fix: held tokens price data

[GeorgeGkas]

Explanation

References

Checklist

• I've updated the test suite for new or updated code as appropriate
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

---

Note

Low Risk
Scoped selector change for display and quote metadata pricing; bridge controller rates still take precedence and legacy paths are unchanged when assetsPrice is absent.

Overview
Fixes missing fiat values for held tokens (e.g. USDC) when clients use unified AssetsController pricing via useAssetsControllerForRates.

selectExchangeRateByAssetId now looks up fungible assetsPrice entries (after bridge assetExchangeRates, before legacy marketData / currency slices), mapping price / usdPrice to exchangeRate / usdExchangeRate. normalizeAssetId aligns lowercased CAIP-19 IDs with checksummed keys; NFT and invalid price rows are skipped. Exchange-rate source types include optional assetsPrice. Tests and changelog document the behavior.

^{Reviewed by Cursor Bugbot for commit ffab58f. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit ffab58f. Configure here.}

[cursor]

Malformed ERC20 lookup throws

Medium Severity

selectExchangeRateByAssetId now always calls normalizeAssetId before legacy rate paths. For invalid short EVM ERC-20 references, normalizeAssetId checksums via toChecksumAddress, which throws on non–40-character hex. That breaks the prior contract of returning {} without throwing for malformed asset IDs.

 

^{Reviewed by Cursor Bugbot for commit ffab58f. Configure here.}