Move security review
Move is a resource-oriented language where coins and objects carry ownership rules enforced by the compiler. Hackerbane audits Move modules on Aptos and Sui, focusing on the authorization logic the language leaves to you.
What we review
Move makes many token bugs impossible. It does not make authorization bugs disappear. Abilities, friend modules, and object models still decide who can withdraw, and those rules are the audit.
- Resources that can be created twice or dropped when they should persist.
- Entry functions that trust a caller the module never verified.
- Object and fungible-asset paths that bypass legacy coin rules.
- Upgrade policies and the signer permitted to publish.
- Services holding the account that owns the module or the coins.
Aptos and Sui
Aptos and Sui share the language and differ in the object model. We audit both, and the plan names which chain's semantics apply so findings translate directly to your deployment.
Next step
Request an audit
Share your Move packages, the chain you deploy to, and your timeline – we'll propose an audit plan and estimate.