Policy Event Β· High impact

TrapDoor Supply Chain Attack Targets Crypto Developer Keys And Wallets

Socket Research reported a cross-ecosystem TrapDoor campaign across npm, PyPI and Crates.io packages targeting crypto, DeFi, AI and security developers. The attack raises compliance and listing-review risk because compromised developer secrets, wallets, CI/CD credentials and cloud keys can translate into project-control and custody failures.

High impact🌐 GlobalAMLDeFiCustodySOLSUISocketnpmPyPICrates.io

APAC FINSTAB analysis

Although this is outside core APAC, it is relevant because global market-structure, enforcement, and stablecoin precedents often shape licensing expectations for APAC exchanges, issuers, custodians, and DeFi teams. Protocols/assets in scope: SOL, SUI. Named institutions or platforms: Socket, npm, PyPI, Crates.io. Teams should monitor the original source, map the change to licensing, custody, disclosure, and market-access obligations, and update their jurisdiction playbooks before the next compliance review.

Compliance read-through: map this event to entity licensing, market-access, custody, disclosure, token listing, and operational-risk obligations before expanding or marketing in the affected jurisdiction.

View related AML tracker page β†’

Related policy events

Binance Australia Implements Travel Rule Crypto Transfer Procedures

Binance Australia said Australian users must provide sender information for crypto deposits and beneficiary information for withdrawals from July 1, 2026. The change turns Australia’s Travel Rule implementation into a live exchange compliance workflow for VASP transfer screening and customer disclosures.

High impactπŸ‡¦πŸ‡Ί AustraliaRegulationAMLExchangeBTCETHUSDTUSDC

France Crypto Wrench Attacks Put KYC Data Minimization In Focus

A GN Crypto report citing Bitcoin journalist Joe Nakamoto said France accounts for about 70% of reported 2026 crypto wrench attacks, with 41 kidnappings recorded and KYC data leaks identified as a key risk vector. The trend links exchange data governance, customer privacy and physical-safety incident response to AML/KYC compliance design.

Medium impact🌐 FRAMLCustodyEnforcementBTC

StablR Stablecoin Exploit Exposes Mint Authority Governance Risk

StablR-linked EURR and USDR stablecoin contracts were reportedly exploited after privileged minting controls were compromised, with losses reported above $3 million and market confidence hit. The incident highlights that stablecoin compliance review must cover on-chain mint authority, multisig thresholds, admin-key custody and depeg response in addition to reserve disclosures.

High impact🌐 EUStablecoinDeFiAMLEURRUSDR