f

packages/status-js/src/request-client/request-client.ts

@@ -307,12 +307,21 @@ class RequestClient {
       // eslint-disable-next-line no-empty
     }
 
-    const decodedMetadata =
+    let decodedMetadata
-      ApplicationMetadataMessage.fromBinary(messageToDecode)
+    try {
+      decodedMetadata = ApplicationMetadataMessage.fromBinary(messageToDecode)
+    } catch {
+      return
+    }
+
     if (!decodedMetadata.payload) {
       return
     }
 
+    if (!decodedMetadata.signature.length) {
+      return
+    }
+
     const signerPublicKeyBytes = recoverPublicKey(
       decodedMetadata.signature,
       decodedMetadata.payload