A user downloads MetaMask wallet, connects to a new blockchain network, and within minutes has authorized what appears to be a legitimate transaction. The address looks correct, the site seems official, and the wallet interface shows familiar buttons. What the user does not see is that the network endpoint they configured was not verified, does not belong to the network they intended to access, and is...