MetaMask has implemented an additional transaction verification to protect against so-called 'red pill' attacks. The mechanism compares the results of a preliminary simulation with the actual execution of the operation and halts the transaction if discrepancies are found. This innovation has already been rolled out in the MetaMask v13.45 extension for 13 EVM networks that support smart accounts under the EIP-7702 standard. The feature will be launched on mobile devices later.
Such attacks exploit the difference between what the simulation shows and what the smart contract executes after signing. Malicious software can identify a test run and demonstrate a safe result, and after user confirmation, execute a different action. MetaMask now uses the simulation result as a mandatory condition: if the outcome differs from the preliminary scenario, the transaction fails, and the assets remain in the wallet. The user only pays the network fee for the failed operation.
Protection is enabled by default, but it can be disabled directly when confirming the transaction. The mechanism is specifically designed to detect result tampering and does not block operations due to ordinary market price changes. Previously, MetaMask also added tools to identify signs of fraud before sending funds. These features complement the set of checks that the wallet uses when interacting with smart contracts and EVM applications.
Related articles
