CITT

    Scan results

    MetaMask: Trade Crypto

    iOS

    MetaMask is a self-custody cryptocurrency wallet and DApp browser enabling secure Ethereum asset management and blockchain interaction. The app provides seed phrase backup, hardware wallet support, and decentralized application access.

    CITT SCORE
    83
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Managing crypto and Web3 wallets day-to-day

    Not For: You want zero location tracking by third parties

    What It Means For You

    In-app behavior is tracked by several analytics services, and crash reports may include session replays sent to Sentry. User location can be collected by Braze for CRM and analytics targeting. If identity verification features are used, personal documents are processed by Veriff, a third-party provider.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (17)

    Data Security

    4 total
    2 Medium
    1 Low
    1 Info

    Network Security

    4 total
    1 Medium
    1 Low
    2 Info

    Code Security

    4 total
    1 Medium
    2 Low
    1 Info

    Privacy

    3 total
    1 Medium
    1 Low
    1 Info

    Third-Party Risk

    2 total
    2 Info

    Third-Party Services

    Sentry (crash reporting + session replay), Braze / BrazeLocation (CRM, push, location analytics), Branch (deep link attribution), Firebase Messaging (push notifications only), Mixpanel (product analytics), Expo Updates (OTA JS bundle updates — currently disabled), Veriff (KYC / identity verification), WalletConnect / Yttrium (Web3 wallet protocol, Rust), OpenSSL 3.3.3001 (TLS for WalletConnect crate), RNCAsyncStorage, ReactNativeBlobUtil, Lottie, RiveRuntime, Hermes (React Native JS engine)

    Security Strengths

    • ✓Firebase Analytics and Crashlytics explicitly disabled at build time — deliberate privacy-forward configuration
    • ✓Wallet vault (seed phrase + private keys) encrypted before AsyncStorage — plaintext secrets never touch SQLite
    • ✓Vault encryption key protected in iOS Keychain with biometric access control (SecAccessControlCreateWithFlags + LAContext)
    • ✓ATS correctly configured — NSAllowsArbitraryLoads = false, no per-domain cleartext exceptions
    • ✓Clipboard expiry (UIPasteboardOptionExpirationDate) set on wallet address writes
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    crypto wallet
    self custody
    biometrics
    location
    third party analytics

    Package

    io.metamask.MetaMask

    Version

    7.72.0 (Build 4333)

    Analysis Date

    Apr 8, 2026

    Classes Analyzed

    150

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on App Store

    Recommendation: Acceptable

    Key Findings

    Data Security - 4 findings (2 medium, 1 low, 1 info)

    Network Security - 4 findings (1 medium, 1 low, 2 info)

    Code Safety - 0 findings

    Privacy - 3 findings (1 medium, 1 low, 1 info)

    Privacy Concerns

    What Data is Collected

    MetaMask collects behavioral and usage data through Mixpanel and Braze. Crash reports, which may include session replays, are sent to Sentry. Braze also collects user location for CRM targeting and push notification personalization. Using identity verification requires submitting identity documents to Veriff, a third-party KYC provider.

    Third-Party Data Sharing

    User data is shared with these third-party services:

    • Sentry - Receives crash reports and may capture session replay data reflecting in-app activity.
    • Braze - Receives behavioral data and location information, and handles push notification targeting.
    • Mixpanel - Receives product usage and analytics data.
    • Branch - Receives attribution data to track how users engage with and arrive at the app.
    • Firebase Messaging - Handles push notification delivery only, with no additional behavioral data collection.
    • Veriff - Processes identity documents if KYC or identity verification features are used.

    Understanding the Scores

    CategoryScore
    Security83/100
    Privacy83/100
    Data Security85/100
    Network Security92/100
    Code Safety89/100
    Data Collection87/100
    Data Sharing90/100
    User Control89/100

    Positive Security Features

    • Network communications for wallet protocol interactions use standard TLS encryption.
    • Firebase Messaging is scoped to push notification delivery, without additional behavioral tracking.
    • Identity verification for KYC uses a dedicated third-party service, keeping document processing isolated from the main app.

    Areas for Improvement

    • Crash reporting includes session replay data sent to Sentry, which may capture sensitive in-app interactions beyond basic error information.
    • User location is collected by Braze for CRM and analytics targeting, extending data collection beyond what core wallet functionality requires.
    • Multiple analytics and attribution services collect behavioral data, broadening the overall scope of third-party data sharing.

    About This Analysis

    This scorecard is based on automated static analysis of the published app binary and configuration files.

    App Details

    FieldValue
    AppMetaMask: Trade Crypto
    Package IDio.metamask.MetaMask
    Version7.72.0 (Build 4333)
    Scan Date2026-04-09

    Right of Reply

    Developer not yet contacted