r/Metamask

Region Availability

Hi!

I wanted to ask when will Metamask be available for Aruba which is in the Caribbean so we can use the meta card etc?

reddit.com
u/HiImRyu — 24 hours ago

How Do I Restore My MetaMask Wallet If I Accidentally Delete the App?

I had a moment recently that made my heart stop for a second.

I was cleaning up my phone and accidentally deleted MetaMask.

My first thought was:

> “Wait… did I just delete my crypto too?”

I know the blockchain doesn't work like normal apps, but seeing the app disappear from my phone still made me nervous.

After thinking about it, I realized the important part wasn't the app itself.

It was whether I still had access to my wallet credentials.

If I reinstall MetaMask, I can restore the wallet using my Secret Recovery Phrase (SRP).

Deleting the app doesn't mean the assets themselves were deleted.

The transactions and assets are still associated with the blockchain address.

What really matters is being able to restore access to that wallet.

That made me check something I probably should have checked much earlier:

Do I actually have my Secret Recovery Phrase backed up and stored somewhere safe?

There's another detail I learned:

If you had accounts that were imported using a private key, another Secret Recovery Phrase, a JSON file, or a hardware wallet, those accounts may need to be added again after restoring the main wallet.

So I wouldn't just delete and reinstall MetaMask without checking everything first. I'd make sure I had my SRP written down and safely stored, along with any private keys or other recovery information needed for imported accounts.

https://support.metamask.io/configure/wallet/how-to-restore-your-metamask-wallet-from-secret-recovery-phrase/

My simple rule now is:

> Before deleting the app, make sure you can actually restore the wallet.

And obviously, the Secret Recovery Phrase is not something I'd ever put into a random website or send to someone who claims to be support.

It's something I'd keep private and never share anywhere.

Whoever has it can access the accounts derived from it.

That little mistake taught me something important:

Deleting the wallet app is not the same as deleting the wallet from the blockchain.

The scary part isn't losing the app.

It's losing the ability to restore your wallet.

Has anyone else ever accidentally deleted MetaMask or had it reset and thought they had lost everything?

reddit.com
u/Xosoltani — 1 day ago

Someone fooled Metamasks balance estimation algorithm for phishing?

EDIT: The three tokens are flagged as malicious, but the false value is still there. You learn something every day :)

Had a small sum in my Metamask Card for a while, doing nothing, until I connected the card to Paypal and paid an invoice there today.

Immediately after the payment, the estimated value of my metamask wallet ballooned from ~$100 to around $1300 and then a few minutes later to around $2300, apparently because I now own(?) these new tokens with suspicious names which I've never heard of.

Assuming it's some sort of attack on Metamask to lure me to visit the FQDN and get phishing, so I'm just curious to see how long before it gets "fixed".

u/Poonlit — 2 days ago

Community Question: A case of funds trapped in a deterministic CREATE2 contract and a mathematical glass ceiling — looking for creative angles

Hey everyone, I wanted to share a complex technical case study I've been working on. Maybe someone here has a brilliant idea or a perspective I haven't considered yet.

1. How It All Started (The Mistake)

A while ago, due to a cross-chain routing error, a significant amount of tokens was accidentally sent to a deterministic payment address generated via a CREATE2-based forwarder infrastructure (an EIP-1167 Minimal Proxy-like pattern). This address sits on a chain where the contract hasn't been deployed yet (Nonce 0 for the deployer), so the funds are currently "trapped" in a counterfactual address with no active code on that chain.

2. Support's Response

As expected, I reached out to the support team of the platform/company operating the infrastructure. Their automated response was that it's "unrecoverable" and there is nothing they can do technically.

3. The Engineering Investigation (Red Team & Foundry)

Instead of accepting defeat, I decided to dive deep: I spun up a local Foundry testing environment, pulled the actual bytecode of the Factory, Implementation, and Helper, etched them, and ran full simulations on a local EVM fork.

Armed with an autonomous Red Team loop, I thoroughly tested 11 different attack and redirection vectors:

  • slot0 overwrite attempts
  • Initialization races (Init-race)
  • selfdestruct / Metamorphic contract vectors
  • Various Delegatecall Hijacking methods
  • Selector collisions, etc.

4. The Harsh Findings (Math Wins)

The empirical testing proved conclusively and unambiguously:

  • The Proxy and Helper architecture is Write-Once and completely rigid.
  • The address is cryptographically bound to a preimage that hardcodes the original merchant's destination address (the intended recipient address for the payments).
  • There is no earthly way to change the flush destination (flush). Any deployment and execution command will inevitably release the funds strictly to the original destination address. The equation "Deploy = Redirect" is simply mathematically impossible; there is no uninitialized window, no self-destruct mechanism, and the code is completely static.

5. The Operational Trap (The Catch)

The company/merchant supposed to receive the funds (the original destination in the contract) is in a problematic legal/business state (or unresponsive/insolvent). This means that if I simply deploy the contract and trigger the flush, the funds will land directly with them, and I'll be left with nothing because I have no technical leverage to redirect them to myself.

My Questions for the Community:

  1. Have you ever encountered situations where assets were trapped in deterministic contracts where the code is completely locked to a third-party destination, and you managed to come up with a creative solution (off-chain, legal, or some hidden corner of the EVM)?
  2. Assuming the code itself is technically airtight, what other leverage works in such scenarios against a third party holding the ultimate rights to that target address?

I’d love any feedback, ideas, or insights from anyone who has dealt with similar architectures in the past!

reddit.com
u/smclof — 3 days ago

How do you know if a MetaMask transaction is safe before signing?

The truth is, you can’t be 100% sure, but you can significantly reduce your risk by taking a few extra steps to understand what you are signing.

Here are a few key things I always check before approving any transaction:

1. Make sure you are on the right website

Many wallet drain scams begin with fake websites that look almost identical to the official ones.

Ask yourself:

  • Is the domain name 100% correct?
  • Did I open the dApp from a bookmark or an official project link?
  • Is there anything suspicious or unusual about the URL?

2. Read the transaction details carefully

Review the expected actions before clicking confirm. Are you:

  • Swapping a token?
  • Approving a token allowance?
  • Signing a message?

Make sure the transaction details match your intended action.

3. Pay close attention to token approvals

Before confirming, check:

  • Which token is being approved?
  • Which contract address is being granted approval?
  • Whether unlimited approval is being requested.

Note: Unlimited approvals may seem convenient, but they significantly increase your risk if the smart contract is ever exploited or turns out to be malicious.

4. Never ignore security warnings

Stop and investigate before continuing if MetaMask flags a transaction. However, keep in mind that the absence of a warning does not automatically mean the transaction is safe.

5. Be careful with signatures

Be cautious with off-chain signatures (e.g., eth_sign or permit signatures). If the transaction data is unclear or you don’t understand why you are being asked to sign, stop and investigate.


📋 My Quick Checklist

  • Is the website domain correct?
  • Why is this transaction being requested right now?
  • What specific action is this transaction doing?
  • Is the contract address verified/correct?
  • Are there any security warnings?
  • Is the approval allowance appropriate?

For more details, check out MetaMask's Guide on Security Alerts.

What are the main things you always check before signing a MetaMask transaction?

u/davidt2021 — 7 days ago

How I verify a crypto address before sending, and why MetaMask warned me

I was about to send some crypto the other day when MetaMask showed me a warning about the destination address.

My first thought was honestly:

>“Wait, did I paste the wrong address?”

I stopped before confirming the transaction and started checking the address again.

That made me realize something I probably should have been doing more consistently: never assume an address is correct just because the first and last few characters look familiar.

Crypto addresses are long, random strings, so most of us rely on copy and paste. That’s convenient, but it can also create an opportunity for something called address poisoning.

A malicious address can be made to look very similar to an address you've interacted with before. Someone may send a tiny transaction from that address, hoping you'll later copy it from your transaction history without checking the full address.

So now, before sending, I try to follow a simple routine:

1. Check the entire destination address

I don't just compare the beginning and the end. I pay attention to the middle characters too. That's especially important when an address looks suspiciously similar to one I've used before.

2. Check where I got the address from

If someone sends me an address, I verify it through a trusted source instead of blindly copying it.

And I try not to take an address from my transaction history without checking it carefully first.

3. Check the network

Having the correct address isn't enough. I also make sure I'm sending on the intended network.

4. Check the recipient before confirming

MetaMask shows the destination address during the sending flow, so I use that moment as a final checkpoint before clicking Send.

So why did MetaMask warn me?

It can warn you when the destination address looks similar to an address you've interacted with before, and it can also alert you when you're sending to an address you've never used before.

A warning doesn't automatically mean the address is malicious. In the case of a new address, it's a reminder to stop and verify it.

And that's actually what I like about these warnings.

The wallet isn't making the decision for me.

It's basically saying:

>“Before you send something that may not be reversible, take another look.”

That's a pretty useful reminder when you're dealing with transactions that can't simply be undone once they're confirmed.

I've started treating the warning as a checkpoint rather than something to immediately dismiss.

Do you usually verify the full address before sending, or do you mostly rely on copy/paste and checking the first and last characters?

https://support.metamask.io/stay-safe/protect-yourself/wallet-and-hardware/address-poisoning-scams/

u/Xosoltani — 9 days ago

Unable to connect to Aerodrome with Metamask app from mobilephone, stuck at "connecting to Metamask" and it never loads.

I tried to connect to Aerodrome from a fresh install of Metamask, I have no other wallets on my mobilephone, first I used "Explore" on the Metamask app, then I change the network from ETH to BASE and then write the aerodrome address, then connect with WalletConnect and choose Metamask and then I am stuck in eternal loading.

Then I tried to use Chrome and Brave and the same happens it is eternal loading. On Brave I disabled shields.

Then I clear cache and data on the Metamask App and try to install again from the App store and simply nothing happens, whatever I try nothing happens I am stuck at eternal loading.

On the Metamask App I allowed notifications and permissions and still nothing.

reddit.com
u/Ramiro114 — 9 days ago

How does the card work? I can’t do anything

I‘ve applied for the card some months ago and everything was OK. Now I didn’t use the card for a few months and didn’t put any funds on it either but now when I open the card in Meta Mask all i get is this? I can’t do anything. I can’t manage the card. I can’t look up the card number etc.

How can I manage the card? Is this what it is supposed to look like on iPhone?

I have all the latest updates.

I don’t think I have to have funds on the card to be able to look up card number, freeze functionality or anything??

I just can’t do anything.

u/quintavious_danilo — 13 days ago

MetaMask

Dear Reddit, please help me figure out how I can add money to my MetaMask wallet if I can’t do it directly through the app because the payment provider isn’t available in Lithuania. Where can I legally buy crypto and have it sent directly to my wallet?

reddit.com
u/Ilja_143 — 11 days ago

How to sell / withdraw from Canada

My father sent me some bitcoin and I need to withdraw it , how do I go about this? I need the money as soon as possible and have no idea how to safely go about this without crashing out

reddit.com
u/Lets-find-out-9009 — 12 days ago