Signal

TrapDoor malware campaign targets crypto developer environments including Solana and Aptos

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-05-25 06:25 UTCUpdated 2026-05-25 11:43 UTC
redditrsstelegram
cryptosecuritymalwaresupply_chain_attackdeveloper_toolsdefi
Trend in the last 24h
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (1 domains)domains are deduped. counts indicate coverage, not truth.
1 top source shown
limited source diversity in top sources
Overview

A coordinated malware campaign named 'TrapDoor' is targeting crypto developers by injecting malicious code into popular AI coding assistants and developer tools.

Entities
SlowMistSocketSolanaAptosSui
Score total
1.8
Momentum 24h
4
Posts
4
Origins
3
Source types
3
Duplicate ratio
0%
Why now
  • The campaign is currently active and has been recently detected by multiple security firms.
  • Developers using AI coding assistants and popular tools are at immediate risk.
  • Prompt action can mitigate damage and prevent further wallet thefts.
Why it matters
  • Supply chain attacks on developer tools can compromise entire crypto ecosystems.
  • TrapDoor targets major blockchain projects, risking widespread theft of private keys.
  • Awareness and security measures are critical to protect crypto assets and developer environments.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
  • TrapDoor malware campaign targets crypto developer environments including Solana, Aptos, and Sui to steal private keys and crypto assets
How sources frame it
  • Cointelegraph: neutral
  • The Block: neutral
  • U.Today: neutral
All evidence
Show filters & breakdown
Posts loaded: 0Publishers: 3Origin domains: 3Duplicates: -
Showing 3 / 0
Top publishers (this list)
  • U.Today (1)
  • the_block_crypto (1)
  • CryptoCurrency (1)
Top origin domains (this list)
  • u.today (1)
  • theblock.co (1)
  • cointelegraph.com (1)