MetaMask to Block Red Pill Attacks

Published: September 18, 2026 – 08:07 UTC

MetaMask has added automatic transaction protection.
The crypto wallet will protect funds from red pill attacks.
The feature checks whether the actual transaction outcome matches its preview.

The MetaMask crypto wallet has launched an additional protection feature that shields users from red pill attacks when interacting with Ethereum and other EVM apps. The mechanism compares the actual transaction outcome with its preview and automatically cancels the operation if they do not match.

The feature is already available in MetaMask Extension v13.45 across 13 EVM networks with smart account support (EIP-7702), while the mobile version will receive it later.

How MetaMask Protection Works

Red pill attacks exploit a quirk in transaction simulation. A malicious smart contract can detect that it is only being simulated and show the user a safe outcome — for example, receiving 0.1 ETH. After the transaction is signed, the contract executes a different action, including attempting to drain funds from the wallet.

The additional protection feature locks the simulation result in as a required condition for the operation to execute. If the actual outcome differs from what the user saw, the transaction automatically fails, and the funds remain in the wallet.

If an attempt fails, the user loses only the network gas fee. MetaMask does not charge any additional fee for the feature itself or for a transaction that did not go through. At the same time, the mechanism protects specifically against manipulation of the transaction outcome, not normal market fluctuations.

The feature is enabled by default, but the user can disable it directly on the transaction confirmation screen. This way, it does not block intentional operations, but checks that the actual outcome matches the preview.

Recall that the launch of the additional protection feature is MetaMask’s latest step in expanding its security toolkit. Previously, the wallet introduced a mechanism for detecting signs of “romance” and investment scams: it analyzes risks before funds are sent and may ask the user additional questions instead of automatically blocking the transaction. This feature is available in MetaMask Mobile v8.11+ and Extension v13.48+ for all EVM networks.

Recently, Consensys also announced that it was splitting its business into two entities. MetaMask became a separate company, while protocol development and institutional software continued under the Consensys brand. Joseph Lubin remained affiliated with both entities as MetaMask CEO and executive chairman of Consensys.

Сообщение MetaMask to Block Red Pill Attacks появились сначала на INCRYPTED.

Source: Incrypted