Consensys contractor linked to North Korea accessed MetaMask code

Consensys recently revealed that a contractor hired through a third party maintained access to MetaMask code for one month earlier this year. The company identified the individual as having links to North Korea and immediately terminated that access once the connection was discovered. Consensys insists that an internal investigation showed no malicious code was injected and no user data or funds were compromised.

Following the discovery, Consensys paused all product releases to conduct a thorough security audit. The firm also contacted law enforcement to report the incident. While the company stated the original vendor was considered reputable, it has since updated its internal policies to ensure that outside contractors are subject to the same rigorous security standards as full time employees.

This incident highlights a growing concern in the crypto industry regarding remote hiring and third party staffing. The FBI has warned that North Korean IT workers frequently use forged identities to secure roles at tech companies to gain access to valuable repositories. Experts suggest that firms should enforce stricter identity verification, use hardware based security keys, and limit developer permissions to prevent unauthorized access.

Moving forward, the event serves as a reminder that operational security is just as important as smart contract auditing. Teams are encouraged to adopt a least privilege access model where contractors only see the specific code they need to work on. Keeping these systems secure is vital to maintaining user trust as the market remains a primary target for sophisticated state sponsored hackers.