On June 22, MetaMask's official social media account responded to a controversial message. The message, appearing to come from MetaMask, mocked Jaredfromsubway.eth, a well-known MEV bot operator. MetaMask quickly clarified that the message was not sent by the official team.
According to MetaMask, the message originated from the capitalized ENS name 'MetaMask.eth', which is owned by an unaffiliated third party. The official MetaMask team holds the lowercase version 'metamask.eth'. MetaMask explained that both lowercase and capitalized versions of ENS names can be created, but most platforms default to displaying the lowercase form, creating a potential source of confusion for users.
ENS Case-Sensitivity Raises Security Concerns
In its reply, MetaMask stated: 'FYI, we did not send this message. The message was sent from MetaMask.eth (capitalized version), which is owned by an unaffiliated third party. We own metamask.eth. It is unfortunate that both uncapitalized and capitalized versions of ENS names are able to be created, and most (if not all) platforms default to displaying an uncapitalized ens name.'
The incident highlights a potential security pitfall in the Ethereum Name Service (ENS) system: attackers can register capitalized versions to impersonate official identities, and ordinary users may easily overlook the difference. The ENS protocol permits registration of any case combination, but the visual difference is minimal, making identity spoofing plausible.
Risk Advisory for Crypto Users
MetaMask advises users to verify the exact casing of official ENS names and avoid trusting messages from capitalized versions due to default lowercase displays. The official recommendation is to check the specific case format of an ENS name when confirming identity, or to cross-verify through official channels.
As of now, the capitalized 'MetaMask.eth' name remains held by a third party. MetaMask stated it will continue to monitor the situation and called on platforms to improve ENS display mechanisms to reduce similar confusion incidents in the future.