Moving the Immovables: Lessons Learned From Our Aptos Smart Contract Audit

This blog post examines Move language security features and common "immovable" legacy programming patterns—such as custom signed-integer types and mistaken resource copying—that can reintroduce vulnerabilities into Move-based smart contracts; it demonstrates using the Move Prover to detect violations and provides recommended remediations and safer design patterns for developers.