Consensys Halts MetaMask Releases Over North Korea-Linked Contractor

Consensys temporarily halted MetaMask releases in April after discovering that a contractor linked to North Korea had access to the wallet's code for roughly a month.

The contractor, brought in through a third-party service provider, made MetaMask-related code contributions from March 9 until Consensys terminated access on April 1.

Consensys general counsel Matt Corva stated that the company identified the threat quickly and launched an investigation, finding no misappropriation of assets or data, no deployment of malicious code, and no impact to user safety or security.

The incident reflects a pattern of North Korean IT workers seeking remote roles at technology and crypto firms under false identities, with the FBI warning about such operatives using company-network access to copy code repositories.