North Korean Hacker Infiltrates MetaMask as Contractor, Discovered After One Month With No Losses

According to Consensys legal head Matt Corva, on July 19, MetaMask discovered that a North Korean hacker named Tyler Knapp had infiltrated the team as an outsourced contractor and participated in developing the wallet's fiat on-ramp and off-ramp features. The hacker was employed for one month before being identified through abnormal IP and behavioral patterns detected by the company's security monitoring.

MetaMask immediately revoked all access and suspended all product releases involving the contractor's work. Corva stated that the incident resulted in no substantial data or fund losses.