Repository navigation
Add lumeswap.io and lynks-platform.com to blocklist - #1860
webninjadk wants to merge 1 commit into
Conversation
lumeswap.io — fake Solana “copy trading” / DEX: untradeable internal tokens, fabricated charts, custodial copy wallets, admin-locked withdrawals after deposits. lynks-platform.com — linked “verification” portal requesting wallet approvals (drain pattern). Evidence: - https://solscan.io/account/97iZpQeM2nuzNd7W1qSjWxhUggomfw7ZcB5a3FYxPMDo - https://solscan.io/token/FNsc23Fx72NU3itf4brSxgrXCrUEYhFHWEgg8QiJbySU - Chainabuse report filed (victim wallet FC8Hkt4G…)
|
Navigate logical layers of code changes, visualize relationships, and explore their blast radius. No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Advanced Run ID: 📒 Files selected for processing (1)
Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review. 📝 WalkthroughWalkthroughThe blocklist adds ChangesBlocklist entries
Priority: ➖ Normal Change: Feature Merge Risk: ⚪ Minimal · up to The two domains follow the existing blocklist format and generation path. No concrete merge risk is established beyond normal checks. Architecture SummaryArchitecture risk: 🔵 Low · up to The change affects 1 system. Changed systems: Architecture concerns Review detailsSystems and components
Before / after behavior
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
|
Official response from the LumeSwap team — please do not blocklist We represent LumeSwap (https://lumeswap.io). We ask maintainers to remove The report does not include verifiable evidenceThe PR does not provide:
The only wallet URL in the PR is: https://solscan.io/account/97iZpQeM2nuzNd7W1qSjWxhUggomfw7ZcB5a3FYxPMDo We checked our platform records: The PR also mentions a Chainabuse report with victim wallet The token mint link (FNsc23Fx…) is a public SPL token; it does not establish that How LumeSwap handles user funds
Unrelated domain
Prior Phantom reviewPhantom Support previously reviewed Requested actionPlease do not merge a blocklist entry for https://lumeswap.io · support@lumeswap.io Thank you. |
|
If it is needed i will provide all adittional proofs. These scammers native from Russia and i have all transaction details and screenshots. They still did not return me 900$ of balance that the y scammed and soon will be additional poilce report about cyber criminal action. Good that they start to reveal themselves by such comments. But i beleive thes account is also fake one time. |
|
As you can see this account does not have any contacts and his age is new. just created |
|
You still have not submitted any verifiable evidence in this thread or in the original PR — no transaction IDs showing unauthorized drainage, no malicious approval flows, no reproducible phishing steps, no Chainabuse report link, and no proof tying Repeating serious accusations (“scammers”, “cyber criminal”, “$900 stolen”) without evidence on record is not a substitute for a security review. It is defamation and distracts from whether About our identity: this is an official team response for LumeSwap. We have been in direct contact with Phantom Support for months . That correspondence can be confirmed with Phantom internally if maintainers need verification. GitHub account age is irrelevant to whether a blocklist entry is correct. What matters is evidence: on-chain proof, reporter contact, and a clear explanation of the attack pattern. You have provided narrative only. We again request that |
|
Please provide your legal company address, legal company name, also phone and email. This will be good additional information for further investigation by police. Also who is official director of lumeswap.io. Where company is registered? |
|
Also this dialog also will be very useful for future search, that victims, i hope will do, before sending money to scammers |
|
This thread is a public blocklist review on Please post here, in this PR:
Demanding a legal address, director name, or “information for police” does not substitute for blocklist evidence. You are an anonymous GitHub reporter; maintainers need on-chain / technical proof, not corporate registry details posted in a comment. We have had ongoing official correspondence with Phantom Support from this email for months. Phantom can verify identity internally if needed for a domain review. If you believe a crime occurred, you may pursue that through proper legal channels with your own evidence. That is separate from whether this PR should blocklist a DEX frontend without proof. We again ask maintainers not to merge |
|
Please provide your legal company address, legal company name, also phone and email. This will be good additional information for further investigation by police. Also who is official director of lumeswap.io. Where company is registered? |
|
We will not accept baseless accusations (“scammers”, etc.) without evidence while our legitimate product is at stake. If you have proof, post it. If not, stop defaming LumeSwap in a blocklist repo meant for verified security issues. |
lumeswap.io — fake Solana “copy trading” / DEX: untradeable internal tokens, fabricated charts, custodial copy wallets, admin-locked withdrawals after deposits. lynks-platform.com — linked “verification” portal requesting wallet approvals (drain pattern). Evidence:
Summary by CodeRabbit
lumeswap.ioandlynks-platform.comto the blocklist. Both domains are now covered by the existing blocklist behavior, bringing them in line with other listed domains. No other blocklist changes are included in this update.