I know it's lost, but i'm wondering if it still worth reporting to authorities like cybercrime & fraud (located in Canada)?

It was on the ETH netwrok & lowkey seems traceable from what I can see on etherscan. Might be useful information for them, anyways let me know.

Pretty upset obviously, but I should have known better than keeping anything of value on chrome web extension lmaoo especially while I was actively using the browser. Crazy how these exploits exist.

Hi, I’ve been trying to remove some old tokens that I bought back in 2022, these coin were either rugpulls or the projects died during that year or the next. The reason I need to remove them is for tax purposes and they don’t agree with me that the projects and investments can be considered lost when they are still in my wallet. The problem is that when I try to transfer them to a burn wallet, I just get an error, probably because they are so old and dead.. anyone have any suggestions on what to do?

I accidentally sent ETH from my stake.us to Cash App which isn’t supported can I do anything to try to get those funds back?

Does anyone has problem with sending any amount of BTC to any address at the moment? It’s showing 0 at transaction fees and after confirmation “transaction error”. I was sending from my account before and never had problems. Thanks in advance!

Having problems login to my Metamask on Firefox. Tired all the support suggestions. I can login on Brave for one account but the second account is suppose to connect to Firefox but just cycles tring to login. Been going on for a couple of days.

Adding a custom network to MetaMask can be safe, but don't trust the network name alone. Check the network details and the RPC provider before accepting. The RPC URL is the URL of the service MetaMask uses to communicate with the blockchain.

What am I actually adding?

When a dapp asks you to add a network, it supplies details such as the network name, RPC URL, chain ID and currency symbol. Adding it configures how MetaMask connects to that blockchain. It does not, by itself, give a smart contract permission to spend your tokens.

Does MetaMask check this for me?

MetaMask performs basic checks and may warn you about incorrect or unusual network details. However, these checks don't establish that the network or RPC provider is trustworthy.

What could an untrustworthy provider do?

MetaMask warns that a malicious network provider can give false information about the blockchain, withhold transactions, and record your network activity and IP address. For example, a balance reported by a malicious provider isn't reliable proof that those funds exist on the genuine network.

What should I check before adding one?

First, check whether the network is already available in MetaMask's network list. You may not need to add it manually. For a custom setup, compare the details with the network's official documentation, especially the RPC URL and chain ID. Check the currency symbol and block explorer too.

Also check which website is asking you to add it. If the request is unexpected, the details appear incorrect, or you aren't sure you can trust the RPC provider, reject it rather than approving just to continue. You don't need to share your Secret Recovery Phrase or private key to add a network.

Custom networks are normal to use. Check the network details and RPC provider, not just the name.

When a dapp asks you to add a network, how do you decide whether to trust the request?

References:

1. Verifying custom network information
2. How to add a custom network
3. The risks of connecting to an unknown network

I've installed Mettmask on my Android mobile phone. When i try to create a wallet, i can't get part the create password page. It doesn't have anything to click on

Hi , my wallet was compromised and all the ETH gone, How can I find out if there is a sweeper bot lurking,I don’t want to deposit anything and loose that too.
I don’t have much in there just want to shut the wallet down.

My wallet was hacked. There were several outgoing transactions that I hadn't initiated. I noticed that delegation rights had been granted to a few other addresses—the very ones the tokens were being sent to. I wanted to click "Revoke," but there was a fee for doing so, and the wallet was already empty. I transferred some ETH from Revolut, but the moment the incoming transaction arrived, an outgoing one occurred, and the funds vanished again. Shortly after that, absolutely all the tokens were drained to one of the addresses with delegation rights. Why is this happening? How did someone gain access? And why can't I revoke those rights?

0x49d3635949a9ca14f0d0b69f0402df06 70392b5e

Ive looked in every place i could i cant find where it goes to.

When an AI agent is told to swap a token or interact with a dApp, the interesting part isn’t the prompt itself—it’s everything that happens afterward.

The MetaMask Agent Wallet connects the agent to wallet infrastructure through the `mm` CLI and `metamask/agent-sdk`.

First, the agent turns your instruction into an action. From there, the wallet layer determines details like the network, contract, token, calldata, and transaction specifics.

However, the agent doesn't simply receive a private key and send transactions directly.

With a server-wallet, the signing key is protected inside a Trusted Execution Environment (TEE). In Guard Mode, transactions can also be checked against network, address, and token-recipient allowlists, as well as a rolling 24-hour outflow limit.

Then comes the part I find most interesting: the transaction can be simulated and scanned for threats before it is signed. Once it passes all required checks, the protected signer signs it, and the transaction is submitted to the EVM network, where the target smart contract actually executes the requested function.

So, the architecture looks more like this:

AI intent → Wallet infrastructure → Policy → Security checks → Signing → Smart contract → On-chain state change

That’s what makes an agent wallet fundamentally different from simply giving an AI access to a standard wallet.

[MetaMask Agent Wallet — CLI Setup](https://github.com/MetaMask/metamask-docs/blob/main/agent-wallet/cli-setup.md)

[MetaMask Agent Wallet — Trading Modes](https://docs.metamask.io/agent-wallet/reference/trading-modes/)

I have beyond struggled trying to use metamask as a daily bitcoin wallet recently because the fees they automatically assign to transactions are criminally low, to the point my recent transaction missed 28 blocks consecutively and we have no inbuilt features such as RBF to even speed up existing tx’s

Is there any chance proper code could get implemented to have proper fee rates for btc like what is done with ethereum? It’s causing a massive headache and wasted a lot of my time to the point I’m probably going to just entirely swap all my assets off metamask including ethereum

I have an error, Bridge error, but my ETH did not revert back.

I used a Relay.

If you’re already using a Solana wallet and want to explore Solana inside MetaMask, you might be wondering if you have to create a completely new Solana account in MetaMask. The short answer is no.

MetaMask allows you to import your existing Solana account using its Secret Recovery Phrase (SRP). This gives you direct access to your existing Solana wallet inside MetaMask without needing to start over or pay to transfer funds between wallets.

Note: Unlike EVM accounts, importing an individual Solana account via a single Private Key is not supported yet—you must use the Secret Recovery Phrase.

Before pasting your recovery phrase, here are a few things worth knowing:

1. You are granting full access, not just connecting

Importing an SRP means giving MetaMask full control over the accounts generated by that phrase. So, always make sure you downloaded MetaMask directly from the official website or verified app store before entering your phrase.

2. Gas fees on Solana require SOL, not ETH

Because MetaMask was built for Ethereum and EVM chains, cross-chain beginners may assume ETH covers all transactions. Solana is a completely separate network, so every transaction on the network requires SOL for gas—even inside MetaMask.

3. Importing is NOT a token transfer

You aren't sending SOL or SPL tokens from your existing Solana wallet to MetaMask, so there are no network fees involved. You’re simply giving a new wallet interface permission to read and sign transactions for your existing on-chain address.

4. Always verify the derived address

Derivation paths can vary across wallet apps. After importing, compare the Solana address displayed in MetaMask with the one in your existing Solana wallet. Never deposit or move funds until you confirm the addresses match.

5. Never share your SRP

No legit support team, dApp, or browser extension popup will ever ask for your Secret Recovery Phrase to verify, synchronize, or fix your wallet. If anyone asks for it, it’s a scam.

If you already manage Solana through a dedicated wallet, would you import your SRP into MetaMask for the convenience of a single multichain interface? Or do you prefer keeping your EVM and Solana workflows strictly separated across dedicated wallet apps?

Check MetaMask Support: Navigating Solana for a full guide on importing a Solana wallet to MetaMask.

Hey everyone,

I am so glad I was able to recover my wallet after finding that useful BIP39 tool. I am completely relieved to have my fund back without any worries.

Seeing an "Invalid Secret Recovery Phrase" error when trying to import or restore MetaMask is terrifying. The natural first reaction is: Are my funds gone forever?

The short answer: No, your funds are still safe.

MetaMask validates your seed phrase locally in your browser using the BIP39 standard before it even checks the network. An "invalid" error almost never means your wallet vanished. It means the string of text you typed failed a local cryptographic format or checksum test.

Here’s the step by step guide how to fix an invalid Secret Recovery Phrase using a BIP39 checklist

Step 1:- Check the word count

A BIP-39 seed phrase has a fixed length. If you have even one word too many or too few, MetaMask will call it invalid before it checks anything else

Step 2:- Check your spelling against the BIP39 list

Every word must be one of exactly 2048 words on the official BIP39 English list. A word that looks right but isn’t on it makes the whole phrase invalid.

• Official MetaMask how to fix invalid seed phrase:- https://support.metamask.io/configure/troubleshooting/how-to-fix-invalid-seed-phrase-error-invalid-secret-recovery-phrase/
• Official BIP39 Specification:-https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki?hl=en-IN
• Official English Wordlist (2,048 words):-https://github.com/bitcoin/bips/blob/master/bip-0039/english.txt?hl=en-IN
• Other Official Language Wordlists:-https://github.com/bitcoin/bips/tree/master/bip-0039?hl=en-IN

Step 3:- Check the word order

The order of the words is part of the key. Right words in the wrong order will fail, and the last word also holds a checksum, so one swap can make the whole phrase invalid.

Step 4:- Check the formatting

Even with every word spelled right, MetaMask rejects a Phrase with stray characters. Use lowercase words, one single space between each, and nothing else.

Step 5:- a different wallet type

MetaMask only accepts BIP39 phrase. Some wallets use their own formats, and MetaMask rejects those even when every word and the count look fine.

Step 6:- How to check your spelling safely

Use the official BIP39 word list to catch typos. You can check the whole takes 1 to 5 steps, and the important part happen with your internet turned off.

Step 7:- Use the right screen: Phrase v/s password

Many people type the wrong thing into the wrong box. The Secret Recovery Phrase and the MetaMask password do different jobs.

⚠️ Critical Safety Warning

• NEVER enter your seed phrase into an online website or web checker.
• Ignore all Reddit DMs offering "MetaMask Support" or "Help Desk links." MetaMask has no live DM support; anyone messaging you is a scammer trying to drain your funds.
• DO NOT share your Secret Recovery Phrase with anyone! These words can be used to steal from all your accounts.

If you run any recovery scripts, do it strictly offline.

https://reddit.com/link/1wyiizg/video/5iy19graapth1/player

Hope the wallet recovery goes smoothly!

Seeing Lubin's "no indication that MetaMask wallets were affected" statement alongside the staking infrastructure headlines is such a weird little attention trap. You can understand that a validator incident and your wallet are different things, then still feel the urge to open MetaMask and check the balance. Like hearing the fire alarm was only a drill and touching your pocket to make sure your keys are there.

And checking the balance doesn't even answer whether you've got a dodgy approval sitting around. But the number looks right, so your brain accepts the receipt. Meanwhile you've opened the extension and might as well check gas

I ran into “KeyringController - Keyring not found” while using MetaMask in Chrome. Updating MetaMask from 13.48.0 to 13.50.0, reconnecting, and locking and unlocking did not fix it.

The same action worked for me in Firefox, where I had only one wallet connected. My Chrome setup also had other wallet extensions available.

I cannot tell which was responsible. Sharing this as a workaround, not a confirmed diagnosis.

I am stuck wit this message in Chrome ext. after swapping tokens..MTM help center no help, updating, restart, clear history do not work either. please advice

I used to think disconnecting a dApp also removed its token approvals.

I connected my wallet to a dApp, approved a token, used it for a while, and later disconnected the dApp. I assumed that disconnecting meant I had completely removed its access.

However, disconnecting a dApp and revoking a token approval are actually two entirely different things:

• Connection: This is just about the relationship between your wallet and the dApp's frontend interface.

• Token Approval: This is a separate, on-chain permission that allows a smart contract to access and move a specific token from your address.

For example, if I approve a dApp to spend my USDC, that approval is recorded directly on-chain. Later, when I disconnect the dApp from MetaMask, the visual connection is gone, but the token approval still exists.

That was the part I had misunderstood. So, I started breaking down the process into four distinct steps:

1. Connect – Connect your wallet to the dApp.

2. Approve – Give a smart contract permission to use a specific token.

3. Disconnect – Remove the wallet connection from the interface.

4. Revoke – Remove the token approval on-chain (Note: revoking is a separate blockchain transaction, so it requires gas).

MetaMask also features newer permission models that let some dApps request more limited access, such as spending limits or expiration times.

This made me realize that asking, "Am I still connected to this dApp?" isn't always enough. A much better question is:

"What permissions have I actually given this dApp or smart contract?"

This distinction is super easy to miss until you see how wallet connections and token approvals work separately. Just wanted to share in case anyone else was making the same assumption!

How to revoke smart contract allowances/token approvals

Advanced permissions

A Seed Phrase can be thought of as the root of a crypto wallet - When you set up a new wallet such as MetaMask, it generates random data and turns it into a 12- or 24-word recovery phrase.

The words in a Seed Phrase under the BIP-39 standard are selected from a standardized list of 2,048 words.

That’s why you can import a wallet from one BIP-39-compatible wallet into another, as long as they support the same seed phrase format and compatible derivation paths.

For example, imagine you send an asset to your Trust Wallet EVM address, but Trust Wallet doesn’t support that particular network. You can import the same wallet into another BIP-39-compatible wallet that supports the network, such as MetaMask, using the same seed phrase.

This is possible because your wallet is not the app itself - the app is simply an interface that allows you to access and manage your blockchain accounts.

- Wallet Creation: Set up a new wallet using a software or hardware wallet.

- Seed Generation: The wallet generates a random BIP-39 seed phrase.

- Key Derivation: The seed phrase generates your private keys.

- Address Creation: Public addresses are derived from those private keys.

Wallet -> Seed Phrase -> Private Key -> Public Address

A single seed phrase can serve as the root for multiple accounts, each with its own private key and wallet address. In other words, multiple accounts can be derived from the same seed phrase.

When signing a malicious transaction, the impact generally depends on the permissions granted by that signature. For example, if you sign a transaction with Account 1, only Account 1 is affected, not Account 2, because Account 2 is a separate account from Account 1, even if both accounts are derived from the same seed phrase.

If the private key of Account 2 is exposed, only Account 2 is generally at risk, not Account 3, because Account 3 has a separate private key, even if both accounts are derived from the same seed phrase.

However, if your seed phrase is exposed, all accounts derived from that seed phrase may be compromised. An attacker can use the seed phrase to derive the corresponding private keys and potentially gain control of the assets in those accounts.

Regarding wallet address - For a simple example, a wallet address is similar to a card number that you use to receive funds. However, for better privacy and security, it is generally not recommended to publicly share your wallet address in public places unnecessarily.

Remember

Never share your Seed Phrase or Private Key with anyone.

A legitimate wallet support team will never need your Seed Phrase or Private Key to access or recover your wallet.

My wallet got hacked and In lost (Hype, Avax, Matic, FET, BIGTIME and many other coins) worth 16k$ bought at 35K. I keep funds across multiple wallets and had recently moved funds to metamask before I could push them to ledger.

Here's what happened: At 12:11 EST in the afternoon, i got a notif of a token being sent. I got in the app and tried to find something that could further exploits but I couldnt. In a matter of 3 min (12 second bursts) and 14 transactions, all my funds moved.

The scammer moved them to a fresh wallet. One interesting thing that I see on my wallet transaxctions history is 2 transactions on Apr 18. $9 worth eth coming in and then $10 worth eth moving out. These 2 transactions happened without me approving anything or atleast I domnt recall. Especially those were at 4:45 in the morning.

Metamask says my seed phrase got leaked but I dont buy that. Not sure what else could it be. Totally bamboozled.