Strengthening the Move Ecosystem: Solido Partners with MoveBit to Secure Cash Protocol
At Solido, security is not just a checkbox — it’s a core pillar of everything we build. We’re thrilled to announce that Cash, our decentralized CDP protocol that powers the $CASH stablecoin, has completed a comprehensive third-party audit conducted by MoveBit, the leading security firm in the Move ecosystem.
Designed to provide permissionless liquidity and capital efficiency, Cash is a cornerstone in our mission to build resilient, censorship-resistant stablecoins in the Move ecosystem. But with great innovation comes greater responsibility, especially when safeguarding user funds and smart contract logic.
Why MoveBit?
MoveBit, a sub-brand of BitsLab, is one of the earliest and most trusted security teams in the Move ecosystem. As official auditors for Aptos, Sui, and Movement, and an infrastructure partner with Supra, MoveBit brings unmatched domain expertise in auditing Move-based protocols.
Their team, composed of academic security researchers and enterprise veterans with over a decade of experience, is dedicated to making the Move ecosystem the most secure environment in Web3.
You can read more about their previous contributions:
- Securing the Aptos Framework through Formal Verification
- Fixing Vulnerabilities in the Sui Cross-Chain Protocol
Inside the Audit: Scope and Methodology
MoveBit conducted an in-depth security assessment of the Cash protocol’s smart contracts, applying a multi-layered strategy that included:
🔍 Testing & Automated Analysis
- State consistency checks
- Overflow and underflow detection
- Failure rollback testing
- Boundary checks and parameter validation
🧠 Manual Code Review
- Logic verification against specifications
- Access control scrutiny
- Duplication and gas inefficiency analysis
- Detection of centralization vectors
🧮 Formal Verification
Using the Move Prover, key components of the protocol were mathematically validated to behave as intended under all conditions.
🔄 Real-World Simulations
Security tests were executed on both testnet and mainnet environments to simulate real-world attack vectors and transaction flows.
Audit Results: 20 Issues Resolved
MoveBit identified 20 issues of varying severity, ranging from minor inefficiencies to critical vulnerabilities. We are proud to share that the Solido engineering team, in close collaboration with MoveBit, promptly acknowledged and fixed all identified issues.
This rigorous process ensures that the $CASH protocol meets the highest standards of security, robustness, and reliability. You can view the comprehensive report from MoveBit here:
Audit report
Looking Ahead
With the MoveBit audit complete, Cash is now ready for its mainnet launch, offering users a secure and scalable way to access on-chain liquidity through $CASH.
Security is never a one-time event. It’s a continuous journey, and this audit marks a major milestone for us. We remain committed to ongoing reviews, real-time monitoring, and community transparency as we expand Solido’s ecosystem.
