MetaMask
North Korea Got Inside MetaMask. The Code Wasn’t the Weakest Link
A North Korea-linked contractor contributed to MetaMask for a month before Consensys froze releases. No malicious code or user losses were found, but the incident exposes the human trust buried inside crypto’s software supply chain.