MetaMask / MetaMask/metamask-mobile

[Bug]: PPOM - EIP 5792 - Malicious Send Calls not flagged by Blockaid on test dapp

Open
#22,399 5 comments 0 reactions 0 assignees View on GitHub
INVALID-ISSUE-TEMPLATE regression-RC-7.59.0 Sev2-normal team-product-safety type-bug
Dominant language
TypeScript
Stars
3k
Forks
1.7k
Avg merge
1d 14h
Merged PRs (30d)
669

Description

**Describe the bug**

When triggering PPOM - EIP 5792 - Malicious Send Calls from the [test dapp](https://metamask.github.io/test-dapp/), not all of them are flagged by Blockaid

Sometimes the Review alert button is present, but the Blockaid banner is not displayed

On extension they are all displaying the Blockaid banner, except for Contract interaction.

**Expected behavior**

All transactions to be flagged as malicious

**Screenshots/Recordings**

https://github.com/user-attachments/assets/0aff148c-e89c-4f19-9799-0fe5dbc30adc

**Steps to reproduce**

1. Connect to test dapp
2. Go to PPOM - EIP 5792 - Malicious Send Calls section
3. Trigger all the SEND calls
4. Notice some of them are not flagged by Blockaid

**Error messages or log output**

```shell

```

**Detection stage**

During release testing

**Version**

7.59.0

**Build type**

None

**Device**

iPhone 15, Pixel 6 Pro

**Operating system**

iOS, Android

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the issue in the test dapp's PPOM - EIP 5792 - Malicious Send Calls section on both iOS and Android, then compare the Review alert and Blockaid banner for each SEND call. Done means every transaction, including Contract interaction, is consistently flagged as malicious on mobile.

Written by the indexing model from the issue text.

Assessment

Tech stack
react-native, typescript
Domain
mobile, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.