Ecosystems
Security audit for the Aptos ecosystem
CertiK is the first security auditor for Aptos blockchain. CertiK's Security Suite combines curated on-chain data analysis, cutting-edge AI technology, and advanced formal verification processes to provide the highest and most comprehensive standard of Web3 security.
Skynet leaderboard
Aptos is a novel Layer 1 blockchain that aims to provide safety, scalability, reliability and upgradeability. Aptos is developed by many of the same engineers who worked on Diem, Facebook's now-defunct foray into cryptocurrency payments. Aptos integrates the Rust-based Move programming language for quick and secure transaction execution.
Aptos- Skynet Score
- 95.16
- Market cap
- $563M
Hyperion- Skynet Score
- 87.81
- Market cap
- $2.19M
Balance.Fun- Skynet Score
- 86.76
- Market cap
- $1.57M
FoxWallet- Skynet Score
- 86.58
Propbase- Skynet Score
- 82.91
- Market cap
- $2.92M
CheckDot- Skynet Score
- 81.91
- Market cap
- $168K
Method
How do Aptos project audits work?
The audit process kicks off with a detailed analysis of a project's entire codebase.
On occasion and when deemed necessary, CertiK reserves the right to conduct a Team Verification (KYC) check on a project it suspects to be high risk.
Source code submission
Scoping & quote
Security analysis
Remediation guidance
Final report delivery
Offerings
What else we offer
KYC verification
Through a rigorous process that uses both AI and human verification, we verify the identities of your team to reassure users that their investment is in safe hands.Skynet
Skynet generates real-time insights of on-chain activity, allowing project teams to be alerted of any suspicious events and saving precious time in anticipating and responding to attack.SkyInsights
SkyInsights is a powerful crypto compliance and wallet screening platform. The comprehensive risk management system analyzes and flags wallet address and transaction risks.Bug bounties
CertiK's bug bounty programs allow projects to utilize the intelligence of ethical hackers to further derisk their code from additional vulnerabilities.
Resources
Learn more from our resources
We have published multiple research articles covering the Aptos ecosystem's evolution and security considerations.
Ecosystem analysisAptos Confidential APT: Verifiable Encrypted Transfers on MainnetAptos Confidential APT brings encrypted balances and transfers to Aptos mainnet while using zero-knowledge proofs, governance controls, and optional auditor access to keep state transitions verifiable.
Technical insightsMove for Solidity Developers IV: Cross-Contract CallIn this article, we delve into the concept of cross-contract calls and examine the distinctions between Solidity and Move contracts in this area. We will assess the mechanisms and security of executing cross-contract calls in Move, aiding developers in better comprehending how to manage contract interactions within the Move environment.
Technical insightsMove for Solidity Developers: Token Standard II — Advanced Fungible Token ExtensionsBuilding on our previous analysis of basic token functionalities across Solidity, Sui Move, and Aptos Move, this report focuses on the advanced features of fungible tokens. We specifically explore how these platforms implement fungible token standards, with extensions such as whitelisting/blacklisting, fee mechanisms, pausing, and whitelisting/blacklisting.
Move for Solidity Developers: Token Standard IIn this post, we discuss how basic token standards are implemented across these platforms, focusing solely on minting, burning, and transferring functionalities. Advanced features such as pausing, whitelisting, and freezing will be discussed in detail in a subsequent series.
Technical insightsMove for Solidity Developers I: Storage and Access Control“Move for Solidity Developers” is a series created for experienced Solidity developers who already know a bit about Move. It helps you shift from writing Solidity contracts to developing on Move-based blockchains, such as Aptos and Sui. In this first installment, we’ll explore how Move’s approach to state storage and access control differs from the Solidity/EVM model. By drawing comparisons and analogies, we aim to make these new concepts feel familiar.
Technical insightsWhy Memory-Safe Blockchain RPC Nodes are Not Panic-Free CertiK's Skyfall team recently uncovered several vulnerabilities in Rust-based RPC nodes in various blockchains including Aptos, StarCoin, and Sui. As RPC nodes are pivotal infrastructure components linking dApps with underlying Blockchains, their robustness is essential for seamless operations.