The Other Sui

One network shows up in every chart. The other quietly onboarded 40 million wallets while most people weren't paying attention.

In our last research piece, we treated Sui as a single economy. TVL, fees, DEX share, the credit core, BTCfi through Hashi. That was a fair snapshot. It just wasn't the whole picture.

A month later, the gap was hard to ignore. There is a second network running on Sui that barely overlaps with the first one. Different users, different apps, different behavior. It doesn't show up on DefiLlama. It doesn't appear in TVL league tables. But it is probably where most of what Mysten Labs calls "consumer crypto" is happening.

Sui mainnet turned three this week. From a DeFi angle, the last quarter looks like a comeback story: the chain climbed out of its winter range and got back to real size. From a consumer angle, the picture is stranger. Tens of millions of wallets have been quietly posting videos, playing Epic Games titles, and signing in with Google for most of the past year. Two very different Sui's. Almost nobody writes about both at once.

This piece is an attempt to do that.

The first Sui. The one in the charts.

This is the Sui we covered last time, and the picture has moved a lot since December.

Per DefiLlama on May 1, 2026, Sui DeFi TVL sits at $1.925B. That's several times above the winter low of roughly $570M and close to the October 2025 peak of $2B. Stablecoin market cap is $575M, with USDC at 61%. Daily DEX volume is $420M, perps are at $95M. SUI market cap is $11.6B and FDV is $32.6B. From an investor's point of view, the shape is finally familiar again: more than a billion locked, real trading activity, and a stablecoin base that keeps growing.

One quieter stat matters here. USDC's share of Sui stablecoin supply fell from 71.86% in Q4'25 to 61% by May 2026, even as total stablecoin market cap kept rising. That only happens if non-USDC stables are growing faster than the overall pie. In practice, that's the first clean footprint of USDsui and nearby yield-bearing stables like rcUSD and USDY taking real share rather than just collecting attention. Sui's monetary base is diversifying, and it's diversifying in the direction the chain wants.

The cleanest change shows up in trading. DEX vs CEX dominance went from 0.21% in December to 2.08% by early May. That's a 10x move in five months. Sui is still behind Base at roughly 3% and Solana around 5%, but it is no longer invisible. A lot of that came from Bluefin Pro going live, with Bluefin now reportedly handling about 96% of all perps volume on Sui, Cetus rebuilding depth after the May 2025 exploit, Magma landing on Binance Alpha, and the broader alt-L1 risk-on move.

The top five also changed a lot over the quarter. As of May 1: NAVI at $163M, Suilend at $145M, Bluefin at $94M, Bucket Protocol at $61M, and Cetus at $33M. Ember appeared with $37M in Sui TVL. Scallop shrank to $24M.

That is more than a number update. It changes the structure of the chain. In its Q1 2026 update, Suilend said it ended the quarter with nearly 30% of all Sui DeFi TVL. By May 1, that share was closer to 7.5%. The old duopoly did not just narrow. It broke. There are now four protocols clustered between $60M and $165M, which means the credit layer looks competitive instead of concentrated. You can also see more stitching across protocols: joint campaigns, shared markets, liquidity routed across teams. That is not what an ecosystem looks like when one player owns the whole surface.

The app-fees-to-chain-fees ratio moved too. On May 1, chain fees ran around $18K per day while app fees were roughly $412K. That's about a 23x gap, down from 50x to 75x in December. The chain did not suddenly get expensive. It just got busier. The basic point from the last piece still holds: value accrues in apps, not in the base layer. The difference is that the base layer is no longer asleep.

The forward-looking pieces also stopped being "coming soon" and started shipping. Hashi launched on devnet in March 2026 according to Sui Monthly. Native WBTC went live in December through BitGo and LayerZero, with day-one integrations across the rails layer: Aftermath, Bluefin, Bucket, Cetus, Momentum, NAVI, Suilend, and STEAMM. xBTC from OKX has been live since June 2025. The BTCfi angle we flagged as optionality last time is now just infrastructure. There is a real list of protocols that accept BTC as collateral.

One institutional detail is easy to miss but worth calling out. Sui Group Holdings (Nasdaq: SUIG), the first publicly traded treasury company with SUI as its primary reserve asset, held 105M+ SUI on balance sheet and deepened its Bluefin partnership in Q4'25 while scaling institutional market-making infrastructure across the DeFi stack. SUIG is not a protocol. It is a public-equity vehicle built to accumulate and deploy SUI. That is a different kind of capital from grants or VC, and it has quietly become part of the first Sui's liquidity story.

What has not changed is the valuation problem. Sui still trades at a $32.6B FDV against annualized revenue that is still tiny in comparison. That multiple is pricing future execution, not current cash flow. Plenty of growth-stage L1s live in that gap. The difference now is that DeFi activity is starting to look large enough to justify why people are even having the conversation.

This is the legible Sui: standard metrics, standard narratives, standard risks. The Sui you get through the ETF, the one Grayscale writes research notes on, the one that trades on Binance.

On its own, it still does not explain what is actually happening on-chain.

The second Sui. The one nobody's looking at.

Buried in Grayscale's "Built for Scale: Why Sui Stands Out" report, last updated in July 2025, is the number crypto media mostly ignored: Sui MAUs went from roughly 10M to 40M+ in the first half of 2025, before "trailing off slightly." At the peak, Sui ranked #2 across all smart contract platforms by MAU. If you tracked Sui through DefiLlama, you missed that entirely. Once you look closer, the reason is obvious.

Those wallets were not sitting in NAVI and Suilend. The math does not work. You do not get tens of millions of active wallets out of a credit-core ecosystem with the TVL Sui had at the time. Those users were somewhere else.

FanTV is a TikTok-style creator platform. Per the official Sui blog in November 2024, it had already onboarded 5M+ wallets, around 1.5M MAU, and 10M+ transactions by then. Not visits. Wallets. Most came in through zkLogin, which means many users never had to think about private keys at all. They signed in with Google.

Recrd is another creator-monetization video app. Grayscale put it at 490K daily addresses at peak in 2025. Same basic idea: consumer-social mechanics on top, crypto rails underneath, and almost no requirement for the user to think of it as "using crypto."

XOCIETY is a Web3 game from a Mysten-affiliated studio that hit early access on Epic Games Store in December 2025. Per the Sui blog that month, it logged 36K+ active wallets, 15M+ on-chain actions, and 48% 14-day retention in its first weeks. The top-line numbers are smaller than FanTV's, but 48% D14 is a serious retention number by Web3 standards.

Slush Wallet is Mysten's flagship wallet, the rebrand of the old Sui Wallet plus Stashed. It has zkLogin through Google, Apple, Facebook, and Twitch, sponsored transactions so users do not need SUI for gas, and Slush Links so assets can be sent through a URL instead of a wallet address. This is the rail layer the rest runs on. Recrd, FanTV, and XOCIETY all connect into Slush, and a lot of their users enter through it. We could not find a clean public user number for Slush itself, but the product role is not hard to map.

This second Sui lives on the same chain, but in categories DeFi analytics barely touches. There is no TVL because it is not lending. Fees stay low because many transactions are sponsored. There is not much "liquidity" in the usual DeFi sense. But on retention, active addresses, and transaction activity at peak, it got surprisingly close to Solana on a few consumer-facing metrics.

Where the two networks start touching

For a while, these two Sui's mostly ran in parallel. DeFi teams built DeFi. Consumer teams built consumer apps. Bluefin shipped perps for desktop traders. Recrd shipped a creator app for mobile users. Different products, different users, not much reason to overlap.

In 2026, that started to change. Four examples stand out.

Vera. Bluefin Labs' mobile self-custody wallet launched on February 3, 2026 on iOS and Android. It uses Privy social login, shows net worth across NAVI and Suilend positions, supports one-click trading, and includes sui:pay QR. Since launch, the team has been shipping fast: native Earn integration, GOLD-PERP with 20x leverage, Current integration, v1.7, Turkish, Chinese, and Korean localization, plus price alerts. The important part is not the feature list. It is the fact that one of Sui's biggest DeFi teams is building its own retail-facing mobile surface and pulling other protocols onto it.

RedotPay. A Hong Kong payments fintech that was doing $10B in annualized payment volume as of November 2025, according to the Sui blog in April 2026, is now wired into native USDC on Sui. This matters because RedotPay is one of the first card providers actually using native USDC rather than bridged versions. Its users can spend USDC on Sui at 130 million Visa merchants through Apple Pay and Google Pay without having to know or care what chain is underneath. That is the same trick FanTV pulled in social form: crypto onboarding that does not feel like crypto. Just this time it happens through payments.

USDsui. The native digital dollar hit mainnet in March 2026. The detail many people miss is that USDsui is issued by Stablecoin, a Stripe company, through Stripe's stablecoin issuance infrastructure. In other words, it was designed from day one to look enterprise-grade and compliance-ready, not like a generic ecosystem stablecoin. Per the March Sui Monthly, stablecoin transfers on Sui crossed $1T in March 2026. That number looks absurd next to $1.9B in DeFi TVL until you accept that most of the transfer flow is probably not DeFi flow. It is payments, transfers, app-level settlement, and other movement inside the second Sui. In that frame, USDsui is less the unit of account for DeFi and more the monetary base for the consumer side of the chain. Suilend is already offering up to 18% APR on USDsui deposits, which is exactly the kind of product you only get once those rails exist.

Current. The most aggressive protocol build of the quarter. Launched in late March 2026, backed by Sui Foundation, OKX Ventures, comma3vc, Bluefin, and Cetus, it crossed $20M in total deposits within a month. Whale flow showed up early too, including $700K USDC moved from OKX directly into Current on May 2.

Two things matter here:

• First, Current shipped full formal verification on day one, with 300+ specs verified by Asymptotic, well before the $150M TVL level where the Foundation typically starts demanding it.

• Second, the product itself sits directly on top of USDsui: multiply lending on USDC and USDsui with up to 4.8x leverage in one flash-looped transaction, generating up to roughly 60% APR.

It is already live on Vera, which means the full second-Sui stack already works end to end. When Aftermath was hit on April 29, Current paused afSui supply on its lending market within hours and kept everything else running. Clean response, no user funds affected.

These four products showing up at the same time is not random. Mysten and the Foundation are clearly trying to stitch the two Sui's together. One side gives DeFi depth. The other side gives the chain actual users. If either side is missing, the story stalls.

The chain is wiring itself together

There is another convergence layer underneath all this, and it is easy to miss because it sits between protocols rather than between apps. Sui's DeFi stack is starting to compose with itself.

Bluefin and Ember launched a joint eEARN campaign on Galxe. Suilend now runs USDB markets via Bucket and eTHIRD markets via Ember. Slush integrated with DeepBook for boosted points and Walrus for vault rewards. Bluefin shipped Bluefin Liquidity Network and Bluefin Whitelabel, turning its perps stack into infrastructure other teams can build on.

The important part is that competition has not produced fragmentation. It has produced composition. That is part of why depth on Sui is rebuilding faster than raw TVL alone would suggest.

One primitive deserves its own callout: verifiable execution through Walrus. Since April 13, every Bluefin action, from order creation to cancellation to matching, produces a cryptographic attestation published in real time.

That is a different posture for a perps DEX. Not just non-custodial, but auditable all the way through. Bluefin frames it as a foundation for Bluefin Liquidity Network and Vera-powered RWA perps. For institutional or regulated counterparties, that changes the trust model. The protocol does not just ask to be trusted. It proves what it did.

Why this matters

Most L1s have spent the past few years picking a lane. Solana leaned into degen trading and memecoins, then payments through Solana Pay. Base anchored itself to Coinbase and pushed into consumer through social products. Aptos is still looking for its defining category. Ethereum became the institutional club, while much of the experimentation moved to L2s.

Sui has one unusual advantage: the Diem team. These are people who tried to ship a global consumer stablecoin inside Facebook years ago and got stopped by regulators, not by technology. They came out of Meta with consumer-payments instincts that most L1 founding teams simply do not have. Plenty of chains know how to build for crypto-native users. Very few teams have firsthand experience trying to build for millions of ordinary people.

You can still hear that in how they frame the product. Adeniyi Abiodun keeps coming back to the same point: internet money transfer fees go to zero. The official Sui line is close to that too: make payments free, and monetize the more complex financial activity built on top. That is not marketing fluff. It is the business model. Free transfers at the bottom. Higher-value DeFi and financial products at the top. A consumer base moving between the two.

• The first Sui is what they had to build to get onto investor screens and into DeFi dashboards. The second Sui is closer to what they actually know how to build.

• The two are only starting to converge now because the chain finally has the right primitives. zkLogin removed the seed phrase problem. Sponsored transactions removed the gas problem. Native USDC and USDsui gave Sui a real unit of account. Yield-bearing RWA stables like rcUSD from R25 and USDY from Ondo gave the ecosystem something you can actually pitch to a retail user. Walrus, Seal, and Nautilus provide the storage, encryption, and compute layer consumer apps need.

Put those pieces together and the pitch becomes much simpler: a seedless wallet, gasless transactions, a native dollar, and assets that can actually generate yield. In theory, that is enough to build a neobank on top of a blockchain without making it feel like a blockchain product.

That is the second Sui thesis in one sentence.

Where it breaks

The clean version of that thesis does not arrive without friction.

• Concentration around Mysten, at least on the consumer side. A meaningful chunk of the consumer surface sits inside Mysten's orbit. Slush is Mysten Labs. Vera is Bluefin Labs, which is tightly connected to that broader network. XOCIETY is Mysten-affiliated. SuiNS is Mysten. That gives the product layer a consistent feel, but it also concentrates narrative and operating risk. If Mysten stumbles, the second Sui takes the hit all at once. The DeFi side looks more distributed: NAVI, Bucket, Cetus, Scallop, Magma, Aftermath, and Suilend are separate teams. So this is not a chain-wide concentration problem in the same way. But if Sui wants to be known for consumer crypto, the consumer side is the one that matters most.

• Regulation. The moment Sui starts to look like a real payments network with real consumer flow, it inherits regulatory exposure across every jurisdiction where people use it. RedotPay already operates as a regulated fintech in Hong Kong. USDsui will eventually run into frameworks like MiCA and the GENIUS Act. None of that kills the thesis. It does slow it down. Every regulatory cycle costs time.

• Security. No L1 at real scale escapes incidents, and Sui has not escaped them either. What matters more is what kind of incidents they were and how the ecosystem responded.

  The headline list is familiar by now. Cetus lost $223M in May 2025 and relaunched with a recovery plan within weeks. Haedal had $4.9M in haSUI caught in the same exploit and users were made whole. Volo Protocol lost about $3.5M from its WBTC, XAUm, and USDC vaults on April 22, 2026 in what looks like an admin-key compromise; Volo froze the affected vaults quickly, recovered about $500K, and said the team would absorb the loss directly. Scallop lost around $140K on April 27 through a deprecated V2 contract.

  The Aftermath exploit on April 29, 2026 is probably the cleanest case study. Aftermath lost $1,139,927 through a signed integer bug in AF Perps integrator accounting. A malicious user could create an integrator with a negative taker fee, credit that to a new account, and drain from the vault. The bug had been introduced on August 29, 2025 and was later audited by OtterSec in November 2025 without being caught. The attacker funded the wallet with just 405 SUI, made 17 attempts in 36 minutes, 11 of them successful, then laundered through Binance, KuCoin, HTX, and HitBTC.

  The response matters more than the exploit path. Aftermath paused immediately, coordinated tracing with zeroShadow, Seal, Blockaid, OtterSec, the Sui Foundation, and Mysten Labs, pushed a patch, and made users whole within roughly 72 hours. AF Perps is relaunching with an extra audit from a separate firm and upgraded AI-security workflows. And, importantly, Aftermath explicitly said this was not a Move-language issue.

• That is the common thread across the major incidents in this stretch. None of the April 2026 exploits were Move-language vulnerabilities. Aftermath was application logic. Volo was key management. Scallop involved a deprecated contract. The attack surface was the usual one: logic, keys, operators, process. Not the core resource model.

Zoom out, and the signal gets clearer. Across 2025 and 2026, Sui has had several high-profile incidents and no major case where users were left holding the bag at the protocol level. That says more than the raw exploit count. It points to an ecosystem with real coordination capacity: security partners, recovery mechanisms, foundation support, fast pause controls, and a base layer that has held up even when apps around it did not. The six-hour mainnet stall in January 2026 followed the same basic pattern: transparent postmortem, fast root-cause disclosure, no state corruption.

For consumer adoption, that is the point that matters. Retail users do not judge incidents the same way crypto Twitter does. They care whether the system holds together when something goes wrong. So far, Sui mostly has.

What this means in practice

If you only watch Sui through DefiLlama, you are going to keep missing the actual story. The standard Ethereum-style dashboard view does not capture what is happening in the consumer layer.

The signals that matter over the next quarter are different:

• Whether we get a fresh public MAU snapshot. The 40M number is locked in as a mid-2025 milestone. A new Foundation or Grayscale update would give the first clean read on where the second Sui stands now.

• How much of Bluefin volume starts running through Vera instead of the web app. If Vera gets to 30%+ quickly, the model works: DeFi teams can build their own consumer front ends and pull users directly.

• RedotPay's USDC-on-Sui share. If even a low-single-digit percentage of that $10B annualized payment volume moves through Sui rails, the payments thesis stops being theoretical.

• A breakdown of the $1T+ stablecoin transfer number. If the Foundation ever publishes payments vs DeFi vs exchange flows, one chart will either confirm the consumer-rail thesis or puncture it.

• XOCIETY and FanTV retention six months out. Web3 social and gaming apps usually leak users fast. 48% D14 is a good start. D180 is where the story gets real.

• Subsidy burn. How much the Foundation is actually spending to sponsor gas for new users. Nobody publishes that cleanly, but sooner or later it shows up somewhere.

The first Sui is measured in dollars. The second Sui is measured in people. Most analysis still describes the first one because the second is messier, harder to measure, and easier to dismiss.

If the two actually converge, Sui ends up with something no other L1 really has today: a monetary layer and a consumer layer inside the same loop. If they do not, then Sui is still a real DeFi chain, just one with a side consumer story that never fully compounds.

The last piece ended with the idea that Sui had found a more interesting game than the TPS race. The better version of that line now is this: Sui is playing two games at once. The question for the next few quarters is not whether one side wins on its own. It is whether the Foundation can keep both alive long enough for the overlap to become structural rather than just thematic.

The pieces are there: Stripe-grade stablecoin issuance, seedless onboarding, a consumer surface that already hit tens of millions of users at peak, a DeFi base that has rebuilt to real size, and a security response layer that looks more mature than the headlines suggest.

What is still unproven is the hardest part. No L1 has really shown that it can run the institutional surface and the consumer surface inside the same product loop at scale.

That is the bet underneath Sui.

Whether it lands is still open. But it is one of the few genuinely differentiated open questions left in the L1 market, and it deserves to be analyzed on its own terms rather than forced into the same dashboard template we use for everything else.

Sources - DeFi metrics: DefiLlama Sui chain, live snapshot May 1, 2026. Consumer and ecosystem: Grayscale "Built for Scale" (updated July 2025), Messari State of Sui Q4 2025, Sui blog (FanTV Nov 2024, XOCIETY Dec 2025, RedotPay Apr 2026, Sui Monthly Mar 2026), USDsui via Stripe - CoinDesk Nov 2025. Protocol-level updates: Suilend Q1 2026, Aftermath full postmortem (Apr 30, 2026), Volo postmortem (Apr 21, 2026), Current formal verification, Current $20M deposits milestone, Asymptotic verification report, Bluefin x Walrus verifiable execution, Vera launch, Sui mainnet outage post (Jan 2026).