Incident Report: TrustVault for MetaMask Incompatibility with Latest Browser Versions
Incident ID: 20240517-01Reported by: Alessio Vanini - Heka Funds Sicav plc Date/Time Reported: May 17, 2024, 08:46 UTCAffected Service: TrustVault for MetaMaskAffected Browsers: Brave (latest version 1.66.x), Chrome (latest version 125.x)
Incident Summary
On May 17, 2024, at 08:46 UTC, Heka Funds Sicav plc reported issues with TrustVault for MetaMask using the Brave browser, stating that the app keeps loading indefinitely across three different devices. At that time, TrustVault still functioned correctly in Chrome. Initial investigations began immediately.
Timeline of Events
- May 17, 2024, 08:46 UTC: Client reported issues with TrustVault using Brave browser.
- May 17, 2024, 13:40 UTC: Customer was advised to continue using Chrome while we investigated.
- May 17-19, 2024: Further investigations indicated the issue could be complex and time-consuming to resolve.
- May 20, 2024: Customer reached out for an update via Slack. We confirmed the issue with the latest Brave version and suggested using a previous version (v1.65.133 on Mac). We questioned why they were using different browser rather than Chrome profiles and customer responded, “we are using 1 browser for each fund that we manage … we are structured this way at the moment.”
- May 20, 2024: Similar issues identified with the latest Chrome version (125.x). Customer advised not to upgrade and provided working (124.x) and failing (125.x) Chrome versions.
- May 21, 2024, 13:18 UTC: Status page update to all clients:"Identified - We have identified an issue with both Brave and Chrome following a recent update. Please note that TrustVault for MetaMask is currently not working on the latest versions (Chrome 125.x or Brave 1.66.x). Users are advised to not upgrade or to roll back to the previous version (Chrome 124.x or Brave 1.65.x) to ensure TrustVault compatibility."
- Client Response: Preferred not to download older browser versions, suggesting the extension should adapt to new browser updates.
- May 22, 2024, 10:19 UTC: Status page update:"Update - We have tested TrustVault in the latest version of Vivaldi (6.7.3329.31) and confirmed it is working. It is also possible to turn OFF automatic updates with Vivaldi, which we recommend. If you are unable to use TrustVault MM extension as your Chrome or Brave browsers have automatically updated, we recommend downloading and installing Vivaldi or reverting to previous working versions of Chrome or Brave."
- May 22, 2024, 11:00 UTC: Published help article with rollback instructions: TrustVault MetaMask Brave Chrome
- May 22, 2024, 16:57 UTC: Final status page update:"Update - Our engineers are diligently working to resolve the issue caused by the recent update to Chrome and Brave, which has affected the functionality of TrustVault for MetaMask. While we don't have a specific timeline for the fix yet, please be assured that this is our top priority. In the meantime, you can use a previous version of Chrome or Brave, or switch to the latest version of Vivaldi, to continue conducting DeFi transactions with TrustVault for MetaMask."
Actions Taken
- Advised affected users to use older versions of Chrome (124.x) and Brave (1.65.x).
- Recommended using Vivaldi (6.7.3329.31) as a temporary solution.
- Published a detailed help article on how to rollback browser versions.
- Continuous communication with affected clients to provide updates and interim solutions.
- Email sent to all customers.
Next Steps
- Ongoing investigation by the engineering team to develop a fix for compatibility issues with the latest versions of Chrome and Brave.
- Provide regular updates to clients via status page and direct communication channels.
- Develop and test patches or updates to TrustVault for MetaMask using the existing codebase and develop it for MetaMask Snaps to ensure compatibility with the latest browser versions.
Contacted Clients
- Campsor Ltd (£1750/qtr)
- Coral Capital LLC (£3,428.25/pcm)
Heka Funds Sicav plc
- Alpha Bitcoin (€1000/pcm)
- Alpha Ethereum(€1000/pcm)
- Elysium Global Arbitrage Fund (€6000/pcm
Re7
- Re7 Liquidity Fund (5,450.00 /qtr)
- Re7 Hutt Yield Fund (£2,450.00 /qtr)
Bitpanda Gmbh
Feedback Received
- Other than Heka Funds Sicav plc no feedback has been received to date.