Strengthening Sui: A Multi-Year Security Initiative
Sui Foundation launches a multi-year security program to bolster wallet, app, and protocol layers across its ecosystem.
Introduction
The Sui Foundation has formally unveiled a multi-year program aimed at fortifying the security of its entire ecosystem—including wallets, apps, explorers, and third-party tools—not merely the base layer protocol. Building upon a prior $10 million commitment, the Sui Ecosystem Security Expansion Initiative is designed to underwrite proactive defenses, formal verification, exploit simulations, and shared tooling that elevate the baseline safety for every participant in the Sui ecosystem.
This move reflects an understanding that in blockchain security, the greatest vulnerabilities often lie not in the base protocol itself but in the interfaces and applications layered atop it. As Web3’s losses to exploits surged to nearly $2.5 billion in early 2025, this program positions Sui to pursue ecosystem-wide resilience rather than piecemeal remediation.
Why Stronger Ecosystem Security Matters
From its inception, Sui has embedded robust security practices at the protocol level: ensuring asset ownership semantics, validator fault tolerance, and accurate execution of Move contracts.
Nonetheless, the broader Web3 experience has repeatedly shown that the most damaging attacks exploit weaknesses in smart contracts, wallet integrations, frontend interfaces, or user error. In recognition of that reality, the new Sui initiative aims to shift from a “defend-at-the-core” posture to a holistic armor scheme for all ecosystem touchpoints.
Christian Thompson, Managing Director of the Sui Foundation, captures this shift succinctly:
“For too long, advanced security has been an overlooked part of crypto tooling. Sui is setting a new standard by not only protecting the core protocol, but also hardening the entire ecosystem.”
Rather than relying solely on audits—which are likened to a pre-flight checklist—the Foundation envisions continuous, live defenses: detection, alerting, and coordinated response across the ecosystem.
Core Pillars of the Security Initiative
The Sui Ecosystem Security Expansion Initiative is structured around four interlocking pillars: end-user protection, ecosystem visibility, advanced protocol security, and secure development practices. Below is a detailed breakdown.
1. Protecting End Users
- Impersonation detection & takedowns: The initiative will expand Web2-style domain takedown capabilities and strengthen impersonation detection for Sui ecosystem brands to reduce phishing and spoofing risks.
- Transaction simulation: Already available in wallets such as Slush, OKX, and Backpack, transaction preview and simulation will be extended to more wallets so users can inspect contract calls and spot malicious intent before signing.
- Malicious app detection: The system will flag suspicious contracts, tokens, or addresses in user-facing tools, alerting users before they interact with risky assets.
These protections aim to reduce the cognitive burden on users, turning everyday tools into safer default environments.
2. Ecosystem-Wide Visibility
- Exploit monitoring & alerting: The Foundation will deploy active monitoring systems to detect anomalous contract behavior and push alerts to affected teams so they can respond swiftly.
- Enhanced block explorer tooling: Explorers will incorporate richer analytics such as transaction graph visualization, wallet risk scoring, and address attribution, enabling stakeholders to surface and understand suspicious chain activity.
By turning visibility into a communal resource, Sui hopes to avoid silos of defense and instead foster shared situational awareness.
3. Advanced Protocol & Contract-Level Defenses
- Exploit simulations: The initiative will underwrite red-team style simulations to hunt for vulnerabilities before adversaries do.
- Formal verification via Move Prover: The program expands access to Move Prover services, enabling mathematical proofs of contract logic correctness in high-stakes modules.
- Crowdsourced and AI-driven bug discovery: The plan includes engaging the security community and AI tools to uncover hidden vulnerabilities in contracts with elevated risk.
These techniques complement, rather than replace, traditional audits—especially when the attack surface complexity scales.
4. Secure-by-Default Development
- Template contracts & safe patterns: To ease secure development, the Foundation will publish vetted, secure-by-default smart contract templates and patterns.
- Shared tooling & subsidized resources: Rather than fully underwriting each project’s security needs, the initiative covers access costs (e.g. for formal verification or simulation) to help smaller teams adopt higher standards.
This approach aims to raise the security “floor” across the ecosystem rather than only rewarding well-resourced projects.
Partnerships & Ecosystem Integration
To implement such a sweeping initiative, Sui is leveraging partnerships with specialist security vendors. For example:
- Hypernative has been tapped to provide real-time threat prevention, transaction simulation, and monitoring across attack surfaces, including bridges, wallets, and treasury contracts.
- Blockaid is integrated to augment on-chain exploit detection, incident response, and threat intelligence for Sui wallets and applications.
These alliances help Sui seed the initial infrastructure and give developers access to production-grade defensive tools.
Governance, Economics & Incentives
A few broader observations and considerations emerge from this initiative:
- Selective subsidy, not blanket handout: The Foundation emphasizes that this is not about waiving security obligations for builders—but about making advanced defenses accessible.
- Shared cost, shared benefit: By pooling tooling and infrastructure, smaller projects can share in defense systems that would otherwise be prohibitively expensive.
- Defense posture as long-term infrastructure: Rather than a one-time security sprint, the initiative positions itself as a foundational layer of Sui’s infrastructure, evolving as threats evolve.
While the program begins with $10 million in committed funding, its longer-term sustainability may depend on governance, community participation, and ongoing resource allocation.
Challenges & Risks to Watch
Launching an ecosystem-scale security program is ambitious, and success depends on execution across multiple dimensions. A few challenges worth acknowledging:
- Detection vs. false positives: Real-time monitoring and anomaly systems can generate noise. Striking the right balance is crucial to avoid alert fatigue.
- Coordination across projects: Rapid response requires teams across the ecosystem to adopt protocols and react to alerts. Without collaboration, detection yields little containment.
- Adversarial escalation: As defenses harden, attackers may move laterally into side channels or exploit new vectors—requiring the initiative to evolve dynamically.
- Sustained funding and governance: Early funding is a strong start, but ongoing maintenance, upgrades, and incentive alignment will be crucial.
These are not insurmountable, but they highlight that security is never “done”—it’s a continuous arms race.
Conclusion
By launching the Sui Ecosystem Security Expansion Initiative, the Sui Foundation is making a clear statement: securing an L1 protocol is necessary but not sufficient in Web3. Real trust and resilience come from protecting every layer where users, applications, and contracts interact.
If executed well, this program could raise Sui’s standing not just in performance or features but in operational security maturity—a competitive advantage in an era when losses from hacks routinely run into billions. More importantly, it aligns incentives such that every project—from wallet providers and explorers to dApps—benefits from a shared security backbone.
As the ecosystem evolves, this initiative may well shape how security-conscious layer-1 networks are built and sustained. For those building on Sui (or evaluating it), it is worth watching how the Foundation transitions this plan into practice—and whether the community can operate in lockstep to defend together.
Be sure to check out Suipiens' website and social media channels to stay up-to-date on all things about Sui Blockchain!