MetaMask Source Code Breach Tied to North Korea Contractor
The blast radius is upstream of any exploit: a compromised developer laptop at a subcontractor can inject tainted code into a wallet used by tens of millions before the next release ships.
Every Zipp story tagged #Consensys, newest first.
The blast radius is upstream of any exploit: a compromised developer laptop at a subcontractor can inject tainted code into a wallet used by tens of millions before the next release ships.
No assets or data were compromised and no malicious code shipped, but the incident lands as a fresh reminder that DPRK IT-worker infiltration of Western crypto firms is structural, not anecdotal.
The dismissal closes the highest-profile attempt by the prior SEC to drag MetaMask and Ethereum wallet software into securities enforcement, and hands ConsenSys its first clean win over the agency.
JPMorgan and Goldman Sachs were on the draft S-1; the timing slip, alongside a peer pause wave, signals issuers don't yet see a clearing window after February's drawdown.
The MetaMask builder's delay joins Kraken and Ledger on the pause list — the cleanest read on how far the 2026 listing window has closed since BitGo's 20% pop faded.