Months ago, because of phishing risk, we disabled the eth_sign API method by default (users could manually enable it with a preference toggle). Now because of additional risk associated with potentially malicious EIP-3074 invokers we are fully removing support for this method.
Explanation
Months ago, because of phishing risk, we disabled the
eth_sign
API method by default (users could manually enable it with a preference toggle). Now because of additional risk associated with potentially malicious EIP-3074 invokers we are fully removing support for this method.References
Related: https://github.com/MetaMask/MetaMask-planning/issues/2371
Extension PR: https://github.com/MetaMask/metamask-extension/pull/24756
Changelog
Removed
eth_sign
method is removedcreateWalletMiddleware
no longer acceptsprocessEthSignMessage
as an option