The PR contains three changes:

1. E2E API Mocking Allowlist (e2e/api-mocking/mock-e2e-allowlist.ts): Added https://api.hyperliquid.xyz/info to the allowlist. This is a minor addition to support HyperLiquid API calls in E2E tests for the Perps (perpetuals trading) feature. This warrants running SmokePerps tests.

2. Signature Utility Security Fix (app/components/Views/confirmations/utils/signature.ts): A security fix to the regex REGEX_MESSAGE_VALUE_LARGE that extracts large numeric values from message.value. The change from [^}]* to [^{}]* prevents matching nested "value" fields, which could be exploited in spoofing attacks where attackers include nested objects with large "value" fields to trick the UI into displaying different amounts than what will actually be signed. This is a critical security fix for the confirmations flow.

3. Unit Tests (app/components/Views/confirmations/utils/signature.test.ts): Added comprehensive tests for the nested value spoofing protection, covering various attack scenarios.

The signature utility is imported by 20+ files in the confirmations flow including typed sign components, personal sign, permit simulations, and blockaid banner. This warrants running SmokeConfirmationsRedesigned tests to verify the signature parsing and display functionality works correctly with the security fix.

Risk is medium because:

• The signature utility change is a targeted regex fix with good test coverage
• The change is security-focused but the fix is straightforward
• The allowlist change is additive and low-risk