MetaMask Delegation Framework
Consensys reviewed MetaMask (MetaMask Delegation Framework) on 1 Oct 2024: 2 findings, 0 critical; 1 marked fixed, 1 open.
No open critical findings
Open the reportOpen MetaMask’s security record
Report hosted on diligence.security.
Trustblock does not review code.
Findings2
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 1 | 0 | 1 |
LowPotential Misuse of ERC1155BalanceGteEnforcer and ERC721BalanceGteEnforcer.Open
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (14)
- https://github.com/MetaMask/delegation-framework/src/enforcers/ERC1155BalanceGteEnforcer.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/enforcers/OwnershipTransferEnforcer.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/DeleGatorCore.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/DelegationManager.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/HybridDeleGator.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/libraries/WebAuthn.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/enforcers/ERC721TransferEnforcer.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/enforcers/ERC721BalanceGteEnforcer.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/libraries/P256VerifierLib.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/interfaces/ICaveatEnforcer.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/interfaces/IDelegationManager.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/enforcers/CaveatEnforcer.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/MultiSigDeleGator.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
- https://github.com/MetaMask/delegation-framework/src/libraries/P256SCLVerifierLib.sol at commit ec0c0d64a4fc1ccca24d5e910d5712e62d84c4b7
Part of MetaMask’s security record
MetaMaskAudits8 audits by 2 firmsLast audit Apr 2026, by Cyfrin.
Critical findingsNo open critical findingsAcross 8 reports.
Open MetaMask’s security recordSecurity firm
Consensys41 projects reviewed · 59 reports · latest Oct 2024
See Consensys’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us