MetaMask / MetaMask/metamask-extension
[Bug]: Confirmations - Security Alerts - `Error validating request with PPOM controller CompileError: WebAssembly.instantiateStreaming(): section (code 1, "Type") extends past end of the module`
- Dominant language
- TypeScript
- Stars
- 13.2k
- Forks
- 5.6k
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 451
Description
**Describe the bug**
Whenever I enter a big number for Mint, I get a validation error in the UI: `Because of an error, we couldn't check for security alerts. Only continue if you trust every address involved.` and I can see this error in the console `Error validating request with PPOM controller CompileError: WebAssembly.instantiateStreaming(): section (code 1, "Type") extends past end of the module (length 11493359, remaining bytes 3957860)`
**Expected behavior**
No errors
**Screenshots/Recordings**
https://github.com/user-attachments/assets/b192f39e-012a-4617-9fc3-8202bad73bae
**Steps to reproduce**
1. Go to the test dapp
2. Connect and select Sepolia
3. Deploy an ERC721 contract
4. Mint a huge number of tokens (ie 111)
5. See error in the UI and in the console
**Error messages or log output**
```shell
```
**Where was this bug found?**
Live version (from official store)
**Version**
13.36.0
**Browser**
Chrome
**Operating system**
MacOS
Contributor guide
Research direction
Reproduce the issue in the test dapp using Chrome, Sepolia, an ERC721 contract, and a large mint count. Start by tracing the security-alert validation path into the PPOM controller and inspect where the WebAssembly module is instantiated. Done means large mints no longer show the security-alert validation error or the WebAssembly compile error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript, wasm
- Domain
- frontend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100