MetaMask Hired Developer Previously Flagged as North Korean Mole

Consensys, the parent company behind the MetaMask wallet, recently confirmed that it hired a developer who turned out to be a suspected North Korean operative. The individual, who went by the alias Tyler Knapp, contributed to core wallet code for one month before being fired in April. Security analysts discovered the developer was already listed on a public tracking site for Lazarus Group operatives nearly a year before joining the team.

Reports indicate the developer used the GitHub handle imyugioh and appeared on a blacklist maintained by the Security Alliance under the name Mauro Liu. This same identity has been linked to numerous other crypto firms over the past few years, including Ankr and Pickle Finance. Critics suggest the incident points to a failure in standard background check protocols within the industry.

Consensys stated the developer came through a reputable third party service provider. The company launched an internal investigation and maintains that no assets or user data were stolen during the period the developer had access. They claim no malicious code was ever pushed to their production environment.

This incident highlights a growing concern in the sector regarding North Korean IT workers attempting to infiltrate crypto startups. As these firms scale, the risk of hiring bad actors disguised as remote consultants remains a top priority for security teams. Investors should continue to monitor how major platforms update their hiring practices to prevent similar security gaps.