uSui moved two non-price pillars forward today: a multi-year security expansion for its ecosystem and a firm timeline to retire JSON-RPC in favor of GraphQL-based and gRPC data access. The security program builds on an earlier $10 million commitment, while the data roadmap enters the official deprecation phase ahead of a full JSON-RPC shutdown in April 2026.
Security push enters rollout
The Sui Foundation said it is expanding defenses across four areas: end-user protection, ecosystem-wide visibility, protocol-level hardening, and secure development practices. The effort targets the kinds of abuse that typically evade one-off audits, emphasizing continuous monitoring and shared tooling for the whole network. The foundation framed the work as a multi-year program rather than a one-time grant.
The announcement builds on a $10 million allocation the project set aside earlier this year after high-profile exploits in the broader ecosystem. By tying that funding to concrete deliverables—such as simulation flows, malicious dApp detection, and incident response playbooks—the program aims to raise the baseline of safety for users and builders. The stated goal is to convert ad-hoc fixes into repeatable, preventative controls.
Sui also pointed readers to its standing security resources, which centralize audit reports and disclosure pathways. That hub remains the reference point for reporting issues and tracking remediation updates as the expansion rolls out. Today’s note reinforces that process rather than replacing it.
Data stack shifts: GraphQL RPC, Indexer, and gRPC
On the infrastructure side, Sui’s public beta for GraphQL RPC and a General-purpose Indexer continues to mature, giving developers a structured way to query on-chain data without bespoke indexing. The foundation describes the combo as a richer data layer designed for scale and cleaner schema evolution, which aligns with a long-running “RPC 2.0” plan.
In parallel, the network confirmed a clear timeline: JSON-RPC enters deprecation in September–October 2025, GraphQL RPC and the Indexer target general availability by December 2025, and JSON-RPC shuts down entirely in April 2026. The documentation urges production teams to begin migration now to avoid last-minute cutovers.
Community threads on the project’s GitHub reiterate that feedback from the beta will shape the GA release. Engineers are being asked to test real queries, validate pagination and cursoring, and surface schema gaps early. That feedback loop is meant to reduce breaking changes once GraphQL RPC becomes the default path.
What changes for builders and users
For teams, the near-term change is practical. Run GraphQL RPC beside current JSON-RPC flows. Check parity on every critical path. Treat the deprecation window as production time. Do not wait for a lab phase. The shift moves Sui from JSON-RPC to typed, queryable interfaces.
For users, security gains should feel quiet. Fewer incidents. Clearer warnings. Broader visibility across the ecosystem. Shared defense tools detect patterns earlier. They also contain issues faster. The goal is a higher safety floor, not new UI.
Taken together, Sui moves beyond price talk. It focuses on operations. Sui invests in security as a system. It modernizes the data plane. It also sets hard deadlines. Next up: GraphQL RPC and Indexer GA by December 2025. Final step: JSON-RPC shutdown in April 2026.