Consensys Suspends Product Releases Following North Korea-Linked Access Incident

Consensys Temporarily Suspends Releases

Consensys has decided to temporarily halt its product releases after a consultant with alleged ties to North Korea gained access to the company’s systems for approximately one month. This decision came as part of a precautionary measure following an internal investigation.

Investigation Findings

The investigation determined that no assets were stolen, no sensitive data was exposed, and no malicious code was deployed. Consensys General Counsel Matt Corva confirmed that while the consultant, who used the alias “Tyler Knapp” and the GitHub handle “imyugioh,” worked on critical parts of MetaMask’s code, there was no impact on user safety or security.

Details of the Incident

According to reports, the consultant started contributing code on March 9, with access terminated in April. Consensys took immediate action upon discovering potential security threats, and the firm is now reassessing its contractor screening processes.

Response to North Korean Threats

Corva emphasized the importance of establishing proper hiring protocols in the face of rising threats from North Korean operatives targeting the cryptocurrency sector. Despite this incident, the company did not report any financial loss, but it is now closely reviewing its procedures for outsourcing engineering and development tasks.

Broader Implications in the Crypto Industry

The growing presence of North Korean-linked developers in the crypto space is a serious concern. An ongoing investigation has identified nearly 100 suspected North Korean IT professionals utilizing false identities across multiple crypto projects. This trend raises alarms regarding the vulnerabilities crypto companies face, especially given that developers often have access to sensitive code, wallets, and transaction systems.

North Korea’s Continued Influence

Research by TRM Labs shows that North Korean groups significantly contribute to cryptocurrency-related thefts, accounting for 64% of total stolen funds in crypto hacks during 2025. Notably, one incident attributed to North Korea’s TraderTraitor group involved the theft of $1.5 billion from Bybit. This highlights the critical need for enhanced security measures across all platforms.

In conclusion, while Consensys reported no current losses, the incident underlines the necessity for rigorous checks and controls on contractor engagements to protect against potential future threats.