{"vulnerability_classes":["Resource Leak (failure to destroy non-droppable resources)","Signer/Capability Confusion (wrong account authority)","Missing Ability Constraints (copy/drop/store/key abuse)","Global Storage Abuse (borrow_global_mut race, phantom borrow)","Object Ownership Confusion (Sui: shared vs owned vs frozen)","Dynamic Field Injection (Sui: arbitrary object attachment)","Coin/Token Accounting Errors (split, merge, zero-value)","Access Control Bypass (public entry vs entry visibility)","Friend Module Abuse (over-privileged friend declarations)","Integer Overflow/Underflow (unchecked arithmetic in u64/u128)","Flash Loan Attack Vectors","Oracle Manipulation","Reentrancy via Callbacks","Phantom Type Misuse (type parameter not enforced)","Upgrade Key Centralization (unrestricted upgrade capability)","Randomness Manipulation (on-chain pseudo-randomness)","Admin/Governance Centralization","Cross-Module Trust Violations","Event Emission Inconsistency (state change without event)","Denial of Service (resource exhaustion, abort vectors)"],"frameworks":["Aptos Move","Sui Move"],"provider":"CopperheadAI — LoneStarOracle"}