PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hitchhiker’s guide to Aptos fungible assets

osec.io | research | #smart-contracts | #audit | #blockchain | #move | #aptos | #fungible-assets
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

OtterSec deep dive into Aptos fungible assets: how the new model addresses legacy Coin flaws such as freeze/burn bypass, plus issues found and fixed in pre-release audits.
Published
Collected

Related coverage

blog · osec.io
Move: an auditor’s introduction
OtterSec's auditor-focused introduction to Move: how its type system and resource model enable safer programming, anti-patterns to avoid, and design tips for safer protocols.
blog · hackenproof.com
Aptos Move Smart Contract Security: How Object Refs Leak and Global Storage Breaks
Unchecked borrow_global_mut, leaked object refs, and Block-STM races break Aptos protocols. See the $25.5M Thala exploit and an Aptos/Supra audit checklist.
blog · hackenproof.com
How to hack everiToken?
An introduction to everiToken, a token-based public chain that replaces smart contracts with 'safe contracts' and BFT-DPOS consensus, plus node setup, API testing, and a node vulnerability.
blog · osec.io
Cosmos security: an otter’s guide
OtterSec's Cosmos SDK security guide: chain-halting infinite loops, map determinism, AnteHandler missteps and storage key collisions, with real-world examples and hardening advice.
blog · osec.io
The Move Prover: a guide
OtterSec's practical guide to the Move Prover: how formal verification works, the pipeline from Move Specification Language to Boogie and Z3, and a real-world case study.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry
HackenProof and Hack The Box turn blockchain security into a gamified CTF track with weekly challenges and a ten-quest series, giving top performers a path into the bug bounty ecosystem.
Back