Checklist

All items in the list below needs to be satisfied.

• Is the Snap repository publicly accessible and linked in this ticket: https://github.com/hashgraph/hedera-metamask-snaps/tree/main/packages/hedera-identify-snap/packages/snap: https://www.npmjs.com/package/@hashgraph/hedera-identify-snap
• Is the Snap distributed on npm and linked in this ticket?
• Has an audit been performed and the audit report attached or linked in this issue?
• Is a complete list of discovered vulnerabilities from the audit documented in this issue?
• For vulnerabilities that have been deemed necessary to be addressed, are the links to the fixes attached to this issue?
• For vulnerabilities that have been deemed not necessary to be addressed, is a reason for each of them documented in this issue?
• The corresponding pull request in this repo has been merged.

Note : This replace the previous Identity snap from tuum-tech ( @tuum-tech/identify )

Audit

Identified vulnerabilities: 1

• TUU-06-001 WP1: Snap account private key persists in memory after lock (Low)
  Fix Note: This issue was fixed in v0.2.1 version of Snap and the fix was verified by Cure53
  in January 2025. The documented problem no longer exists.

Url: https://cure53.de/pentest-report_hedera-snap_v3.pdf