On-chain Security Calls for New Standards
The Problems We See: Module Duplication and Lack of Standards
After several recent on-chain security incidents in the crypto industry, the entire Web3 community has once again turned its direct attention to the old topic of "infrastructure security." Although technology continues to advance, we cannot escape a reality: without unified standards and auditing mechanisms, any "reinventing the wheel" foundational module could become a potential source of risk.
Move is a language born for resources and security, and Aptos consistently provides developers with an excellent chain-level experience through parallel execution and native upgrade capabilities. However, in our collaborations with numerous Aptos projects, we have repeatedly identified a key shortcoming: the ecosystem lacks a reliable, reusable, and auditable public foundational module library. Many teams implement and maintain their own solutions for access control, upgrade systems, basic utility functions, etc., which not only leads to inefficiency but also undermines the overall security of chain-level applications.
Our Decision to Act: Movemaker and alcove Jointly Initiate
To address this foundational shortcoming, the official Aptos Chinese community Movemaker has joined forces with alcove, the first Move ecosystem developer organization in Asia, to jointly launch a structured open-source initiative—Aptos Move Security and General Purpose Base Library Initiative.
This initiative aims to provide a set of rigorously audited, secure, reliable, modular, and easy-to-use standard components for Aptos smart contract development, thereby accelerating the development and maturity of the Aptos ecosystem. Movemaker has long served the Aptos Chinese developer community and understands the actual needs of local developers; alcove gathers a group of technical members with experience in Move foundational development, auditing, and toolchain construction, laying a solid foundation for the research and governance of this foundational library.
📌 The proposal has been launched on GitHub and is now open for co-construction by all Aptos developers. Welcome to click to see details and submit PRs: https://github.com/ALCOVE-LAB/aptos-movekit
Next, we will introduce the goals, mechanisms, and participation methods of this initiative—hoping you are not just a reader but also a collaborator.
Our Innovative Redesign Based on Aptos
This initiative is a long-term, systematic open-source project aimed at the entire Aptos development ecosystem. We are gathering resources, standardizing processes, and building mechanisms, with the sole purpose of creating a "gold standard library" for Aptos, akin to OpenZeppelin for EVM, that is widely adopted, trusted, and audited.
In the EVM ecosystem, OpenZeppelin Contracts have been proven to effectively enhance security, accelerate development efficiency, and lower barriers to entry. However, we are well aware that Move and Aptos are not mirrors of EVM; they have fundamental differences in language paradigms, account models, state management, upgrade mechanisms, and execution architectures. Because of this, Move's resource-oriented model, bytecode verifier, formal verification support, and Aptos's parallel execution and native package upgrade mechanisms provide us with an excellent opportunity to build a foundational library with higher security and stronger performance.
Below is the complete proposal content for this plan. We invite every Builder working on Aptos to participate deeply and encourage you to spread this vision of infrastructure.
What We Are Preparing: From Funding, Organization to Mechanism
Initial Funding: Movemaker provides the first round of $200,000 funding for:
Development and maintenance of core modules.
Professional security audit fees.
Developer incentives and bounty programs.
Documentation writing and community operation support.
Necessary toolchain and infrastructure construction.
Development Organization: alcove will coordinate community development resources as the project lead, responsible for managing processes, technical support, security audits, etc.;
Multi-party Resource Support: Various project parties, independent developers, and security audit companies will participate in the research, testing, and review of foundational modules in phases;
Governance Mechanism: PR review, testing validation, Move Prover verification, pre-audit, and bounty incentives will be transparently executed throughout the process.
What We Aim to Build: The Infrastructure Base of the Move Ecosystem
Build a Core Base Library: Develop a set of Move modules covering core functions such as access control, upgrade management tools, DeFi modules, and general utilities.
Enhance Ecosystem Security: Utilize the inherent security features of the Move language (such as reentrancy prevention and strong typing) combined with rigorous testing, formal verification, and independent security audits to ensure the highest security of the library.
Promote Developer Adoption: By providing high-quality, easy-to-understand documentation, tutorials, and examples, we aim to lower the learning curve of the Move language and attract more developers into the Aptos ecosystem.
Establish a Community Co-construction Model: Create an open, collaborative development process that encourages project teams, independent developers, and security audit companies to participate together, ensuring the quality, relevance, and sustainability of the library.
Accelerate Ecosystem Development: Provide a reliable foundation for Aptos dApp developers, accelerate innovation, and reduce the cost of reinventing the wheel, thereby promoting the prosperity of the Aptos ecosystem.
How to Participate in Co-construction? Every Developer Can Be a Promoter
We believe that a truly trustworthy and reusable smart contract foundational library must be built collaboratively by the ecosystem. Therefore, this initiative is open to all Aptos developers, whether you come from a team project or are an independent creator, you can participate in co-construction in suitable ways:
How Project Teams Can Participate: If you are a developer team of an existing project on Aptos, you can participate in the development, testing, and integration of core modules, transforming the pitfalls and best practices you have encountered in real business into reusable standard components for the entire ecosystem. This not only enhances the security of your project but also contributes to the entire ecosystem.
Independent Developers Also Have a Stage: If you are a Move enthusiast or an independent developer, we will continuously recruit module contributors through code challenges, bounty programs, and open task pools. alcove will provide complete contribution guidelines, development documentation, and technical support to help you join from 0 to 1.
Participation Methods Are Simple and Clear: All module development will be conducted publicly on GitHub, using the Pull Request (PR) mechanism. All code must pass automated testing and Move Prover verification, and be reviewed and merged by core contributors. The auditing and version management mechanisms will also be executed simultaneously to ensure that every line of code can withstand scrutiny.
What Tools and Resources Will We Provide?
To lower the participation threshold and enhance development efficiency, we will also build a complete set of ecological tools and support systems:
Core Module Library: Including reusable components such as access control, module upgrades, DeFi foundational logic, and security tools;
Multi-language SDK: Supporting languages such as TypeScript, Python, Rust, Go, etc., to simplify on-chain operations;
Standardized API: Providing application developers with easier access to on-chain data queries and interaction interfaces;
Developer Tool Support: Including VS Code plugins, CLI extensions, debugging tools, etc., to enhance the coding experience;
Project Templates and Sample Code: Ready-to-use template projects that allow you to quickly get started building your own applications.
Whether you are a beginner or an experienced developer, as long as you care about the technical future of Aptos, this foundational library and tool system will be an indispensable starting point for you.
Conclusion: A Starting Point for Ecosystem-level Infrastructure
Building a Move open-source foundational library inspired by OpenZeppelin on Aptos is a project of long-term strategic value for the entire ecosystem. We will fully leverage the advantages of the Move language in resource security and strong typing, combined with the parallel execution and native upgrade capabilities of the Aptos platform, to create a safer, more efficient, and user-friendly smart contract development environment for developers.
By combining the security rigor of OpenZeppelin with the technological innovations of Move/Aptos, this foundational library is expected to become a core cornerstone for Aptos dApp development, reducing the costs of redundant development, accelerating product iteration, and driving the ecosystem towards a more professional and robust direction.
The success of this open-source initiative relies on the collective efforts of all Builders. We sincerely invite Aptos project teams, independent developers, and security experts to join in co-construction, together refining a truly trustworthy, reusable, and auditable foundational standard. If you are building the future on Aptos, then this foundational library will also belong to you.
About Movemaker
Movemaker is an official community organization authorized by the Aptos Foundation, jointly initiated by Ankaa and BlockBooster, focusing on promoting the construction and development of the Aptos ecosystem in the Chinese-speaking region. As the official representative of Aptos in the Chinese-speaking area, Movemaker has received millions of dollars in funding and resource support from the Aptos Foundation and is committed to creating a diverse, open, and prosperous Aptos ecosystem by connecting developers, users, capital, and numerous ecological partners.
From DeFi, AI to payments, stablecoins, and RWA, Movemaker is dedicated to supporting innovative projects in practical applications and promoting the connection between Aptos technology and the real world. As an important bridge for Aptos in Asia, Movemaker is inspiring more development power to join the Aptos ecosystem with localized narratives and a global vision.
About alcove
alcove is the first Move Chinese developer community co-built by Aptos, dedicated to supporting developers in using the Move language to build the next generation of Web3 applications. The community gathers a large number of developers with foundational development, contract security, and toolchain construction capabilities in Move, and has contributed practical experience in multiple Aptos projects.
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。
