Metamask is elated to announce it has finally solved a vulnerability in its wallet following the report by Alexandru Lupascu, OMNIA Protocol’s founder.
As per the announcement, Metamask has finally managed to secure the privacy of its 21 million users after solving the vulnerabilities in its wallet. Notably, the vulnerability allowed bad actors to extract users’ IP addresses each time non-fungible tokens (NFTs) were airdropped to wallets. The issue came to light last year in December after Alexandru Lupascu reported the issues. Later, Dan Finlay, the co-founder of Metamask, acknowledged the issue.
Commenting on the issue, Da Finlay explained:
“Yeah, I think this issue has been widely known for a long time, so I don’t think a disclosure period applies. Alex is right to call us out for not addressing it sooner. Starting work on it now. Thanks for the kick in the pants, and sorry we needed it.”
After about two months of working on the issue, Metamask has released an updated patch on Github, “NFT Auto Detection Settings,” to restore the privacy settings for its users. Metamask is the number one Web 3.0 platform with over 21 million users. That said, it would have been disastrous if hackers managed to exploit such vulnerability.
While testing for the vulnerability, Lupascu minted an NFT on OpenSea based on the ERC-1155 standard. He then used a smart contract editor to change the original URL linked with the NFT. This made it possible for him to point to a new server under his control before sending the NFT to an Ethereum address. Reportedly when he accessed the address through the MetaMask mobile app, he noted that his IP address appeared in the server he controlled. This shows how committed Alexandru and his team are towards the decentralization, security, and privacy of blockchain’s ecosystem.
Since its launch, OMNIA Protocol has played a significant role in allowing users easy, safe and decentralized access to multiple blockchain applications. The protocol is a product of efforts done by a team of experts in crypto and cyber security. The team created an untraceable blockchain nodes infrastructure and privacy relayers. In addition, OMNIA creates financial incentives for node operators that ensure they get rewarded for keeping the network functioning and establishing privacy.
