MetaMask / MetaMask/metamask-extension

[Bug]: Blockaid banner slow to load for NFT Permit SIGN and console error

Open
#41,243 0 comments 0 reactions 0 assignees View on GitHub
regression-RC-13.24.0 Sev3-low team-mctp team-product-safety type-bug
Dominant language
TypeScript
Stars
13.2k
Forks
5.6k
Avg merge
2d 5h
Merged PRs (30d)
451

Description

### Describe the bug

When triggering signature request for ERC 721 NFT Permit, the blockaid banner is slow to load and there is a console error `Security alerts API request failed with status: 500`

### Expected behavior

No console error

### Screenshots/Recordings

https://github.com/user-attachments/assets/0bc5079e-078c-4c1d-820e-97ab3b4aee3c

Image

### Steps to reproduce

1. Connect to test dapp
2. Mint ERC 721 NFT
3. Click SIGN from NFT Permit
4. Notice blockaid banner is slow to load
5. Notice console error

### Error messages or log output

```shell

```

### Where was this bug found?

Internal release testing

### Version

13.24.0

### Build type

None

### Browser

Chrome

### Operating system

MacOS

### Hardware wallet

_No response_

### Additional context

_No response_

### Severity

_No response_

[Jira issue](https://consensyssoftware.atlassian.net/browse/MCTP-124)

### Expected behavior

No response

### Screenshots/Recordings

No response

### Steps to reproduce

1. Connect to test dapp
2. Mint ERC 721 NFT
3. Click SIGN from NFT Permit
4. Notice blockaid banner is slow to load
5. Notice console error

### Error messages or log output

```shell

```

### Where was this bug found?

No response

### Version

13.24.0

### Build number

No response

### Build type

None

### Browser

Chrome

### Operating system

MacOS

### Hardware wallet

No response

### Additional context

No response

### Severity

Sev3

Contributor guide

Open the contributing guide

Research direction

Reproduce in the test dapp by minting an ERC-721 NFT, opening its Permit signature flow, and observing the Blockaid banner and console. Start by tracing the security alerts API request associated with that flow; done means the banner loads without the reported 500 console error in Chrome on macOS.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.