@MoveBit_

Sub-brand of @0xbitslab. A security team focused on the Move ecosystem, building the standard and delivering security audits for the Move ecosystem.

 Audits ✉️ [email protected]
movebit.xyz/
Joined August 2022
  • Tweets770
  • Following344
  • Followers17.7K
154Media
Why Upgrading a Package Does Not Eliminate Legacy Security Risks?

Sui Move Security: Why Legacy Packages Can Still Put Shared Objects at Risk After an Upgrade

The BlueMove DEX Exploit: Cross-Version Reserve Desynchronization and LP Inflation

Article · @MoveBit_
1
1
276
11,348
A single missing access control check can put an entire DeFi protocol at risk on @SuiNetwork, so every privileged operation involving shared objects deserves careful security review.

Sui Shared Object Security: How Access Control Flaws Put DeFi Protocols at Risk

As more DeFi protocols are deployed on Sui, Shared Objects have become a core component for managing liquidity pools, lending markets, and critical protocol states.

Article · @MoveBit_
2
1
1
139
8,399
Stable interfaces are useful. Stable security assumptions matter more.

Stable ABI, Changing Trust Root: How the Pyth Core Upgrade Redefines Sui Oracle Security

On August 26, Pyth Core introduced a major infrastructure upgrade. The new architecture preserves compatibility at the Hermes API and on-chain ABI layers, but the underlying verification model changes…

Article · @MoveBit_
1
3
3,212
The Security Model Has Changed, Not Disappeared.

Can Aptos Move Really Avoid Reentrancy? What Function Values Changed

For a long time, many Move developers have operated under a simple assumption: reentrancy is primarily a Solidity problem, and Move largely avoids it by design.

Article · @MoveBit_
2
5
13,130
A secure destination-chain contract can still receive incorrect state from off-chain relayers.

The XRPL–Coreum Bridge Vulnerability: How the Wrong Payment Became Valid Deposit Evidence

The issue in the XRPL–Coreum bridge incident appears straightforward: when identifying inbound XRPL transfers, the relayer failed to verify whether the Payment Destination was the bridge address.

Article · @MoveBit_
1
2
5
7,298

Beyond Seed Phrases: The Hidden Cryptographic Risks Behind Wallet Security

In digital asset security, “whoever controls the private key controls the assets” has long been treated as an industry-wide principle.

Article · @MoveBit_
1
2
3
5,914
Load more