Investigators said suspected DPRK-linked personnel have been connected to more than 20 projects, though no assets or data were stolen in this case.
A contractor linked to North Korea spent nearly a month contributing to MetaMask’s codebase, raising fresh concerns about software supply-chain risk in crypto development. Investigators said no assets or data were stolen, but they have connected suspected DPRK-linked personnel to more than 20 projects. The episode underscores how hostile actors may seek access through routine development work rather than direct wallet exploits, potentially increasing concern over whether similar incidents could lead to more breaches.