Legitimate domains, IPs, IPFS hashes, or IPNS names
https://aegirmart.vercel.app
Please explain why this content is legitimate
AEGIRMART is an open-source prediction-market trading interface for binary event
contracts on Somnia testnet, built for the DoraHacks Event Contracts hackathon.
Source: https://github.com/Kavanih/aegirmart
It is testnet only. The site connects to Somnia Testnet (chain id 50312) and
trades in tUSDC, a test token with no monetary value. It cannot be used on
mainnet.
What the site actually does with a wallet:
- Requests a read-only connection to display the account's positions and orders.
- Requests two transaction types, both user-initiated from an explicit click:
placeBinaryOrder on the DreamDEX binary pool contract to buy an outcome
token, and finalizeAndRedeem on the settlement contract to redeem a winning
position back to tUSDC.
- Requests an ERC-20 approval for the pool contract so an order can escrow its
collateral.
What it does not do: there is no token drainer pattern, no setApprovalForAll,
no signature request for off-chain permits or seaport-style orders, no transfer
of assets to any address controlled by the site, and no request to sign
arbitrary data. The user's own wallet signs every transaction and custody never
leaves it.
I believe the flag is triggered by the combination of a newly created
*.vercel.app subdomain and a page that requests wallet connection and
transactions, rather than by any behaviour of the site itself. The deployment is
a few hours old.
Happy to provide contract addresses, transaction hashes, or a walkthrough if
that helps evaluation.
Is this a duplicate request?
Legitimate domains, IPs, IPFS hashes, or IPNS names
https://aegirmart.vercel.app
Please explain why this content is legitimate
AEGIRMART is an open-source prediction-market trading interface for binary event
contracts on Somnia testnet, built for the DoraHacks Event Contracts hackathon.
Source: https://github.com/Kavanih/aegirmart
It is testnet only. The site connects to Somnia Testnet (chain id 50312) and
trades in tUSDC, a test token with no monetary value. It cannot be used on
mainnet.
What the site actually does with a wallet:
placeBinaryOrderon the DreamDEX binary pool contract to buy an outcometoken, and
finalizeAndRedeemon the settlement contract to redeem a winningposition back to tUSDC.
collateral.
What it does not do: there is no token drainer pattern, no
setApprovalForAll,no signature request for off-chain permits or seaport-style orders, no transfer
of assets to any address controlled by the site, and no request to sign
arbitrary data. The user's own wallet signs every transaction and custody never
leaves it.
I believe the flag is triggered by the combination of a newly created
*.vercel.app subdomain and a page that requests wallet connection and
transactions, rather than by any behaviour of the site itself. The deployment is
a few hours old.
Happy to provide contract addresses, transaction hashes, or a walkthrough if
that helps evaluation.
Is this a duplicate request?