Hack history / 2022 / Hack or exploit
MetaMask
Hack or exploit on Jan 20, 2022 · Information Leakage
ONE SOURCE · 1 SOURCE
Lost
undisclosed
dollars at the time
Returned
none listed
as the sources state it
Rank
not ranked
collapses, frauds and later news are not ranked
What happened
@alxlpsc disclosed on medium that MetaMask has serious privacy leaks. The vulnerability mainly uses MetaMask to automatically load NFT image URLs. Basic attack idea: the attacker can set the URI of the NFT to a server URL that he can control, and transfer the NFT to the target account; when the user logs in to MetaMask, MetaMask will automatically scan the NFT owned by the account, and initiate a pointer to The HTTP request to the attacker's server; the attacker can obtain the victim's IP information from the access log.
Details
- Date
- Jan 20, 2022
- Kind
- Hack or exploit
- Method
- Information Leakage
- How in
- Keys, accounts and infrastructure
- Target
- Wallet
- Chains
- not stated
Reported by
Related incidents
$650,000 phishing attack against MetaMask user reveals that credentials are automatically backed up to iCloud 2022 · Scam · $650K
Traders duped out of $1.8 million in a fake MetaMask governance token scheme 2021 · Hack or exploit · $1.8M
LastPass 2022 · Hack or exploit · undisclosed
Neopets 2022 · Hack or exploit · undisclosed
Hubspot 2022 · Hack or exploit · undisclosed
Traders duped out of $1.8 million in a fake MetaMask governance token scheme 2021 · Hack or exploit · $1.8M
LastPass 2022 · Hack or exploit · undisclosed
Neopets 2022 · Hack or exploit · undisclosed
Hubspot 2022 · Hack or exploit · undisclosed
Cite this page
SwanBluechip, "MetaMask hack, Jan 20, 2022: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht11b81105fe/ (data as of 2026-10-31).