---
id: 5236
title: "Move Smart Contract Access Control: How Capabilities Leak and Authorization Fails"
source_domain: hackenproof.com
source_url: "https://hackenproof.com/blog/move-smart-contract-access-control"
published_at: "2026-06-05T06:16:57Z"
tags: ["web3", "smart-contracts", "access-control", "sui", "move", "capabilities", "typus-finance"]
phying_url: "https://phying.com/item/5236"
lang: en
---

# Move Smart Contract Access Control: How Capabilities Leak and Authorization Fails

## Summary

Part 2 of the Move series: capability leaks and broken signer checks are where Sui/Aptos exploits live — anchored on Typus Finance's $3.44M loss from one missing assert!, plus an audit checklist.

## Intelligence Metadata

- **Sources:** hackenproof.com
- **Published:** 2026-06-05T06:16:57Z
- **Original:** https://hackenproof.com/blog/move-smart-contract-access-control
- **Phying News:** https://phying.com/item/5236