Delegation Framework Audit Report
Audit · firm’s term: audit report
Cyfrin reviewed MetaMask (Delegation Framework Audit Report) on 1 Apr 2025: 6 findings, 0 critical; 3 marked fixed, 3 acknowledged.
No open critical findings
Open the reportOpen MetaMask’s security record
Report hosted on GitHub.
Trustblock does not review code.
Findings6
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 3 | 1 |
| Low | 0 | 0 | 2 |
Marked Informational or Gas by the firm. Not counted as findings.
InformationalFirst transaction on SpecificActionERC20TransferBatchEnforcer does not support sending native valueAcknowledged
The report gives no description here.
GasNativeTokenStreamingEnforcer and ERC20TokenStreamingEnforcer gas optimizationsAcknowledged
The report gives no description here.
GasERC20PeriodTransferEnforcer gas optimizationsFixed
The report gives no description here.
GasUnnecessary execution mode support in DelegationMetaSwapAdapterFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of MetaMask’s security record
MetaMaskAudits8 audits by 2 firmsLast audit Apr 2026, by Cyfrin.
Critical findingsNo open critical findingsAcross 8 reports.
Open MetaMask’s security recordSecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us