"Users retain control of their digital assets in their MetaMask wallet until the moment they pay," Consensys said.