Consensys Accidentally Hired North Korea-Linked Developer for MetaMask Team
The company stated it quickly identified the security threat.
1Security Breach at MetaMask
Consensys mistakenly hired a developer linked to North Korea as a consultant for the MetaMask team. This individual had access to the company's internal systems and worked on the code for about a month.
2Quick Detection and Response
Consensys quickly detected suspicious activity and immediately revoked the developer's access. The company confirmed that no data leaks or user security breaches occurred.
3Use of Fake Identity
The developer worked under the pseudonym Tyler Knapp and a GitHub account. They contributed to critical components of MetaMask, such as modules converting cryptocurrencies to fiat.
4North Korea's Crypto Targets
North Korean hacker groups particularly target crypto companies. Developer access can encompass not only source code but also transaction signing infrastructure.
5Past Incidents and Losses
North Korean hacker groups were responsible for 76% of the crypto market's losses in 2026. The total value of stolen crypto assets in 2025 exceeded $2 billion.
6Importance of Security Protocols
Following this incident, Consensys reviewed its procedures for working with third-party consultants. The company expressed pride in the swift operation of its security protocols.
Original article: INCRYPTED — Consensys, MetaMask Ekibine Kuzey Koreli Geliştirici Aldı