Today, MetaMask, the world’s leading self-custody web3 platform developed by Consensys, and Blockaid, a leading web3 security provider, announce the launch of privacy-preserving security alerts in the MetaMask extension. This new feature makes MetaMask the first self-custody web3 wallet to integrate native security alerts, proactively preventing malicious transactions, protecting users from scams, phishing, and hacks, all while preserving users’ privacy. MetaMask and Blockaid estimate that these privacy-preserving security alerts, available to all users globally, aim to prevent billions worth of assets from being stolen. The official launch is slated to commence on October 31st, 2023, with the ability for desktop users to opt-in under the MetaMask experimental setting. The feature will debut on the MetaMask mobile app later in November. By the first quarter of 2024, this new feature will be seamlessly integrated and enabled into the wallet by default, and the intention is to make it available to 100% of MetaMask’s users.
The First Wallet To Enhance Security Without Compromising Privacy
Most web3 wallets rely on sharing users’ transaction data with a third party for validation to provide security alerts. In contrast, MetaMask and Blockaid have pioneered a unique privacy-preserving module that effectively simulates transactions while eliminating the need to share every single transaction and signature request with external parties.
“With these native privacy-preserving security alerts, MetaMask is not only enhancing user safety but also setting a new standard for privacy-preserving security in the web3 ecosystem. Privacy is a core value of web3 and should not need to be sacrificed to improve usability. Instead, it should be a guiding principle in the development of solutions to improve the space. As we continue to innovate, we remain committed to empowering users and providing them with the tools they need to navigate the world of web3 with confidence”
said Dan Finlay, Co-Founder of MetaMask and Chief Ethos Officer at Consensys.
Blockaid already has an established record of preventing theft. When Vitalik Buterin’s X (formerly Twitter) account was hacked to promote a malicious dapp, Blockaid’s proactive scanning was able to flag the bad actor and stop over $100,000 in digital assets from being stolen. When a similar scam targeted the CEO of Uniswap’s X account, Blockaid was able to prevent any losses from transpiring at all. These types of attacks occur regularly, so losses averted quickly add up.
A Game-Changer For User Safety, Protecting Billions Of Dollars In Assets
The web3 ecosystem is dynamic, with approximately 3-4 new dapps emerging every minute, translating to around 5,000 per day. Blockaid estimates that about 10% of these dapps are malicious. Unintended transaction outcomes have ranked among the most common causes of fund loss incidents within MetaMask. Security alerts that proactively thwart malicious transactions are pivotal in safeguarding users against scams, phishing, and hacks. In a recent survey commissioned by Consensys on the perceptions of web3, 47% of global respondents cited “too many scams” as one of the primary barriers for entering the crypto ecosystem, underscoring the importance of increasing user safety to broader adoption.
In April 2023, MetaMask and Blockaid jointly introduced Opensea security alerts as an experimental opt-in feature. This feature garnered adoption from an average of 4% of MetaMask users and effectively averted asset theft valued at $500 million, based on prevented and identified malicious transactions since April 2023. Due to the success of this experimental opt-in feature, MetaMask and Blockaid anticipate that the new privacy-preserving security alerts will prevent the loss of assets worth at least billions dollars when the feature becomes a default setting for MetaMask wallets.
“For the ecosystem to be ready for billions of users, it needs to be safer”
said Ido Ben-Natan, Co-founder and CEO of Blockaid.
“We’re excited to be working with MetaMask on leading the charge in defining how a wallet should defend its users. Together we are setting the standard for web3 security across users and builders in the space.”
“In our commitment to prepare for the broader adoption of web3 by the next billion users, we acknowledge the importance of developing features that prioritize ease of use and accessibility while staying aligned with the core values of web3. This is the driving force behind our focus on creating a privacy-preserving version of security alerts, one that eliminates the need to share each transaction and signature request data with third parties. Blockaid’s dapp transaction validation solution protects users from malicious transactions without compromising their privacy”
added Barbara Schorchit, Senior Product Owner at MetaMask.
In September of this year, MetaMask introduced MetaMask Snaps for advanced users, with a Transaction Insights category. While the new privacy-preserving security alerts will be seamlessly integrated within MetaMask, users worldwide will continue to have the opportunity to incorporate their preferred security layers by installing transaction insights via MetaMask Snaps. The new security alerts are meant to supplement rather than replace Transaction Insights Snaps, creating multiple layers of protection.
Education remains key
Blockaid’s partnership with MetaMask will have a substantial impact on bolstering security, but education remains pivotal in ensuring that users engage with the web3 ecosystem in a safe and self-managed manner. In January 2023, MetaMask unveiled MetaMask Learn, a learning simulation platform meticulously crafted to assist users in navigating the intricacies of the web3 landscape and self-custody wallets. This platform seamlessly integrates visual learning methodologies with action-oriented testing, offering a comprehensive and engaging approach to understanding the complexities inherent in web3 concepts. The recently launched module on Security aims to specifically educate users on how to identify malicious activity and keep their assets safe.
