lib": "^3.17.0",
+    "@exodus/solana-lib": "^3.19.0",
     "@exodus/solana-meta": "^2.0.2",
     "@exodus/timer": "^1.1.1",
     "debug": "^4.1.1",
@@ -49,7 +49,7 @@
     "@exodus/assets-testing": "^1.0.0",
     "@exodus/solana-web3.js": "^1.63.1-exodus.9-rc3"
   },
-  "gitHead": "cc6f873a99d2a770ee83f0f7563f803e068d04de",
+  "gitHead": "273cd4583facb72bc145c5cdfe29063f78b13491",
   "bugs": {
     "url": "https://github.com/ExodusMovement/assets/issues?q=is%3Aissue+is%3Aopen+label%3Asolana-api"
   },

package/src/api.js

@@ -7,6 +7,7 @@ import {
   buildRawTransaction,
   computeBalance,
   deserializeMetaplexMetadata,
+  EXODUS_TRUSTED_SIGNERS,
   filterAccountsByOwner,
   getMetadataAccount,
   getTransactionSimulationParams,
@@ -232,6 +233,13 @@ export class Api {
         })
 
         if (!parsedTx.from && parsedTx.tokenTxs?.length === 0 && !includeUnparsed) return // cannot parse it
+        if (
+          !parsedTx.ownerIsFeePayer &&
+          parsedTx.error &&
+          !EXODUS_TRUSTED_SIGNERS.includes(parsedTx.feePayer)
+        ) {
+          return
+        } // skip address poisoning txs attempts.
 
         // split dexTx in separate txs
         if (parsedTx.dexTxs) {

package/src/tx-parser.js

@@ -87,6 +87,8 @@ export const parseTransaction = (
           id: txId,
           slot: txDetails.slot,
           error: !(txDetails.meta.err === null),
+          ownerIsFeePayer,
+          feePayer: feePayerPubkey,
           owner,
           from,
           to,
@@ -219,6 +221,8 @@ export const parseTransaction = (
         program: ix.program,
         type: ix.parsed.type,
         slot: txDetails.slot,
+        ownerIsFeePayer,
+        feePayer: feePayerPubkey,
         owner: isSending ? ownerAddress : null,
         from: isSending ? ownerAddress : source,
         to: isSending ? destination : ownerAddress,
@@ -361,6 +365,8 @@ export const parseTransaction = (
         id: txId,
         slot: txDetails.slot,
         error: !(txDetails.meta.err === null),
+        ownerIsFeePayer,
+        feePayer: feePayerPubkey,
         ...tx,
       }))
     } else if (preTokenBalances && postTokenBalances) {
@@ -428,6 +434,8 @@ export const parseTransaction = (
     id: txId,
     slot: txDetails.slot,
     error: !(txDetails.meta.err === null),
+    ownerIsFeePayer,
+    feePayer: feePayerPubkey,
     ...tx,
   }
 }

package/src/ws-api.js

@@ -1,4 +1,11 @@
-import { PublicKey, Token, TOKEN_2022_PROGRAM_ID, TOKEN_PROGRAM_ID, U64 } from '@exodus/solana-lib'
+import {
+  EXODUS_TRUSTED_SIGNERS,
+  PublicKey,
+  Token,
+  TOKEN_2022_PROGRAM_ID,
+  TOKEN_PROGRAM_ID,
+  U64,
+} from '@exodus/solana-lib'
 import lodash from 'lodash'
 
 import { Connection } from './connection.js'
@@ -150,6 +157,13 @@ export class WsApi {
     const timestamp = Date.now() // the notification event has no blockTime
 
     if (!parsedTx.from && parsedTx.tokenTxs?.length === 0) return { logItemsByAsset: {} } // cannot parse it
+    if (
+      !parsedTx.ownerIsFeePayer &&
+      parsedTx.error &&
+      !EXODUS_TRUSTED_SIGNERS.includes(parsedTx.feePayer)
+    ) {
+      return { logItemsByAsset: {} } // skip address poisoning txs attempts.
+    }
 
     const transactions = [] // because one single tx can have multiple instructions inside