Rates Engine v0.5.0-rc.32

[v0.5.0-rc.32] — 2026-05-08

Added

• Scam-issuer warnings on /v1/issuers and the explorer. New
  curated internal/api/v1/known_scams.go map seeded from
  stellar.expert's directory; entries flag G-strkeys tagged
  malicious or unsafe. /v1/issuers and /v1/issuers/{g} now
  carry a scam_reason field (omitempty) when the issuer is
  flagged. The /issuers table renders a red "SCAM" badge next to
  the org name; /issuers/[g_strkey] shows a full-width warning
  banner above the header. Bootstrap entry: GBYBVW…GUARD (5M
  observations on prod, flagged "SCAM Counterfeiter" by
  stellar.expert).

Fixed

• Explorer: render the native XLM SAC as "XLM" on Soroban DEX pool
  rows. The Aquarius / Soroswap / Phoenix / Comet pools that emit
  CAS3J7GYLGXMF6TDJBBYYSE3HQ6BBSMLNUQ34T6TZMYMW2EVH34XOWMA (native
  XLM's SAC) as base/quote previously rendered as a truncated SAC
  fingerprint because that contract is intentionally absent from the
  operator wrapper map (it isn't a wrapper of a classic asset — it
  is the SAC for native XLM itself, which the on-chain usd_volume
  validator rejects mapping to "native"). AssetLabel now hardcodes
  the well-known C-strkey to render "XLM / SAC" directly, ahead of
  the wrapper-map lookup. Same display as the resolved-classic SAC
  rows.