Metamask Portfolio Review: Cross-Chain Asset Logic and the Wealth Visibility Unhack

It’s a Tuesday night and you’re trying to answer one simple question: how much am I actually worth right now? You open one explorer for your Ethereum balance. Another for Base. You squint at a Solana wallet you half-forgot. Twenty minutes in, you’re building a spreadsheet, you’ve still missed a staking position on Arbitrum, and the number you land on is a guess wearing a suit. You own the assets. You just can’t see them.

The short version: MetaMask Portfolio is a free-to-view, non-custodial dashboard that reads your public wallet addresses and aggregates balances across Ethereum, Base, Polygon and roughly a dozen other EVM chains, plus Solana, in real time. Viewing never touches your private keys, so it adds visibility without adding custody risk — but the buttons inside it are not free: MetaMask takes 0.875% on every swap and 0.875% on every bridge, on top of network gas. The genuine trade-off is privacy: because the dashboard is free, ConsenSys (the company behind MetaMask) collects metadata about the addresses and balances you view, and your IP can be linked to your wallet address through the default Infura RPC. Both are fixable by pointing the dashboard at a self-hosted node. Treat it as a read-only window onto wealth you already own — not a place to ever paste a seed phrase. And keep the custody wording straight, because it gets conflated constantly: MetaMask is self-custodial (you hold the keys, nobody can freeze you) but it is also hot (those keys sit on an internet-connected device). Self-custodial is not the same as safe, and the practical consequence is in the security section below. When it is time to reconcile the tax side, a tool like Koinly imports your exchange and wallet history and produces the gain/loss report for you.

Why does holding crypto on multiple chains lose you money?

You probably hold assets on at least three blockchains. Most active users do. The asset spread isn’t the problem. The blindness is.

The moment your money lives in four places, you lose situational awareness. You can’t see your real exposure during a dip, so you panic on partial information. You forget a yield position is even running. You leave airdrop dust and abandoned liquidity-provider stakes scattered across minor chains, quietly doing nothing. Decisions get made on vibes instead of numbers — and reactive decisions on money are the expensive kind.

Here’s the part most people miss. The friction of self-custody isn’t an accident — it’s the moat that keeps you dependent. A centralized exchange shows you one tidy balance because that tidiness is the product; it’s how they keep your coins on their books. Spreading across chains is supposed to feel like more work than it’s worth, so you stay where the numbers are easy and the custody isn’t yours. The instant you can see your whole footprint in one view you control, the reason to leave money parked on an exchange quietly evaporates. The dashboard isn’t a convenience. It’s the thing that makes leaving possible — the tool that turns “self-custody is too confusing” from a true statement into a solved one.

How does MetaMask Portfolio aggregate your cross-chain assets?

MetaMask Portfolio is a blockchain crawler, not a wallet. That distinction is the whole safety story: it reads from public addresses you give it and never asks for a key, a seed, or a signature to view your holdings.

It works in three layers:

• Discovery. You feed it your public addresses. It scans every supported chain and surfaces each token, NFT and protocol position tied to them.
• Pricing. Live prices flow in from CoinGecko — MetaMask names it as the primary price source for ERC-20 and BEP-20 tokens — so the total revalues as the market moves.
• Action. Built-in swap and bridge tools let you move capital between chains without leaving the screen. This is the part that costs money, and most people never notice: MetaMask charges 0.875% on swaps and 0.875% on bridges, quoted before you confirm but folded into the rate rather than shown as a separate line. Buying crypto through the dashboard costs more again — MetaMask takes 1% and the on-ramp provider (Transak, MoonPay, Sardine, PayPal) adds its own processing fee on top, which on card purchases runs several percent.

Because it reads everything at once, the first connection usually surfaces holdings you’d written off — an old airdrop you never claimed, a liquidity position you forgot to exit, dust on a chain you used once. There’s no guaranteed windfall here; the point is that you finally see what was already yours and unaccounted for.

That visibility changes behaviour more than it changes your balance. When the next dip comes, you don’t reach for a spreadsheet — you glance at one number and know your real exposure in a second, which is the difference between a measured response and a panicked one. When a position quietly stops earning, you notice in the weekly look instead of three months later. The dashboard doesn’t make you richer by magic. It removes the fog that was quietly costing you good decisions.

Is MetaMask Portfolio private? The ConsenSys data trade-off

This is where the honesty has to be flat, because the manipulative version of this review would skip it. The dashboard is free because ConsenSys collects metadata about how you use it. That’s the business model, not a bug.

When you load the dashboard, ConsenSys can see your connected addresses, your holdings and balances, your transaction history and its timing, and — if you’re on the default RPC — your IP address. That last one isn’t speculation: ConsenSys updated its privacy policy in November 2022 to state plainly that when Infura is your default RPC provider, it collects your IP address and your wallet address when you transact. In fairness to them, they also said the two are stored separately so they can’t be joined internally, and that retention would be cut to seven days. ConsenSys states it doesn’t sell this data to third parties, but it does use it internally for analytics, compliance and product work. Treat all of that as a vendor claim, not a guarantee — it’s a policy commitment, not a technical impossibility. The practical upshot: if you hold a serious balance, a centralized company is in a position to tie your portfolio metadata to you.

The fix that closes the leak is one setting: point the dashboard at your own RPC node. Run a self-hosted node (an Umbrel box is the friendly route) and set it as your endpoint. That severs the IP-to-address link and stops ConsenSys correlating when and what you check with your identity. The only cost is a little latency — a self-hosted node is slightly slower than a polished centralized one. That’s the trade: a few hundred milliseconds for not being watched. Worth it.

How to set up MetaMask Portfolio safely (the four-step hardening)

The first move is almost embarrassingly small, and it’s the one that matters most for safety: you only ever give the dashboard a public address, never a key.

1. Watch-only connection. Copy your public addresses, go to portfolio.metamask.io, click “Add address,” and paste. You now have full visibility with zero private-key exposure. Never connect a hot wallet or type a seed phrase into a dashboard — no read-only view ever needs one.
2. Filter the spam. Your view will fill with scam tokens and bait airdrops. They can’t move your money, but visual noise corrodes decisions. Use “Hide” to mute the low-signal junk so the positions you care about stay readable.
3. Harden the RPC. Swap ConsenSys’s default RPC for your self-hosted endpoint in MetaMask’s network settings. This is the privacy step from the section above, applied.
4. Export monthly. Pull your transaction history to CSV once a month. You get an offline tax record and an audit trail that survives any single company. Keep the exports in encrypted cold storage.

Are crypto bridges safe? The execution rule that protects you

The built-in bridge moves stablecoins and major assets between chains in one click. It’s genuinely useful — it costs 0.875% of the transfer, calculated on the pre-fee value, plus whatever the underlying route charges — and it’s also where a lot of people have lost everything.

Test every bridge with a throwaway amount first: move $100 of USDC before you move $10,000. A five-minute delay on a test transaction is cheap insurance against discovering a bug with your savings on the line. The deeper risk isn’t a typo, though — it’s counterparty failure. Nomad Bridge lost roughly $190M to an misuse in August 2022 — a botched upgrade that made every message look pre-approved, then got copy-pasted by 300-plus addresses in a free-for-all. Ronin Bridge lost about $625M in March that same year. Both were “solid” right up until they weren’t. Bridge only what you could stomach losing, and only when the move actually justifies the risk.

While you’re in the dashboard, two habits compound. The portfolio surfaces staking rewards and LP yields in real time, so you can compare what each position actually pays and rebalance off facts instead of guesses — if one pot is earning 2% on one chain while another earns 5% elsewhere, the dashboard puts that mismatch in front of you instead of leaving it buried. (Those illustrative numbers are the shape of the problem, not a rate quote; yields move constantly.) One thing to read the fine print on: if you stake through MetaMask rather than just watching an outside position, MetaMask keeps a cut of the rewards — 15% on Pooled Staking, so you receive 85% of what the network pays, and 10% on Validator Staking. Compare net-of-commission, not headline APR.

The second habit is the one that actually protects the money. The security tab lists every token approval you’ve ever granted — each one a standing permission a compromised or malicious contract can use to drain a wallet automatically, without ever seeing your seed phrase. This, not custody, is the real loss vector. Scam Sniffer counted $83.85M lost to wallet-drainer impersonation scam across roughly 106,000 victims in 2025 — down 83% year on year, but still the way ordinary self-custody users lose money, and Permit-style signatures accounted for 38% of losses in incidents above $1M. That is the honest counterweight to “self-custodial means safe.” It doesn’t. MetaMask is a hot wallet: the keys live on an internet-connected device, and one careless signature does what no exchange hack needs to. A hardware wallet moves the signing step off that device and is a genuinely different risk tier — if the balance is life-changing, hold it there and use MetaMask as the spending account. Meanwhile: run a quarterly approval sweep and revoke anything you no longer use. Fifteen minutes, real risk removed. This isn’t paranoia; it’s keeping your own chain of custody intact.

MetaMask Portfolio vs Zerion vs Zapper: which dashboard?

Three dashboards dominate cross-chain aggregation, and they’re built for different people.

• MetaMask Portfolio — fully non-custodial and free to view, with in-app swaps and bridges at 0.875% each. Native to the MetaMask ecosystem. The sensible default if you already live in MetaMask. We haven’t found a like-for-like published audit of how much telemetry each of these three collects, so treat any “most private dashboard” ranking — including one you read here — as unproven; what is documented is the Infura IP-and-address collection above, and that it’s switchable.
• Zerion — a more polished interface and deeper DeFi-protocol coverage, but it collects more comprehensive analytics and charges for some advanced features. Better if you want richer yield analytics.
• Zapper — the strongest governance-token staking and farming integration, with transaction fees on some bridge operations. Better for active DeFi farmers.

For most holders, the non-custodial design and zero cost to view make MetaMask Portfolio the right starting point — move up to Zerion only when you genuinely need deeper analysis. None of them is the “best.” The best one is the one whose trade-offs match how you actually use your money.

Frequently asked questions

Does MetaMask Portfolio have access to my private keys?
No. It only reads your public addresses. Your private keys stay inside your MetaMask extension or hardware device and are never transmitted to the dashboard. Viewing is genuinely non-custodial — which is exactly why pasting a seed phrase anywhere is a red flag. Worth separating two things people merge, though: the dashboard holding no keys is not the same as your keys being safe. In the extension or mobile app those keys sit on an internet-connected device, and the documented way people actually lose funds is signing a malicious approval or Permit, not the dashboard leaking anything.

Can I use MetaMask Portfolio without the MetaMask extension installed?
Yes. Go to portfolio.metamask.io directly and add addresses by hand. The extension integration is convenient but optional, and watch-only addresses work without any wallet connected at all.

Does it work with hardware wallets like Ledger?
Yes. Connect your Ledger to MetaMask, then add those addresses to the dashboard. You get full visibility without leaving the hardware wallet plugged in, since the dashboard only ever reads public data.

What happens if MetaMask or ConsenSys shuts down?
Your assets are unaffected — they live on the blockchain, not on the dashboard. You’d lose the convenient unified view, but the wallets stay accessible through other tools such as a block explorer, a competing dashboard, or a direct RPC query. This is exactly why you keep your own record of every address.

Is there a mobile app for MetaMask Portfolio?
Not a separate standalone app. Portfolio is web-first at portfolio.metamask.io and loads in a mobile browser, and it’s also reachable from inside the MetaMask mobile app and extension via the “Portfolio” link near your balance. It works on a phone but is less refined than desktop.

You opened this trying to answer one question — what am I actually worth? — and couldn’t, because the answer was scattered across a dozen screens designed to keep it that way. Now you have a single window onto all of it, one you control, that never holds a key and that you can shield from prying eyes with a single setting. That’s the shift: from being managed by the complexity of your own money to managing it yourself. Add the addresses, point it at your own node, run the weekly look. You’re not guessing anymore. You can see the whole board — and the person who can see the board is the one who owns it.

Where to get it: Onboard wallet. Affiliate link — The Unhacked may earn a small commission at no cost to you; our verdict isn’t for sale.

Free from The Unhacked: Tired All the Time — A Doctor’s Honest Guide — our own guide, free to download.