MoveBit
MoveBit, a BitsLab sub-brand founded in 2022, is a blockchain security firm specializing in Move smart contract audits, formal verification, and developer tooling for the Aptos, Sui, and Movement ecosystems, serving Web3 DeFi, DEX, NFT, and infrastructure projects.
- Company typePrivate
- Founded2022
- HeadquartersSan Francisco, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What MoveBit does
MoveBit is a blockchain security sub-brand of BitsLab, founded in 2022 and focused exclusively on the Move programming language ecosystem used by the Aptos, Sui, and Movement blockchains. The firm provides professional security audit services for Move smart contracts, decentralized applications, and full blockchain architectures, combining formal verification via the Move Prover with expert manual review. MoveBit serves Web3 development teams building DeFi protocols, DEXs, liquid staking, NFT marketplaces, AI launchpads, and infrastructure products on Move-based chains, with named engagements spanning Cetus, NAVI Protocol, Amnis Finance, Aftermath Finance, Scallop, Haedal, and the Aptos Framework itself.
The company operates a dual portfolio. The professional services arm delivers audited reports to project teams, with MoveBit claiming coverage of 80%+ of Move ecosystem projects across 100+ selected audits (BitsLab parent reports 204 audits and 2,858 vulnerabilities discovered in 2025, including 101 critical and 399 major issues). The developer tools arm includes the Sui Move Analyzer and Aptos Move Analyzer VS Code plugins, the Aptos Move Formatter, the Move Web IDE, the Move Scanner (bytecode-level static analysis covering 10+ vulnerability classes), the Sui Contract Source Verifier, the BitsLabAI Scanner (an AI auditing agent), and the Belobog fuzzing framework. Tools are distributed globally via VSCode Marketplace, GitHub, and a self-serve web IDE.
MoveBit generates revenue from audit engagements sourced via direct sales through its website contact form, with pricing not publicly disclosed; developer tools are distributed free of charge as a credibility and developer-adoption funnel. The firm is headquartered in San Francisco but operates with a team distributed across academic and enterprise backgrounds, and its visible activity is concentrated across APAC markets through partnerships with Aptos Labs, the Sui Foundation, and Movement Labs.
MoveBit firmographics
Firmographics- Name
- MoveBit
- Legal name
- MoveBit
- Website
- https://movebit.xyz
- Company type
- Private
- Founded year
- 2022
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- MoveBit, a BitsLab sub-brand founded in 2022, is a blockchain security firm specializing in Move smart contract audits, formal verification, and developer tooling for the Aptos, Sui, and Movement ecosystems, serving Web3 DeFi, DEX, NFT, and infrastructure projects.
- Ownership category
- akta.pro rank
MoveBit industry classification
Industry- Product category
- Blockchain Security & Smart Contract Auditing
- NAICS
- Computer Systems Design and Related Services (54151)
- akta.pro primary industry
- Secure File Transfer & Managed File Transfer (MFT) (HDADAFAK)
Keywords
Where MoveBit is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
MoveBit business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
Revenue model
- Security Audit Services: MoveBit generates revenue through providing professional security audit services for Move smart contracts, DApps, and blockchain architectures. This includes formal verification and expert review services.
Go-to-market motion1 record
Distribution channels4 records
Marketing channels8 records
MoveBit product offering
Product offeringCore offering
MoveBit provides professional security audit services for Move-based smart contracts, decentralized applications, and entire blockchain architectures, using formal verification via the Move Prover and expert manual review. It also distributes a free suite of Move developer tools (analyzers, formatter, web IDE, bytecode scanner, source verifier) and AI-driven security tooling (BitsLabAI Scanner, Belobog fuzzing framework) to developers building on Sui, Aptos, and Movement blockchains.
Product overview
MoveBit, a sub-brand of BitsLab, is a blockchain security company specializing in the Move ecosystem (Aptos and Sui blockchains). The company offers a comprehensive suite of security services including Move Smart Contract Security Audits, Move DApp Security Audits, and Move Blockchain Security Audits. Its product portfolio includes developer tools: Sui Move Analyzer (VS Code plugin v1.3.1), Aptos Move Analyzer (VS Code plugin v1.1.4), Aptos Move Formatter, Move Web IDE, Move Scanner (bytecode vulnerability detection), and Sui Contract Source Verifier. The company also offers AI-powered security analysis through BitsLabAI Scanner. Research initiatives include the Belobog fuzzing framework. Community engagement is supported through MoveCTF security competitions and academic publications.
Differentiator
Problem solved
Functional benefit
Products and services
- Move Smart Contract Security Audit Professional security audit service that eliminates security risks in Move smart contracts through formal verification using the Move Prover and expert manual review, targeted at projects building on Sui, Aptos, and Movement blockchains.
- Move DApp Security Audit Security audit service that eliminates vulnerabilities and attack risks in Move-based decentralized applications using formal verification and expert auditing methods.
- Move Blockchain Security Audit Professional security audit and testing service that ensures the security of the entire Move-based blockchain architecture and application layer.
- Sui Move Analyzer Visual Studio Code plugin that enhances the development experience for Move and Sui Move, providing syntax highlighting, autocomplete, go-to-definition, hover, compiler diagnostics, outline view, MSL support, multi-project workspaces, and a linter for developers building on Sui.
- Aptos Move Analyzer Visual Studio Code plugin that enhances the development experience of Move on Aptos, supporting goto definition, hover, type inference, autocomplete, outline, MSL support, and Aptos framework integration for developers building on Aptos.
- Aptos Move Formatter Tool for formatting Move code as part of the Aptos toolchain, supporting indentation, blank lines, complex expressions, lambda expressions, MSL language, and comment processing, with integration in VS Code and IntelliJ for Aptos developers.
- Move Web IDE Online Move code editor requiring no configuration that supports syntax highlighting and the full development lifecycle (editing, compilation, testing, deployment, and calling), with project management, template projects, blockchain environment switching, a plugin mechanism, vulnerability scanning integration, and file import/export.
- Move Scanner Bytecode detection tool for Move contracts based on static analysis that converts Move bytecode to IR and CFG (Intermediate Representation and Control Flow Graph) to detect more than 10 types of vulnerabilities and generate detection reports for auditors.
- Sui Contract Source Verifier
Quantifiable outcome
- 204 audit projects completed and 2,858 vulnerabilities discovered (101 critical, 399 major) in 2025
- +4 more outcomes
Companies that use MoveBit
Customer profileNamed customers34 records
Segments2 records
Ideal customer profiles3 records
MoveBit technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability6 records
Feature11 records
MoveBit partnerships and signals
Strategic signalPartnerships
Twelve partnerships are on record, tiered core and minor.
- Aptos LabscoreMoveBit is recognized as an audit partner with Aptos Labs. The company collaborated on formal verification of the Aptos Framework, creating formal specifications verified with the Move Prover. MoveBit has worked closely with Move developers to establish security standards.
- SuicoreMoveBit is recognized as an audit partner with Sui. The company co-hosts security competitions like MoveCTF with Sui Foundation and provides security coverage from back-end code to front-end interaction protection.
- Movement LabscoreMoveBit co-hosted the Movement Torch Relay with Movement Labs, a series of events across APAC (Hangzhou, Singapore, Shenzhen) to inspire developers to build on Movement. Movement is backed by $38M Series A led by Polychain Capital.
- OtterSeccoreMoveBit collaborated with OtterSec on the Aptos Framework security project. OtterSec audited the Aptos Framework and identified critical security requirements while MoveBit created formal specifications for verification.
- BitsLabcoreMoveBit is a sub-brand of BitsLab, which operates three sub-brands: MoveBit, ScaleBit, and TonBit. BitsLab focuses on securing and building emerging Web3 ecosystems.
- ScaleBitminorScaleBit is a sibling sub-brand under BitsLab, focused on Zero-Knowledge Proofs, Layer 2, and cross-chain applications security. Recognized as security partner for TON, Linea, BNB Chain, Starknet.
- MoveFuns DAOminorCo-organizer of Move DevConf 2024 and MoveCTF competitions alongside MoveFuns DAO.
- OpenBuildminorCo-organizer of Move DevConf 2024 alongside OpenBuild.
- ChainFlagminorPartner in organizing MoveCTF security competitions.
- Sui FoundationcoreSui Foundation is an exclusive sponsor and supporter of MoveCTF 2024 and provided support for Move DevConf 2024.
- Aptos FoundationcoreAptos Foundation sponsored Move DevConf 2024 and awarded MoveBit as Top 50 Awardees of Aptos Ecosystem Grant Program.
- AWS CloudminorAWS Cloud provided generous sponsorship for Move DevConf 2024.
Scale indicators8 records
Recent moves7 records
Expansion highlights6 records
MoveBit competitors and assessment
Company assessmentDirect peers
- OtterSec: Smart contract audit firm specializing in Move/Aptos and Solana ecosystems. Most direct peer to MoveBit — the two firms have publicly collaborated on the Aptos Framework formal verification and security work, and they compete for the same Sui/Aptos audit deals.
- OpenZeppelin: Smart-contract security firm combining audits, secure libraries, and developer tools — the closest analogue to MoveBit's combined audit-plus-tooling model. Similar playbook of locking ecosystem clients through both services and tools (defender/contracts-suite for EVM; analyzers/IDE for Move).
- SlowMist: Blockchain security firm combining smart-contract audits, on-chain analytics, and threat intelligence, with strong APAC presence. Direct competitor for Move ecosystem projects; Asia footprint overlaps with MoveBit's APAC events strategy.
- Halborn: End-to-end blockchain security firm offering smart-contract audits, penetration testing, and advisory. Comparable professional-services business model serving Web3 protocols across chains.
- Zellic: Smart-contract audit firm built around formal-verification expertise and Move/Aptos work, derived from the Pluto/UCI academic team. Directly comparable to MoveBit in audit methodology, academic pedigree, and Move ecosystem positioning.
- Quantstamp: Long-running smart-contract audit firm with formal-verification roots competing for high-profile Web3 audits. Comparable professional-services business model and focus on L1 ecosystem clients.
- Trail of Bits: Established blockchain and smart-contract security firm with deep academic credentials (similar to MoveBit) offering formal verification and audits across EVM, Solana, and Move ecosystems. Comparable service-and-research operating model and Tier-1 protocol client roster.
- PeckShield: Web3 security firm covering smart-contract audits, on-chain monitoring, and incident response across multiple chains. Comparable professional-services model competing for top protocol engagements.
- Runtime Verification: Formal-verification-led smart-contract auditing firm (founded by the authors of the KEVM and other executable semantics). Closest analogue to MoveBit's reliance on the Move Prover for high-assurance audits.
Broad incumbents
- CertiK: Largest Web3 security firm by volume, providing audits, formal verification, and Skynet monitoring across many chains including Aptos. Scaled incumbent competitor in Move ecosystem projects; broader portfolio than MoveBit's specialized Move focus.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
MoveBit social profiles
Digital presenceMoveBit financial estimates
Financial estimateRevenue estimate
Valuation estimate
MoveBit leadership team
Management profileNumber of profiles
Profiles3 records
MoveBit funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
MoveBit M&A and investment
M&A and investmentM&A
Investments2 records
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about MoveBit
What does MoveBit do?
MoveBit provides professional security audit services for Move-based smart contracts, decentralized applications, and entire blockchain architectures, using formal verification via the Move Prover and expert manual review. It also distributes a free suite of Move developer tools (analyzers, formatter, web IDE, bytecode scanner, source verifier) and AI-driven security tooling (BitsLabAI Scanner, Belobog fuzzing framework) to developers building on Sui, Aptos, and Movement blockchains.
Is MoveBit a public or private company?
MoveBit is a private company. It is classified as corporate owned and is currently operating.
When was MoveBit founded?
MoveBit was founded in 2022. It employs 11 to 50 people.
Where is MoveBit based?
MoveBit is headquartered in San Francisco, United States, in the North America region.
How does MoveBit make money?
One revenue line is on record: security Audit Services.
Who are MoveBit's main competitors?
Direct peers on record are OtterSec, OpenZeppelin, SlowMist, Halborn, Zellic, Quantstamp, Trail of Bits, PeckShield and Runtime Verification. CertiK is listed as a broad incumbent.
Does MoveBit have an API?
No public API is recorded for MoveBit.
What industry is MoveBit in?
MoveBit's product category is Blockchain Security & Smart Contract Auditing. Its primary akta.pro industry code is HDADAFAK, Secure File Transfer & Managed File Transfer (MFT). Its NAICS code is 54151.