Security at Every Layer

Aptos Foundation funds and facilitates security across the Aptos ecosystem. This includes supporting independent protocol audits and real-time threat monitoring to subsidized tooling and audit grants for projects building on Aptos.

Report & Respond

Found a vulnerability, spotted a scam, or dealing with an active incident? Start here.

HackenProof Submit bug reports and earn bounties through Aptos’ responsible disclosure program.

ChainAbuse Report scams, fraud, and stolen funds.

Seal 911 24/7 emergency hotline connecting you with vetted security researchers during active incidents.

Your Security Stack

The auditors, monitoring tools, and programs available to projects building on Aptos.

Audits & Verification Aptos Foundation retains and subsidizes a roster of security firms. Projects building on Aptos can access these resources directly, in some cases at reduced or no cost through our Security Credits program.

Areta Market Auditor marketplace where security-audit RFPs are submitted and bid upon by foundation-vetted auditors

OtterSec Primary security partner since 2022. Provides continuous, embedded security support across the core protocol and ecosystem.

Hacken Smart contract and protocol audits across the Aptos ecosystem.

Zellic Security assessments for protocol and smart contract code.

zkSecurity Zero-knowledge and cryptographic primitive audits.

MoveBit Move ecosystem security specialists. Formal verification and dev tooling for Aptos.

Informal Systems Formal verification and distributed systems research

Plainshift Language-agnostic smart contract audits including MoveVM, EVM and Solana.

Adevar Labs Manual-first smart contract and protocol audits across Rust, Solidity, and Move.

Sherlock Audit marketplace with coverage-backed smart contract reviews.

Shielder Penetration testing and red teaming.

Threat Prevention Aptos Foundation funds proactive threat detection, scam takedowns, and real-time monitoring across the ecosystem. Subsidized licenses are available for projects operating critical infrastructure on Aptos.

Doppel Handles impersonation attacks, cloned websites, and brand abuse. Takedowns of malicious sites and social accounts.

Hypernative Real-time threat detection and risk monitoring. Subsidized licenses for critical infrastructure partners.

GuardRail Ecosystem monitoring and security guardrails. Subsidized licenses for critical infrastructure partners.

Build Securely Guidelines and tools for writing safe Move code on Aptos.

Move Security Guidelines Best practices for writing safe, auditable Move smart contracts.

Bug Bounty Program Help secure the network and get rewarded.

Move Security Challenge Interactive, hands-on security challenges for Move developers.

Standards & Coalitions

Aptos Foundation has signed the Open Protocol Security Coalition (OPSeC) pledge, a cybersecurity coalition convened by the DeFi Education Fund with Asymmetric Research and SEAL.

Read the pledge

Security Credits

Aptos Foundation funds and coordinates independent security audits for projects building on Aptos with Security Credits. Matches teams with vetted audit firms from the above roster. Apply for Security Credits

public fun ignite_chain_reaction(): bool {
    // Spark innovation
    // Fuel momentum
    // Chain it with Aptos
    return true;
}


public fun deploy_with_confidence(): bool {
    // Test it
    // Ship it
    // Trust Aptos to scale it
    return true;
}


public fun empower_creators_on_aptos(): bool {
    // Tools for builders
    // Freedom for creators
    // Power by Aptos
    return true;
}


public fun redefine_possibilities(): bool {
    // Break limits
    // Build freely
    // Launch globally on Aptos
    return true;
}


public fun grow_without_limits(): bool {
    // No ceilings
    // No bottlenecks
    // Just Aptos performance
    return true;
}


public fun connect_across_chains(): bool {
    // Interoperability
    // Security
    // Aptos at the core
    return true;
}


public fun code_scale_repeat(): bool {
    // Code smart
    // Scale fast
    // Repeat with Aptos
    return true;
}


public fun onboard_the_next_billion(): bool {
    // Real users
    // Real speed
    // Onboard the world with Aptos
    return true;
}


public fun ignite_chain_reaction(): bool {
    // Spark innovation
    // Fuel momentum
    // Chain it with Aptos
    return true;
}


public fun deploy_with_confidence(): bool {
    // Test it
    // Ship it
    // Trust Aptos to scale it
    return true;
}


public fun empower_creators_on_aptos(): bool {
    // Tools for builders
    // Freedom for creators
    // Power by Aptos
    return true;
}


public fun redefine_possibilities(): bool {
    // Break limits
    // Build freely
    // Launch globally on Aptos
    return true;
}


public fun grow_without_limits(): bool {
    // No ceilings
    // No bottlenecks
    // Just Aptos performance
    return true;
}


public fun connect_across_chains(): bool {
    // Interoperability
    // Security
    // Aptos at the core
    return true;
}

public fun ignite_chain_reaction(): bool {
    // Spark innovation
    // Fuel momentum
    // Chain it with Aptos
    return true;
}


public fun deploy_with_confidence(): bool {
    // Test it
    // Ship it
    // Trust Aptos to scale it
    return true;
}


public fun empower_creators_on_aptos(): bool {
    // Tools for builders
    // Freedom for creators
    // Power by Aptos
    return true;
}

public fun ignite_chain_reaction(): bool {
    // Spark innovation
    // Fuel momentum
    // Chain it with Aptos
    return true;
}


public fun deploy_with_confidence(): bool {
    // Test it
    // Ship it
    // Trust Aptos to scale it
    return true;
}


public fun empower_creators_on_aptos(): bool {
    // Tools for builders
    // Freedom for creators
    // Power by Aptos
    return true;
}


public fun redefine_possibilities(): bool {
    // Break limits
    // Build freely
    // Launch globally on Aptos
    return true;
}


public fun grow_without_limits(): bool {
    // No ceilings
    // No bottlenecks
    // Just Aptos performance
    return true;
}


public fun connect_across_chains(): bool {
    // Interoperability
    // Security
    // Aptos at the core
    return true;
}


public fun code_scale_repeat(): bool {
    // Code smart
    // Scale fast
    // Repeat with Aptos
    return true;
}


public fun onboard_the_next_billion(): bool {
    // Real users
    // Real speed
    // Onboard the world with Aptos
    return true;
}


public fun ignite_chain_reaction(): bool {
    // Spark innovation
    // Fuel momentum
    // Chain it with Aptos
    return true;
}


public fun deploy_with_confidence(): bool {
    // Test it
    // Ship it
    // Trust Aptos to scale it
    return true;
}


public fun empower_creators_on_aptos(): bool {
    // Tools for builders
    // Freedom for creators
    // Power by Aptos
    return true;
}


public fun redefine_possibilities(): bool {
    // Break limits
    // Build freely
    // Launch globally on Aptos
    return true;
}


public fun grow_without_limits(): bool {
    // No ceilings
    // No bottlenecks
    // Just Aptos performance
    return true;
}


public fun connect_across_chains(): bool {
    // Interoperability
    // Security
    // Aptos at the core
    return true;
}

Questions for the team?

Email security[@]aptosfoundation[.]org

Do not use this email address for bug bounties. Please raise a support ticket with Hackenproof instead.