A contractor worked on MetaMask code from March 9 until Consensys cut off access in April. Consensys later described the person as linked to North Korea. Consensys said its investigation found no asset or data misappropriation, no malicious code deployment and no impact to user safety or security.