Back Kucoin

MetaMask hacker infiltrated through outsourcing; no data or funds lost

Kucoin • July 19, 2026

PANews, July 19: According to market reports, Matt Corva, Legal Lead at ConsenSys, the parent company of MetaMask, disclosed a security incident in which a North Korean hacker infiltrated the team. The hacker, identified as Tyler Knapp, was brought in through an external staffing agency with whom the company had long-term partnerships, thereby bypassing direct hiring background checks. The hacker worked for one month and was involved in developing the fiat on-ramp and off-ramp features for the wallet. Suspicious IP activity and behavioral anomalies triggered alerts in the company’s security monitoring system. Upon discovery, the company immediately revoked all access and halted all product releases handled by the individual. Matt Corva stated that no material data or funds were compromised.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean Hacker Infiltrates MetaMask Team as Contractor A North Korean hacker named Tyler Knapp infiltrated MetaMask's parent company, ConsenSys, posing as a contractor for a month. He bypassed background checks through an external staffing agency and contributed to the development of fiat deposit and withdrawal features. The infiltration was discovered due to abnormal IP activity and behavior, prompting immediate revocation of his access and a halt to product releases he was involved in. Fortunately, no data or funds were compromised during this incident. ConsenSys is now reviewing its contractor verification processes to prevent future breaches. The hacker's presence raised concerns about security vulnerabilities in outsourced development roles. 14 sources 60

Extracted Entities

Companies (1)

Consensys