Aptos security review
Aptos is a layer-1 blockchain built on the Move language, where coins and objects are typed resources with rules about who can hold or move them. Hackerbane audits Aptos Move modules and the accounts that publish and upgrade them.
What we review
Move prevents whole classes of token bugs at the language level. It does not prevent an entry function from trusting the wrong signer, and the object and fungible-asset standards added new paths. We review those alongside the legacy coin module.
- Abilities and friend modules that widen withdraw permissions.
- Object ownership versus the account you expect to be in control.
- Publish and upgrade permissions.
- Automation that operates the account owning the resource.
Move across chains
Our Move page covers the language in depth. This page is about Aptos specifically: the account model, publish permissions, and the object standard. The overlap is real, and the publish account is the part most teams under-scope.
Next step
Request an audit
Share your Move packages, the modules that hold value, and your timeline – we'll propose an audit plan and estimate.