Skip to content

Add vaultbags.app to whitelist#1801

Open
lshades wants to merge 2 commits intophantom:masterfrom
lshades:add-vaultbags-app
Open

Add vaultbags.app to whitelist#1801
lshades wants to merge 2 commits intophantom:masterfrom
lshades:add-vaultbags-app

Conversation

@lshades
Copy link
Copy Markdown

@lshades lshades commented Mar 25, 2026

Request

Add vaultbags.app to the whitelist to remove the false positive security warning.

About VaultBags

VaultBags is an autonomous treasury protocol built on the Bags.fm ecosystem. Trading fees are auto-converted into diversified real-world assets (tokenized gold, S&P 500, US Treasury bonds) that token holders can claim directly to their wallets.

Technical Details

  • Uses Privy SDK with signAndSendTransaction (not raw signTransaction + sendRawTransaction)
  • Open-source codebase
  • All on-chain transactions verifiable on Solscan
  • Treasury wallet: Bd7PmDUuvpGjFvHmoi59YCLGvjsShXrsopebg8kjaDWG

Summary by CodeRabbit

  • Chores
    • Added vaultbags.app to the approved domain whitelist and preserved the existing nftplus.io entry.
    • Updated the whitelist file to finalize formatting and ensure the list is properly terminated.

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Mar 25, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: ed53126c-fcca-4246-adbf-1ae2086b7803

📥 Commits

Reviewing files that changed from the base of the PR and between b3dcdf1 and 2dd0e9a.

📒 Files selected for processing (1)
  • whitelist.yaml
✅ Files skipped from review due to trivial changes (1)
  • whitelist.yaml

📝 Walkthrough

Walkthrough

The whitelist.yaml file is updated to add a new whitelisted URL entry vaultbags.app immediately after the existing nftplus.io entry. The file is also terminated with a newline.

Changes

Cohort / File(s) Summary
Whitelist Configuration
whitelist.yaml
Added - url: vaultbags.app after - url: nftplus.io; ensured file ends with a newline.
🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title 'Add vaultbags.app to whitelist' accurately and concisely describes the main change in the pull request.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@whitelist.yaml`:
- Line 33: The YAML has two list items on one line: the entry containing
"nftplus.io" and "vaultbags.app" should be split into two separate list entries;
replace the single line that contains both "nftplus.io" and "vaultbags.app" with
two lines each prefixed by the list key (e.g., "- url: nftplus.io" and "- url:
vaultbags.app") so each URL is its own YAML list element.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 6554096e-2cb7-4bed-a39d-551f6b31dacf

📥 Commits

Reviewing files that changed from the base of the PR and between f0e8ff9 and b3dcdf1.

📒 Files selected for processing (1)
  • whitelist.yaml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant