MetaMask Shuts Down Wallet Exploit Claims: Report

Web3 wallet provider, MetaMask took Twitter to deny claims that a “massive wallet-draining operation” originated from an exploit of its wallet.

The update comes after Taylor Mohanan alleged that an attacker was “sending” transactions via MetaMask, draining crypto from long-time users and employees. Mohanan, who also happens to be a MetaMask developer, later confirmed that the attack was not MetaMask-specific.

• The “sophisticated” heist was first discovered by Monahan early this week. According to her original post, the attack resulted in the loss of more than 5,000 ETH and an undetermined quantity of tokens and NFTs since December 2022.
• The attacker deliberately targeted “OGs who are reasonably secure,” as per Monahan’s analysis, which added that no one has figured out where the exploit lies.
• In a series of tweets, MetaMask confirmed that its platform was not exploited in any way.

“Recent reporting on (Monahan’s) thread has incorrectly claimed that a massive wallet-draining operation is a result of a MetaMask exploit. This is incorrect. This is not a MetaMask-specific exploit.”

• The wallet provider further went on add that its security team is working with affected wallet providers across the space to locate the source.
• It said that the attacker withdrew 5,000 ETH from different addresses across 11 blockchains rather than only from its platform users.
• Even as details regarding the hacker’s methods remain unclear, the wallet keys of all the victims were created between 2014 and 2022.