Wallet dossier
MetaMask
Self-custodial software wallet ecosystem launched as a browser wallet and later expanded to a mobile application.
- Developer / company
- MetaMask
- Origin
- —
- Launch
- 2016-07-14
- Custody
- self_custody
- Confidence
- high
- Last verified
- 2026-09-10
Product family
Products
Chronology
Lifecycle timeline
First MetaMask version shipped
Product: MetaMask Browser Extension
MetaMask shipped its first public browser-wallet version.
MetaMask Mobile released on iOS and Android
Product: MetaMask Mobile
Consensys announced the general release of MetaMask Mobile on iOS and Android.
MetaMask Extension critical clickjacking vulnerability disclosed
Product: MetaMask Browser Extension
MetaMask reported a critical Extension-only clickjacking vulnerability that could render the wallet UI as a hidden layer over a malicious site and trick users into revealing private data or sending crypto-assets. MetaMask awarded the reporting team a $120,000 bounty and stated that Extension 10.14.6 and later were protected.
Demonic vulnerability exposed MetaMask Extension recovery phrases on disk
Product: MetaMask Browser Extension
Halborn disclosed CVE-2022-32969, known as Demonic, in which browser session-restore behavior could cache an imported Secret Recovery Phrase to disk in plaintext under specified conditions. MetaMask Extension versions before 10.11.3 were affected; MetaMask implemented mitigations in 10.11.3 and later, and MetaMask Mobile was not affected.
Consensys Software Inc. announced its rebrand as MetaMask and business separation
Consensys Software Inc. announced that it would continue as the same company under the MetaMask name, focused on the consumer platform, while its protocols and institutional infrastructure business would become a newly formed company carrying the Consensys name. Completion of the separation was expected by the end of 2026, and MetaMask said users' app, assets, keys, and access were unchanged at announcement.
Sources