efi

#EFI 🚀 SpaceX (SPCX): record IPO and +49% in 4 days

Market cap: over $2 trillion. Price: ~$202.

SpaceX shares hit the market on June 12 under the ticker SPCX - marking the largest IPO in history. In the TonTrader terminal, SPCX was available even before the IPO, and now it’s trading publicly on Nasdaq.

⏺ The company issued 555.6 million shares at $135, raising $75 billion - more than Saudi Aramco did in 2019 ($24.9 billion). On the first day, the shares closed at $161, gaining 19%, and Musk became the world's first trillionaire.

The exploit starts before the contract is deployed.

A recent supply chain campaign compromised development environments connected to the Solana, Sui, and Aptos ecosystems. Malicious packages published on npm and PyPI were used to steal AWS credentials, SSH keys, and wallet data from active developers — before a single line of code ever reached mainnet.

The attack vector was not the smart contract. It was the developer.

Once the build environment is compromised, the entire protocol may already be exposed before it even exists on-chain. This pattern is becoming increasingly common: operational risk now precedes the on-chain exploit.

The market still prices smart contract audits far more efficiently than supply chain risk and operational security. But protocols with mature OpSec controls tend to absorb less post-incident volatility than audited protocols with weak operational discipline.

The important point is not just the exploit itself. It is understanding where the real attack surface begins:

- CI/CD
- dependencies
- signing infrastructure
- build environments
- privileged credentials
- AI-assisted development workflows

The next era of Web3 security will be defined less by Solidity bugs and more by invisible operational compromise.

$SOL $APT $ETH