Back Panewslab

North Korean Hacker Infiltrated MetaMask as Outsourced Developer to Work on Fiat On/Off ...

Panewslab • July 19, 2026

PANews July 19 news, according to market sources, MetaMask parent company Consensys legal chief Matt Corva disclosed that MetaMask experienced a security incident in which a North Korean hacker infiltrated the team. The hacker, named Tyler Knapp, entered MetaMask as an outsourced contractor through a long-term HR supplier, bypassing the company's direct-hire background checks. The hacker worked at the company for a month and was involved in developing the wallet's fiat on/off-ramp functionality, during which abnormal IP and behavioral patterns were detected by the company's security monitoring. The company immediately revoked all his permissions and suspended all product releases he had worked on. Matt Corva stated that no material data or fund losses have occurred as a result.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean Hacker Infiltrates MetaMask Team as Contractor A North Korean hacker named Tyler Knapp infiltrated MetaMask's parent company, ConsenSys, posing as a contractor for a month. He bypassed background checks through an external staffing agency and contributed to the development of fiat deposit and withdrawal features. The infiltration was discovered due to abnormal IP activity and behavior, prompting immediate revocation of his access and a halt to product releases he was involved in. Fortunately, no data or funds were compromised during this incident. ConsenSys is now reviewing its contractor verification processes to prevent future breaches. The hacker's presence raised concerns about security vulnerabilities in outsourced development roles. 14 sources 60

Extracted Entities

Companies (1)

Consensys