North Korea-Linked Contractor Had MetaMask Code Access for Over a Month

A North Korea-linked contractor accessed MetaMask's codebase for roughly a month (March 9 to April) through a reputable third-party vendor before Consensys detected and revoked access. Though no assets, user data, or malicious code were stolen, the incident exposed a gap in continuous verification of third-party contributors and prompted Consensys to freeze product releases and raise contractor vetting standards.

This Wire brief sits within Fusion42's coverage of Crypto & Web3 and Cybersecurity. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur reasons over.