1

Since Infura always require an API key for its users, and Metamask by default uses Infura, it makes me wonder: where does MetaMask keep the API key of Infura? Not a private of a wallet, but an API key.

Can it be seen and how?

I haven't found an answer anywhere.

P.S.

what's happen when the API quota of the key gets exceeded?

Improve this question

1 Answer 1

Reset to default
2

The API key is buried inside the MetaMask binary.

It can be extracted using reverse engineering techniques.

Improve this answer
16
  • That's a lie. Metamask is a browser extension, and as such it's written in JS. That is, there's nothing "binary" in there. Moreover, give me a proof of your claim.
    – pablo camilo
    Commented Jul 13, 2022 at 5:34
  • I suggest you go and try to read MetaMask JavaScript source code. It is obfuscated to the point it is not readable.
    – Mikko Ohtamaa
    Commented Jul 13, 2022 at 5:47
  • 1
    Also why do you have so bad attitude. People here are trying to help you. Please do not be an asshole and you will get more useful feedback.
    – Mikko Ohtamaa
    Commented Jul 13, 2022 at 5:47
  • If the code is obfuscated, how do you know that the API key is inside it?
    – pablo camilo
    Commented Jul 13, 2022 at 5:49
  • Because I have been working with MetaMask and Ethereum for 7 years.
    – Mikko Ohtamaa
    Commented Jul 13, 2022 at 5:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.