Blockchain software firm Consensys has confirmed that a developer linked to North Korea infiltrated its team and contributed code to the MetaMask cryptocurrency wallet for approximately one month before being discovered and removed.
According to Consensys, the individual was hired through a standard recruitment process but was later found to have fabricated their identity. The developer worked remotely on MetaMask, one of the most widely used self-custody crypto wallets in the Ethereum ecosystem, with millions of active users worldwide.
The incident highlights ongoing security challenges faced by blockchain and cryptocurrency companies, which have become frequent targets for North Korean state-backed hacking groups. These groups have been responsible for billions of dollars in cryptocurrency theft in recent years, often using sophisticated social engineering and infiltration tactics.
A spokesperson for Consensys stated that the company detected the individuals activities through its internal security monitoring systems before any significant damage could occur. The developers access was revoked, and the code contributions were reviewed and reverted where necessary. The company has since strengthened its hiring and verification procedures.
North Korean IT workers have been increasingly reported to infiltrate technology companies worldwide, using fake identities and credentials to secure remote positions. Once hired, they often attempt to exfiltrate sensitive data, introduce backdoors, or steal cryptocurrency funds. The United Nations and various cybersecurity firms have documented this pattern extensively, with estimates suggesting thousands of North Korean IT workers are deployed overseas under false pretenses.
MetaMask is a critical piece of infrastructure in the decentralized finance ecosystem, serving as a gateway for users to interact with Ethereum-based applications. A compromise of its codebase could have had far-reaching consequences for users funds and the broader blockchain ecosystem.
Consensys stated that it is cooperating with law enforcement authorities on the matter and urged other companies in the crypto space to remain vigilant about their hiring practices, particularly when onboarding remote developers.
This article was adapted from BeInCrypto. Read the original here.
