MetaMask / eth-json-rpc-middleware

Ethereum middleware for composing an Ethereum provider using json-rpc-engine. Intended to replace provider-engine
ISC License
179 stars 88 forks source link

Remove support for `eth_sign` #320

Closed adonesky1 closed 1 month ago

adonesky1 commented 2 months ago

Explanation

Months ago, because of phishing risk, we disabled the eth_sign API method by default (users could manually enable it with a preference toggle). Now because of additional risk associated with potentially malicious EIP-3074 invokers we are fully removing support for this method.

References

Related: https://github.com/MetaMask/MetaMask-planning/issues/2371

Extension PR: https://github.com/MetaMask/metamask-extension/pull/24756

Changelog

Removed