Policy Event Β· High impact

TrapDoor Supply Chain Attack Targets Crypto Developer Keys And Wallets

Socket Research reported a cross-ecosystem TrapDoor campaign across npm, PyPI and Crates.io packages targeting crypto, DeFi, AI and security developers. The attack raises compliance and listing-review risk because compromised developer secrets, wallets, CI/CD credentials and cloud keys can translate into project-control and custody failures.

High impact🌐 GlobalAMLDeFiCustodySOLSUISocketnpmPyPICrates.io

APAC FINSTAB analysis

Although this is outside core APAC, it is relevant because global market-structure, enforcement, and stablecoin precedents often shape licensing expectations for APAC exchanges, issuers, custodians, and DeFi teams. Protocols/assets in scope: SOL, SUI. Named institutions or platforms: Socket, npm, PyPI, Crates.io. Teams should monitor the original source, map the change to licensing, custody, disclosure, and market-access obligations, and update their jurisdiction playbooks before the next compliance review.

Compliance read-through: map this event to entity licensing, market-access, custody, disclosure, token listing, and operational-risk obligations before expanding or marketing in the affected jurisdiction.

View related AML tracker page β†’

Related policy events

South Korean Exchanges Show Low Corporate Crypto KYC Completion

Yonhap-cited figures in the compliance channel showed South Korea's five major crypto exchanges had 6,590 registered corporate accounts by end-July, but only 711 had completed KYC and just around 29 active general corporate accounts traded or moved assets that month. The gap suggests Korea's institutional-account opening remains constrained by onboarding, AML and suitability controls rather than registration demand alone.

Medium impactπŸ‡°πŸ‡· South KoreaAMLExchangeRegulationKRWBTCETH

UAE Police Inquiry Into Binance Employees Highlights Exchange Enforcement Risk

The New York Times reported that two Binance employees were detained in the UAE amid police inquiries into possible financial crimes on the platform, while Binance said staff were responding to routine enquiries and had been released. The case keeps cross-border exchange operations, employee exposure and law-enforcement response controls in focus for VASPs.

High impact🌐 AEEnforcementExchangeAMLBTCETH

Cambodia And U.S. Authorities Uncover Sinaloa Cartel Crypto Laundering Network

Cambodian anti-drug officials and U.S. authorities uncovered a network allegedly laundering funds for Mexico's Sinaloa Cartel and confiscated about $7 million in cryptocurrency. The case raises AML, sanctions-screening and law-enforcement cooperation pressure for exchanges, wallets and on-chain monitoring teams.

High impactπŸ‡°πŸ‡­ CambodiaπŸ‡ΊπŸ‡Έ United StatesAMLEnforcementBTCUSDT

Grayscale Files Fifth SEC Amendment For Proposed Zcash ETF

Grayscale filed a fifth amendment with the SEC for its proposed Zcash ETF, which would convert the Zcash Trust into an NYSE Arca-listed product with Coinbase Custody as custodian. The filing keeps privacy-coin exposure in the U.S. ETF pipeline and raises custody, surveillance and asset-eligibility questions.

High impactπŸ‡ΊπŸ‡Έ United StatesETFRegulationCustodyZEC