Consensys hired a consultant using the alias “Tyler Knapp” who was subsequently identified through the company's investigation as connected to North Korea. The consultant contributed to core and mobile MetaMask code, including functionality related to crypto-to-fiat conversion, for roughly one month before access was terminated in April 2026. Consensys suspended product releases, notified law enforcement, and said its investigation found no stolen assets or data, malicious code, or impact on users. The case illustrates the DPRK remote IT-worker threat to cryptocurrency companies and their software-development environments.