MetaMask denies claims of wallet exploit in ‘massive’ $10M hack


Cryptocurrency wallet provider MetaMask has denied claims that an exploit of its wallet is the cause of a "mass wallet drain operation" that has claimed more than 5,000 Ether (ETH).

On April 18, MetaMask tweeted in response to a series of tweets posted on April 17 by Taylor Monahan, the founder of Ethereum wallet manager MyCrypto, who explained a Unidentified wallet drain exploit has stolen more than $10.5 million worth of crypto and non-fungible (NFT) tokens since December 2022.

"Recent reports on [Monahan’s] thread has incorrectly claimed that a massive wallet drain operation is the result of a MetaMask exploit,” MetaMask said.

"This is incorrect. This is not a specific MetaMask exploit," he added.

The wallet provider said that the 5,000 ETH was stolen “from various addresses on 11 blockchains,” reaffirming the claim that funds were hacked of MetaMask "is incorrect".

Speaking to Cointelegraph, Wallet Guard co-founder Ohm Shah said that the MetaMask team has been “tirelessly investigating” and that “there is no solid answer as to how this happened.”

“There are tons of independent security researchers looking into this as well,” Shah said.

He speculated that it was possible to assume that there had been "some kind of private key or seed phrase leak".

In his latest series of tweets, MetaMask confirmed your security team was investigating the source of the exploit and was "working with others in the Web3 wallet space"

Related: SafeMoon hacker agrees to return 80% of stolen funds, says dev team

In his thread about the exploit, Monahan stated that "no one knows how" this massive attack was carried out, but his "best guess" was that a significant amount of old data was obtained and used to extract the funds.

He also originally claimed that the attacker was draining longtime MetaMask users and employees by using MetaMask.

Monahan later stated that the exploit is not specific to MetaMask and that "users of all wallets, even those created on a hardware wallet", have been affected by the exploit.

Magazine: Should crypto projects ever negotiate with hackers? Probably