---
id: 5682
title: "MetaMask Snaps: playing in the sand"
source_domain: osec.io
source_url: "https://osec.io/blog/metamask-snaps/"
published_at: "2023-11-01T00:00:00Z"
tags: ["vulnerability", "javascript", "browser-extension", "sandbox", "metamask", "snaps"]
phying_url: "https://phying.com/item/5682"
lang: en
---

# MetaMask Snaps: playing in the sand

## Summary

OtterSec digs into MetaMask Snaps' sandbox — isolated iframe, LavaMoat, SES — and breaks down a property spoofing vulnerability it reported in the Snaps sandboxing layer.

## Intelligence Metadata

- **Sources:** osec.io
- **Published:** 2023-11-01T00:00:00Z
- **Original:** https://osec.io/blog/metamask-snaps/
- **Phying News:** https://phying.com/item/5682