North Korean Hacker Foiled by MetaMask as Crypto Firms Grapple with Growing Threat

MetaMask, one of the world's most popular crypto wallets, nearly fell victim to a North Korean hacker who infiltrated its system for almost a month. The company, Consensys, discovered the threat through unusual IP activity and behavioral signals flagged by their security monitoring tools.

The hacker, using the alias 'Tyler Knapp,' worked on MetaMask's fiat on- and off-ramp feature, which moves money between crypto and regular currency. This is a sensitive part of the codebase, and the company took swift action to prevent any potential damage.

Consensys revoked all access permissions linked to the worker and alerted law enforcement. They also began reviewing their contractor vetting process to ensure such incidents do not happen in the future. No funds or data were lost, and no malicious code was deployed during the hacker's time at MetaMask.