MetaMask / MetaMask/metamask-mobile
[Bug]: PPOM - EIP 5792 - Malicious Send Calls not flagged by Blockaid on test dapp
- Dominant language
- TypeScript
- Stars
- 3k
- Forks
- 1.7k
- Avg merge
- 1d 14h
- Merged PRs (30d)
- 669
Description
**Describe the bug**
When triggering PPOM - EIP 5792 - Malicious Send Calls from the [test dapp](https://metamask.github.io/test-dapp/), not all of them are flagged by Blockaid
Sometimes the Review alert button is present, but the Blockaid banner is not displayed
On extension they are all displaying the Blockaid banner, except for Contract interaction.
**Expected behavior**
All transactions to be flagged as malicious
**Screenshots/Recordings**
https://github.com/user-attachments/assets/0aff148c-e89c-4f19-9799-0fe5dbc30adc
**Steps to reproduce**
1. Connect to test dapp
2. Go to PPOM - EIP 5792 - Malicious Send Calls section
3. Trigger all the SEND calls
4. Notice some of them are not flagged by Blockaid
**Error messages or log output**
```shell
```
**Detection stage**
During release testing
**Version**
7.59.0
**Build type**
None
**Device**
iPhone 15, Pixel 6 Pro
**Operating system**
iOS, Android
Contributor guide
Research direction
Start by reproducing the issue in the test dapp's PPOM - EIP 5792 - Malicious Send Calls section on both iOS and Android, then compare the Review alert and Blockaid banner for each SEND call. Done means every transaction, including Contract interaction, is consistently flagged as malicious on mobile.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- react-native, typescript
- Domain
- mobile, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100