Consensys Hires "Tyler Knapp," Gets North Korea Instead 🔍

Blockchain software firm Consensys disclosed on Friday that it had inadvertently outsourced development work to a contractor later identified as having ties to the Democratic People's Republic of Korea (DPRK). The individual, operating under the alias Tyler Knapp, was introduced to Consensys through an established third-party service provider and worked with the company as a consultant for roughly one month before the relationship was flagged.

General counsel Matt Corva confirmed the episode to Cointelegraph, saying Consensys terminated access immediately after identifying the threat and launched a full investigation. "'Knapp' was introduced to us through an existing relationship with a reputable third-party service provider and collaborated with Consensys as a consultant," Corva said. "He was never hired as a Consensys employee. Very quickly after being introduced, we discovered the threat, followed our security protocols, immediately terminated any access and launched a comprehensive investigation that confirmed there was no misappropriation of assets or data, no malicious code deployed, and no impact to user safety and security."

The incident prompted Consensys to temporarily pause product releases while the review was underway. Corva said the company is reassessing how it evaluates outsourced engineering and development talent in light of the episode.

The episode fits a broader pattern of North Korean operatives targeting digital-asset firms by posing as job candidates or by responding to freelance postings in order to gain access to internal codebases. Consensys said no user funds or data were compromised and that no malicious code reached production environments.

The disclosure was first reported by Drop Site on Friday. Consensys has not publicly identified the third-party staffing vendor involved in the engagement, and the company's investigation remains the basis for its current public statements on the matter.