SmartNETWORK - The biggest Crypto/Blockchain Projects Directory | JUST LAUNCHED!

[smartnetwork]

I want to announce and present here my new just launched project!

SmartNETWORK - The biggest and most complete Crypto & Blockchain Projects Directory

Link: https://smartnetwork.cc

People can also vote daily for their favorite project!

All discussions are open here...
Leave here your feedback, thanks!

[SFR10]

People can also vote daily for their favorite project!

It appears that with a simple connection change ^{[e.g., VPN]}, users can artificially inflate or deflate ratings ^{[even though there aren't any methods that can completely limit users, it'd still be better if you could add a few more layers to reduce its likelihood]}.
^{- BTW, I noticed triplicate results (e.g., Binance CEX) in some of the featured categories on the homepage.}

[smartnetwork]

You're right.. currently the voting system is very poor.. but soon will be implemented anti bots and anti manipulation protections..

[smartnetwork]

SmartNETWORK — Security Audit, Anti-Manipulation Upgrade & Hardening Report

https://smartnetwork.cc

Quick recap for anyone new: SmartNETWORK is a directory of 41,309 crypto & blockchain projects across 509 chains, with daily community voting.

This post follows up on the feedback in this thread — in particular SFR10's report about rating manipulation. That report was accurate and directly actionable, so thank you. Here is exactly what was found, what was fixed, and how it was verified.

• Vote manipulation via connection change (VPN/proxy) — CONFIRMED, then FIXED
  
• Duplicate / "triplicate" entries on the homepage — root cause identified
  
• Full security audit & hardening — details below
  

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
1. ANTI-MANIPULATION VOTING
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

SFR10 was right. The old system trusted a client-supplied header (X-Forwarded-For) when de-duplicating votes. Because a client controls that header, a simple VPN/proxy rotation was enough to cast effectively unlimited votes on the same project on the same day — in either direction, up or down.

What changed:

• Trusted-IP only. The server now reads only the address appended by the edge network. Whatever the client sends is ignored, so rotating a connection no longer mints a new voting identity.
  
• Per-IP daily cap. 30 votes/day enforced server-side, tracked in Redis with automatic expiry.
  
• Strict input validation. Project id length and character set are validated, as is the vote type. This closes off malformed and bulk-payload injection into the vote store.
  
• Content-type enforcement. Only JSON is accepted, which blocks cross-site request forgery.
  

Verified live on production: two vote attempts from the same machine using two different spoofed IPs — the second was rejected as a duplicate. Spoofing no longer works.

Being straight with everyone: this raises the bar substantially and closes the blind/scriptable abuse that was reported. No system can fully stop a determined actor wielding a large residential proxy pool — that is a fundamental limit of IP-based rate limiting without accounts. But casual, unlimited inflation is gone.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
2. DUPLICATE HOMEPAGE ENTRIES
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Root cause found: votes from the very first day (2026-06-08) were recorded under a bare project name (e.g. Lido), while every vote since 2026-06-09 uses the canonical name|chain form (e.g. Lido|ethereum). The two forms were tallied separately, so one project could surface twice in the same category — the "triplicate Binance CEX" effect.

The endpoint now enforces the canonical id format server-side — not just in the browser — so no new split entries can be created, even by a hand-crafted request. A one-time cleanup of the 8 legacy first-day entries is pending.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
3. SECURITY AUDIT & HARDENING
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

• Security headers. Added Content-Security-Policy, X-Content-Type-Options, X-Frame-Options (clickjacking protection), Referrer-Policy, Permissions-Policy, Cross-Origin-Opener-Policy, and HSTS with includeSubDomains + preload.
  
• Privacy / GDPR. Voter IP addresses are no longer stored in plain text — they are now stored as salted SHA-256 hashes. The salt is a server-side secret, so the stored values cannot be brute-forced back across the (small) IPv4 address space. Existing plain-text IPs were migrated to hashed form.
  
• Deployment hygiene. Internal tooling and scratch files that were previously reachable by anyone now return 404.
  
• Dependency update. The KV client was two major versions behind (v1 is officially deprecated upstream); upgraded to v3, with a lockfile added for reproducible builds.
  

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
VERIFICATION
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

All of the above was verified against the live production site, not merely in staging:

• Vote de-duplication holds under spoofed headers (tested live)
• Malformed requests rejected with precise codes: 405 method / 415 content-type / 400 bad id or type / 429 rate-limit or duplicate
• Canonical name|chain ids still accepted — the accept path was exercised end-to-end on production, then the test vote removed
  
• 32 automated security tests pass against the real endpoint code (they extract the shipped functions rather than a copy, so they cannot silently drift)
• All 41,309 projects and 509 chains intact, byte-for-byte
• The vote store survived the migration uncorrupted

Thanks again to SFR10 for the sharp report.

[smartnetwork]

SmartNETWORK — The Great Directory Purge & Rebuild: 100% Verified-Alive Projects, 100% Icons, Unique Descriptions, Tags & Full-Text Search

https://smartnetwork.cc

Quick recap for anyone new: SmartNETWORK is a directory of crypto & blockchain projects with daily community voting. This post covers the largest content overhaul in the site's history — every single entry was re-verified, re-written and re-tagged, and the directory grew by thousands of new projects.

The headline numbers:

• 32,971 projects across 471 chains — and every one of them is verified alive
  
• 100% icon coverage — a real logo on every single entry, no more letter placeholders
  
• 100% unique descriptions — every project re-written, zero duplicates, zero copied text
  
• ~13,300 dead entries removed — expired domains, parked "for sale" pages, dead servers
  
• +5,700 brand-new projects added in this overhaul
  
• 37 topic tag pages + a new homepage tag cloud
  

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
1. EVERY PROJECT IS NOW VERIFIED ALIVE
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

We checked every project website in the directory — 8,564 unique domains — and classified each one:

• Expired domains (DNS no longer resolves) — removed
  
• Parked / for-sale pages — HTTP 200 with "domain for sale", "buy this domain", registrar parking, coming-soon shells — removed. A 200 status proves nothing; the page content is what matters
  
• Dead servers — connection refused, timeouts, 404s, 5xx, untouched nginx start pages — removed
  
• Cloudflare / WAF-challenge pages count as ALIVE — dead projects don't run bot protection
  

Being straight about the standard applied: no project was removed without positive proof of death — anything ambiguous was re-checked before any decision was made. The result: 0 known-dead projects remain on the site.

For the ~15,000 listings that had no website at all (mostly tokens — pump.fun launches and similar), we resolved their real web presence: official homepage if one exists, otherwise their verified Twitter/X, Telegram, Discord or GitHub. A project with only a social profile keeps that profile as its link — a project with nothing at all was removed. That is why the count went from 41,309 down before going back up: we cut everything unverifiable, then grew back with verified entries only.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
2. 100% ICON COVERAGE
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Every entry now has a logo:

• Official project logos from verified sources (square, high-res)
• Domain favicons where that's the only official asset
• Tokens with no logo anywhere get a deterministic brand-colored initial icon — generated per project, so every card looks complete instead of showing a blank placeholder
  

And this isn't a one-off cleanup — the whole verification process is automated, so it can be re-run any time to catch newly-dead projects. Dead links won't silently accumulate again.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
3. 100% UNIQUE, SEO-OPTIMIZED DESCRIPTIONS
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

The old descriptions were largely template boilerplate — thousands of entries shared the same two sentences. All of that is gone. Every one of the 32,971 projects now has its own description:

• Globally unique — 32,971 entries, 32,971 distinct texts, 0 duplicates (verified)
  
• Original — composed from each project's own facts; zero copied source text
  
• SEO-structured: project name leads the first sentence, followed by category, chain and long-tail function keywords; 20–50 words each
• Categories were overhauled too: the "Tokens" catch-all was cut from 17,215 entries to 6,529 by re-classifying every project against authoritative category data

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
4. THE DIRECTORY GREW — MOST COMPLETE COVERAGE YET
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

We swept the entire crypto ecosystem for projects that weren't on the site yet, and added everything that could be verified alive:

• +5,700 new projects (Ethereum 1,592, Arbitrum 1,244, Solana 1,074, BNB 357, Base 314, plus Abstract, Monad, Berachain, X Layer and other new chains)
  
• New entries arrive with everything: verified link, official logo, correct category, unique description

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
5. TAGS, SEARCH & DISCOVERABILITY
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

• Topic tags on every project — auto-assigned from the description: dex, lending, liquid-staking, yield, bridge, rwa, stablecoin, perps, nft, gaming, wallet, dao, privacy, ai, payments, memecoin, bitcoin, depin, restaking…
  
• 37 tag pages at /tag/... — new indexable topic hubs (defi 13,165, token 6,529, yield 6,336, staking 5,881, infrastructure 4,263…)
  
• Homepage "Most Used Tags" cloud at the bottom — click any tag to browse that topic
  
• Search + filters on every listing page — category pages, chain pages and tag pages all got a search box, filters and sorting (including vote-based sorting)
  
• Fixed: selecting only a category on the homepage previously returned 0 results — now it loads the full category instantly
  
• Fixed: "Visit Website" buttons that looped back to our own page for website-less tokens — buttons now only appear when there's a real destination, and token entries link to their official social profiles instead
  
• Internal linking — every project page links to its chain hub, category hub and related projects; all 471 chain pages, 13 category pages and 37 tag pages are in the sitemap (33,457 URLs total)
  

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
WHAT'S NEXT
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

• The liveness pipeline runs on a schedule — dead projects won't sneak back in
• New projects are being added continuously as they launch and can be verified
• Vote-based sorting is live on every listing page — the community ranking finally has proper surfaces

As always: if you spot a dead link, a wrong category or a duplicate, report it in this thread. The purge process is one command away from a fix.

https://smartnetwork.cc — the biggest & most complete crypto & blockchain projects directory.