v2.105.2
Changelog:
- Fixed: The Humanizer now correctly recognizes a Safe "reject transaction" instead of falling back to a generic/unclear description #2568
- 馃摚 Fixed: A security gap where approvals hidden inside a
multicall()to ERC-4626 vault contracts (e.g. Morpho vaults) were not shown to the user #2571- Previously such approvals were not humanized at all, so users could unknowingly approve spending on a vault token without any warning.
- Added: Humanizer support for decoding plain (non-Safe) multicalls, showing each underlying call instead of a single opaque "multicall" entry #2572
- Fixed: EIP-7730 + EIP-712 Safe multicall signing requests no longer silently drop unrecognized calls, they are now displayed as well #2574
- Fixed: State override detection when configuring a custom RPC #2575
- Fixed: A false "suspicious hosting" warning that could appear on legitimate dApp signing requests #2576
- Caused by a stale session from an earlier tab visit being wrongly matched to the current request; the hosting context is now read from the request's own top frame instead.
Full Changelog: v2.105.1...v2.105.2