Solana, Sui and Aptos wallet data targeted in TrapDoor package attack
A supply-chain attack dubbed TrapDoor is targeting developers building on Solana, Sui, and Aptos via malicious tooling packages designed to exfiltrate wallet keys, SSH credentials, and cloud tokens. Developer-ecosystem attacks historically erode confidence in affected chains, creating near-term selling pressure on associated tokens as institutional and retail holders reassess platform security.
What happened
A supply-chain attack dubbed TrapDoor is targeting developers building on Solana, Sui, and Aptos via malicious tooling packages designed to exfiltrate wallet keys, SSH credentials, and cloud tokens.
The read · May 29
Short APT into the TrapDoor news cycle — insider selling (7 sales in 30d), weak consensus, and a developer-targeting attack are a toxic triple for a low-liquidity alt.
Wrong if
A rapid official response from Aptos Labs with a credible package audit and no confirmed wallet drains could quickly reverse sentiment; any broader crypto risk-on rally (e.g., BTC breakout) would overwhelm chain-specific negative news and stop this trade out.
CoverageSource: CoinDesk · Published here FRI, MAY 29 · 4:19 AM ET · the only report in this recordHow this is decided →
The chart · APTTradingView · third-party feed, not the Wire’s licensed closes
🔒 Click to interact · scroll moves the page
The story1 min read
The read, in fullWhy it matters
APT is the cleanest short: 7 insider sells in the last 30 days signal distribution before this news hit, consensus is a tepid 2SB/2B/1H with no published price target to backstop optimism, and the token was already down 1.5% on the day. Supply-chain attacks on developer tooling directly undermine the builder activity that justifies alt-L1 premiums — if developers can't trust the SDK ecosystem, TVL and developer growth metrics deteriorate. SUI has heavier buy-side consensus (10B) that may cushion the dip; SOL's community is larger and more resilient. APT is the weakest link structurally.
The arc● Open · no developments yet
· Published
The read above, as written. kept as written · closes shown from MAY 29 on
Next · what would move this
1-2 weeks. Follow to be told when one lands.
Receipts
CoinDesk — the original4:19 AM
Research, not advice.
Kept as written · your side, if you take one, is graded privately against licensed closes after 10 trading days · nothing here is advice · How the Wire is made →