Is defautt Metamask behavior secure?

Web Wallets
1

I found an interesting thing about Metamask recently

If you connect Metamask to a custom network node (say you have been using ETH mainnet and now you connect to a Goerllie node), Metamask will immediately send all user’s public keys to this node by doing multiple eth_getBalance() queries , essentially deanonymizing all user keys and funds stored in Metamask on the Eth Mainnet

So if the user has 1000 keys in her wallet, Metamask will send all the keys to the node, the first time you connect to the network essentially fully deanomizing the user.

I wonder if wallets should behave like this.

1 Like
2
  1. That’s interesting. Love to join the conversation
  2. Topic-wise, this seems to better fit in the MetaMask forum.
  3. Product feature wise, it seems it’s better MetaMask ask user to confirm they trust the Custom Node they are connecting to. But this will be hard.
2 Likes