SLT Bug – MetaMask Signing Test

1. Connect MetaMask

Target Contract

Contract Address (V3 NPM on mainnet) Attacker Address (receives approval) Token ID

Send Transaction

2. Send Malformed Multicall (hidden approve) 3. Send Legitimate approve (for comparison)

Payload Preview

Show Raw Payloads

What to look for in MetaMask

• Does MetaMask show "Multicall" or "Contract Interaction"?
• Does it show any decoded parameters?
• Does Blockaid flag it as suspicious?
• Is there any visible difference from a normal multicall?
• Compare with button 3 (legitimate approve) — does that show "Approve"?