Featuring the $120,000 clickjacking bounty awarded to the UGWST, the Halborn "Demonic" vulnerability disclosure affecting browser wallets, plus the deprecation of eth_decrypt and eth_getEncryptionPublicKey.
Endo's import.meta and __dirname implementations for MetaMask's module compatibility, a distributed key generation prototype snap using multi-party computation for MetaMask Flask, and the launch of MetaMask's HackerOne bug bounty program.
Featuring Endo's CommonJS compatibility milestone for MetaMask's npm dependency chain, LavaMoat v6's 'a'a package naming rollout, LavaMoat's path to React Native and MetaMask Mobile, and an iCloud backup advisory for MetaMask vault data.