Found by walking the chain's own logs

Nothing on chain says which factory is canonical

A check that hardcoded one of these would fail on the markets served by the others, and the address would not be the bug — the assumption would. Every pool carries its own.

A ticker is not an identity

Several ERC-20s on this chain answer symbol() with a famous ticker. The tokenised equities are matched on their name's exact suffix — • Robinhood Token — anchored at the end, with a length bound of 96 characters on the name and 16 on the symbol.

A substring test admits any token that mentions the issuer anywhere inside a very long string, and a token whose symbol is thousands of characters is not hypothetical: one reached production on a sibling site and laid out a single card twenty-five thousand pixels wide. Both strings are clamped again where they are printed, because a filter is a judgement about what to show and a clamp is a fact about what a layout can hold.

None were rejected in this window. That is reported rather than left out: the filter is checked against fixtures at build time, so an empty reject list means this sample contained no impostors — not that the test stopped running.