Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
FollowingConsensus denies that MetaMask was compromised and involved an incident involving IT employees associated with North Korea.
Consensus, a well-known blockchain software company known for developing MetaMask cryptocurrency wallets, denied reports that user assets or data encountered security breaches. Previously, the company discovered that an external contractor with ties to North Korea had temporarily accessed MetaMask's core code base earlier this year.
Security Incident and Contractor Background
The incident involved a consultant named "Tyler Knapp" and identified as "imyugioh" on GitHub. According to Consensus, this person was not a direct employee, but was hired through a third-party service provider to participate in the development of MetaMask. The consultant's access to the wallet codebase lasts from March 9, 2026 to early April, mainly involving features related to the fiat deposit and withdrawal functions.
Consensus took immediate action after identifying a potential threat. The company froze all new product launches, terminated access to the consultant, and launched a thorough internal security review. Law enforcement agencies are also notified in a timely manner as part of the Incident Response Service process.
Note: Legal currency deposits and withdrawals refer to services that promote conversion between traditional currencies and cryptocurrencies, allowing users to deposit or withdraw funds through bank transfers or other standard payment methods.
Official statement and investigation results
Consensus issued a statement on the X platform in response to concerns, aiming to quell online speculation about the scope of the intrusion. The company said its detection mechanism worked as expected, allowing it to quickly control threats.
"Earlier this year, we identified and contained a threat posed by a consultant hired through a third-party service provider. After the threat was quickly discovered, we immediately terminated all access rights, launched a full investigation, and notified law enforcement."
According to Consensus, a comprehensive internal evaluation has been conducted. The review showed that there was no indication that malicious code had been implanted and that user funds or information were not at risk in this incident. The company further emphasized that the performance, security and functionality of the wallet have not been affected in any way.
"Our investigation confirmed that no malicious code was deployed, no customer assets or data were compromised, and user safety, funds and security were not affected."
Consensus response and user reassurance
After identifying the threat, Consensus suspended all product updates to prevent undetected security vulnerabilities. The company's security team reviewed all recent changes to the code base and worked to ensure system integrity. In addition, users were told that law enforcement was working with the Consensus sys internal team to handle the case.
Given that MetaMask serves as a gateway to decentralized web applications and serves millions of users around the world, Consensus took quick action to address any potential risks. The company reiterated its ongoing commitment to user safety and emphasized its investment in routine audits and security measures.
The contractor's identity and deeper background are still under investigation by law enforcement. Consensus did not disclose specific personal information of this individual or relevant third-party service providers. The company said its screening rules for external contributors are being reviewed and updated.
Consensus once again emphasizes that MetaMask users do not need to take any additional actions for this event, and customer assets and information remain safe.
