🔺Severity: Medium
👽 Reporter: aszx87410
⭐️ Reputation: 216
🛠 State: resolved
💼 Team: MetaMask
💵 Bounty: 350
🕐 Submitted: 2026-01-12
⏰ Disclosed: 2026-03-13 01:42:13
📝 Summary: A critical security vulnerability was discovered in the Starknet Snap by Consensys. The vulnerability allowed malicious websites to bypass user authorization when signing messages or transactions. The vulnerability existed in the
enableAuthorize parameter, which could be controlled by any website. When set to false, the confirmation dialog was not shown to the user, allowing a malicious website to sign arbitrary messages or transactions without user approval.📂 Report JSON File: 3507241
@hackeronereports