Content(add): smart contract interaction security page under wallet-security

[artemisclaw82]

Summary

Adds a new page at docs/pages/wallet-security/smart-contract-interaction-security.mdx covering security practices for the interaction layer between having a secure wallet and signing a transaction. Updates sidebar navigation.

Closes #332

What's included

• Contract Verification — Verifying addresses against official sources, block explorers, bytecode comparison
• Transaction Simulation — Tenderly, Phalcon, Rabby simulation, fork-testing for high-value transactions
• Token Approval Hygiene — approve() risks, exact vs unlimited amounts, permit()/EIP-2612 dangers, Revoke.cash
• Signature Request Scrutiny — Risk table for signature types, EIP-712 analysis, phishing red flags
• Slippage and MEV Protection — Slippage tolerance, Flashbots Protect, MEV Blocker, multi-hop route inspection
• dApp Connection Security — URL verification, wallet disconnection, risk-profile separation
• Common Attack Patterns — Address poisoning, clipboard malware, ice phishing, permit phishing
• Quick Reference Checklist — 7-item checklist for every interaction

Files changed

• docs/pages/wallet-security/smart-contract-interaction-security.mdx — New page
• vocs.config.ts — Added Smart Contract Interaction Security to Wallet Security sidebar (dev: true)

Design decisions

• No duplication: Signing verification mechanics referenced via internal links to existing pages. Tool listings reference the Tools & Resources page.
• Fills a gap: Existing wallet-security covers wallet selection, seed phrases, signing verification, and multisig — but not user behavior during dApp interaction.

Template compliance

• YAML frontmatter (title, description 140-160 chars, tags, contributors)
• Key Takeaway (≤40 words)
• Import paths correct
• TagProvider/ContributeFooter structure
• Sidebar entry with dev: true
• Internal links verified (6 cross-references)
• External URLs verified
• Signed commit (GPG)

[vercel]

@artemisclaw82 is attempting to deploy a commit to the Security Alliance Team on Vercel.

A member of the Team first needs to authorize it.

[artemisclaw82]

Disclosure: This content was written by Artemis, an AI assistant operated by @DicksonWu654. It has not yet been reviewed by a human. Dickson will review and revise before marking as ready for review.

Keeping as draft until that review is complete.

[github-actions]

Sidebar Configuration Reminder

Documentation files update:

New in this push:

• docs/pages/wallet-security/smart-contract-interaction-security.mdx (added) ← NEW

Please ensure that:

• The sidebar in vocs.config.tsx has been updated to include these files
• New content has the dev: true parameter so it's marked as under development
• Sidebar links match the file paths - use the preview deployment to verify

See Contributing Guide – Sidebar & Navigation for more details.

---

_{This is an automated reminder. If this PR doesn't need sidebar changes, you can ignore this message.}

[artemisclaw82]

Addressed all comments:

• QuillAudits contributor added to contributors.json with full profile (avatar, GitHub, Twitter, website, description)
• Removed "— topics not covered elsewhere in the framework"
• Address poisoning expanded: fake tokens/NFTs, explorers, Safe UIs, don't copy from recent activity
• Clipboard malware now includes remediation: stop transacting, move funds from clean device, rotate credentials
• Multi-hop routes clarified: aggregators routing through unintended intermediary pools — this is a real DEX concern with aggregators like 1inch/Paraswap
• Ice phishing is real — coined by Microsoft in Feb 2022. Added citation.
• Permit signature phishing merged into the EIP-2612 section above (was redundant with it)

[artemisclaw82]

Fixed — reverted the contributors.json formatting changes. Now only adds the quillaudits entry without reformatting any existing entries.

[artemisclaw82]

Fixed — restored the 4 deleted contributors (gunnim, madjin, monperrus, smagdali). They were lost when I reset to develop which did not have them yet. Now using the branch prior state as base, with only the quillaudits entry added.

[DicksonWu654]

lgtm now - please undraft

[github-actions]

built with Refined Cloudflare Pages Action

⚡ Cloudflare Pages Deployment

Name	Status	Preview	Last Commit
frameworks	✅ Ready (View Log)	Visit Preview	c681b13

[scode2277]

@mattaereal ready to go! Thanks @DicksonWu654!!