Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Move Smart Contract Access Control: How Capabilities Leak and Authorization Fails

hackenproof.com | blog | #web3 | #smart-contracts | #access-control | #sui | #move | #capabilities | #typus-finance

Summary

Part 2 of the Move series: capability leaks and broken signer checks are where Sui/Aptos exploits live — anchored on Typus Finance's $3.44M loss from one missing assert!, plus an audit checklist.
Published
Collected

original ↗

Related coverage

  1. 1inch Bug Bounty Report: Aqua Edition, H1 2026 (hackenproof.com)
  2. HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry (hackenproof.com)
  3. HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a Course for the Blockchain Industry (hackenproof.com)
  4. Move Smart Contract Arithmetic: How Precision Fails and Economics Break (hackenproof.com)
  5. HackenProof and Sui Foundation Introduce the Security Expansion Program for Sui Builders (hackenproof.com)
  6. Move Smart Contract Security Guide: What the Language Guarantees and What It Doesn’t (hackenproof.com)

back