Security tooling for Sui Move.
We build open-source tools that help Sui Move developers ship contracts they can trust.
Three layers, one toolchain:
- Coverage — maps which paths your tests actually exercise, so untested code is visible
- Mutation testing — plants real bugs and checks your tests catch them, proving the suite bites
- Lint — 8 Move-specific security rules (MOV-001–012) that flag risk patterns before review does
Built from real audit work — every rule traces back to a pattern that burned real money on mainnet.
Not a style linter — sui move lint handles that. This targets security: the patterns that compile clean but drain funds on mainnet.
Ships as a skill, a GitHub Action, and a CLI.
- More lint rules — expanding from real audit findings
- Bytecode-level checks for deployed packages
- AST-based analysis (migrating off regex matching)
Issues, PRs, and rule contributions welcome. If you hit a false positive or a pattern we should catch, open an issue — that's how the tool gets better.
MIT — free to use, fork, and build on.
