A contractor brought in through a third-party provider worked on MetaMask code from March until Consensys cut off access in April and paused product releases. The company says it found no stolen assets, exposed data or malicious code.
Consensys found no compromised assets or data, no malicious code deployment and no user impact, but contractor access controls face scrutiny.
