@exodus/solana-api 3.26.6 → 3.27.1

package/CHANGELOG.md

@@ -3,6 +3,24 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [3.27.1](https://github.com/ExodusMovement/assets/compare/@exodus/solana-api@3.27.0...@exodus/solana-api@3.27.1) (2026-01-09)
+
+**Note:** Version bump only for package @exodus/solana-api
+
+
+
+
+
+## [3.27.0](https://github.com/ExodusMovement/assets/compare/@exodus/solana-api@3.26.6...@exodus/solana-api@3.27.0) (2026-01-08)
+
+
+### Features
+
+
+* feat: filter SOL poisoning txs (#7212)
+
+
+
 ## [3.26.6](https://github.com/ExodusMovement/assets/compare/@exodus/solana-api@3.26.5...@exodus/solana-api@3.26.6) (2026-01-08)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/solana-api",
-  "version": "3.26.6",
+  "version": "3.27.1",
   "description": "Transaction monitors, fee monitors, RPC with the blockchain node, and other networking code for Solana",
   "type": "module",
   "main": "src/index.js",
@@ -33,7 +33,7 @@
     "@exodus/fetch": "^1.7.3",
     "@exodus/models": "^12.0.1",
     "@exodus/simple-retry": "^0.0.6",
-    "@exodus/solana-lib": "^3.17.0",
+    "@exodus/solana-lib": "^3.19.2",
     "@exodus/solana-meta": "^2.0.2",
     "@exodus/timer": "^1.1.1",
     "debug": "^4.1.1",
@@ -49,7 +49,7 @@
     "@exodus/assets-testing": "^1.0.0",
     "@exodus/solana-web3.js": "^1.63.1-exodus.9-rc3"
   },
-  "gitHead": "cc6f873a99d2a770ee83f0f7563f803e068d04de",
+  "gitHead": "62748839770af085bedc9708a2d2ae5efa4ad84b",
   "bugs": {
     "url": "https://github.com/ExodusMovement/assets/issues?q=is%3Aissue+is%3Aopen+label%3Asolana-api"
   },

package/src/api.js

@@ -232,6 +232,14 @@ export class Api {
         })
 
         if (!parsedTx.from && parsedTx.tokenTxs?.length === 0 && !includeUnparsed) return // cannot parse it
+        if (
+          !parsedTx.ownerIsFeePayer &&
+          parsedTx.error &&
+          parsedTx.from === address &&
+          !parsedTx.signers.includes(address)
+        ) {
+          return
+        } // skip address poisoning txs attempts.
 
         // split dexTx in separate txs
         if (parsedTx.dexTxs) {

package/src/tx-parser.js

@@ -25,6 +25,7 @@ export const parseTransaction = (
   let { instructions, accountKeys = [] } = txDetails.transaction.message
   const feePayerPubkey = accountKeys[0].pubkey
   const ownerIsFeePayer = feePayerPubkey === ownerAddress
+  const signers = accountKeys.filter((key) => key.signer).map((key) => key.pubkey)
   const txId = txDetails.transaction.signatures[0]
 
   const getUnparsedTx = () => {
@@ -87,6 +88,8 @@ export const parseTransaction = (
           id: txId,
           slot: txDetails.slot,
           error: !(txDetails.meta.err === null),
+          ownerIsFeePayer,
+          signers,
           owner,
           from,
           to,
@@ -219,6 +222,8 @@ export const parseTransaction = (
         program: ix.program,
         type: ix.parsed.type,
         slot: txDetails.slot,
+        ownerIsFeePayer,
+        signers,
         owner: isSending ? ownerAddress : null,
         from: isSending ? ownerAddress : source,
         to: isSending ? destination : ownerAddress,
@@ -361,6 +366,8 @@ export const parseTransaction = (
         id: txId,
         slot: txDetails.slot,
         error: !(txDetails.meta.err === null),
+        ownerIsFeePayer,
+        signers,
         ...tx,
       }))
     } else if (preTokenBalances && postTokenBalances) {
@@ -428,6 +435,8 @@ export const parseTransaction = (
     id: txId,
     slot: txDetails.slot,
     error: !(txDetails.meta.err === null),
+    ownerIsFeePayer,
+    signers,
     ...tx,
   }
 }

package/src/ws-api.js

@@ -150,6 +150,14 @@ export class WsApi {
     const timestamp = Date.now() // the notification event has no blockTime
 
     if (!parsedTx.from && parsedTx.tokenTxs?.length === 0) return { logItemsByAsset: {} } // cannot parse it
+    if (
+      !parsedTx.ownerIsFeePayer &&
+      parsedTx.error &&
+      parsedTx.from === address &&
+      !parsedTx.signers.includes(address)
+    ) {
+      return { logItemsByAsset: {} } // skip address poisoning txs attempts.
+    }
 
     const transactions = [] // because one single tx can have multiple instructions inside