A user approves a transaction in MetaMask that appears to be a routine token swap. The interface shows the token name, a reasonable price, and familiar contract addresses. Thirty seconds later, the transaction settles—and the user discovers that 90% of their balance has been transferred to an unknown address. MetaMask displayed no warning. The transaction...
