Deploy Contracts Skill

Overview

This skill guides safe deployment of Move contracts to Aptos networks. Always deploy to testnet before mainnet.

Pre-Deployment Checklist

Before deploying, verify ALL items:

Security Audit ⭐ CRITICAL - See SECURITY.md

Security audit completed (use
```
security-audit
```
skill)
All critical vulnerabilities fixed
All security patterns verified (arithmetic safety, storage scoping, reference safety, business logic)
Access control verified (signer checks, object ownership)
Input validation implemented (minimum thresholds, fee validation)
No unbounded iterations (per-user storage, not global vectors)
Atomic operations (no front-running opportunities)
Randomness security (if applicable - entry functions, gas balanced)

Testing

100% test coverage achieved:
```
aptos move test --coverage
```
All tests passing:
```
aptos move test
```
Coverage report shows 100.0%
Edge cases tested

Code Quality

Code compiles without errors:
```
aptos move compile
```
No hardcoded addresses (use named addresses)
Error codes clearly defined
Functions properly documented

Configuration

Move.toml configured correctly
Named addresses set up:
```
my_addr = "_"
```
Dependencies specified with correct versions
Network URLs configured

Object Deployment (Modern Pattern)

CRITICAL: Use Correct Deployment Command

There are TWO ways to deploy contracts. For modern object-based contracts, use

deploy-object

✅ CORRECT: Object Deployment (Modern Pattern)

bash

aptos move deploy-object \
    --address-name my_addr \
    --profile devnet \
    --assume-yes

What this does:

Creates an object to host your contract code
Deploys the package to that object's address
Returns the object address (deterministic, based on deployer + package name)
Object address becomes your contract address

❌ WRONG: Using Regular Publish for Object Contracts

bash

# ❌ Don't use this for object-based contracts
aptos move publish \
    --named-addresses my_addr=<address>

When to use each:

```
deploy-object
```
: Modern contracts using objects (RECOMMENDED)
```
publish
```
: Legacy account-based deployment (older pattern)

How to tell if you need object deployment:

Your contract creates named objects in
```
init_module
```
Your contract uses
```
object::create_named_object()
```
You want a deterministic contract address
Documentation says "deploy as object"

Alternative Object Deployment Commands

Option 1:
deploy-object
(Recommended - Simplest)

bash

aptos move deploy-object --address-name my_addr --profile devnet

Automatically creates object and deploys code
Object address is deterministic
Best for most use cases

Option 2:
create-object-and-publish-package
(Advanced)

bash

aptos move create-object-and-publish-package \
    --address-name my_addr \
    --named-addresses my_addr=default

More complex command with more options
Use only if you need specific object configuration
Generally not needed

Recommendation: Always use

deploy-object

unless you have a specific reason to use the alternative.

Deployment Workflow

Step 1: Test Locally

bash

# Ensure all tests pass
aptos move test

# Verify 100% coverage
aptos move test --coverage
aptos move coverage summary
# Expected output: "coverage: 100.0%"

Step 2: Compile

bash

# Compile contract
aptos move compile --named-addresses my_addr=<your_address>

# Verify compilation succeeds
echo $?
# Expected: 0 (success)

Step 3: Deploy to Devnet (Optional)

Devnet is for quick testing and experimentation.

bash

# Initialize devnet account (if not already)
aptos init --network devnet --profile devnet

# Get your account address
aptos account list --profile devnet

Fund your account via web faucet:

Go to:

https://aptos.dev/network/faucet?address=<your_devnet_address>

Login and request devnet APT
Return here and confirm you've funded the account

bash

# Verify balance
aptos account balance --profile devnet

# Deploy as object (modern pattern)
aptos move deploy-object \
    --address-name my_addr \
    --profile devnet \
    --assume-yes

# Save the object address from output for future upgrades
# Output: "Code was successfully deployed to object address 0x..."

# Verify deployment
aptos account list --account <object_address> --profile devnet

Step 4: Deploy to Testnet (REQUIRED)

Testnet is for final testing before mainnet.

bash

# Initialize testnet account
aptos init --network testnet --profile testnet

# Get your account address
aptos account list --profile testnet

Fund your account via web faucet:

Go to:

https://aptos.dev/network/faucet?address=<your_testnet_address>

Login and request testnet APT
Return here and confirm you've funded the account

bash

# Verify balance
aptos account balance --profile testnet

# Deploy to testnet as object (modern pattern)
aptos move deploy-object \
    --address-name my_addr \
    --profile testnet \
    --assume-yes

# IMPORTANT: Save the object address from output
# You'll need it for upgrades and function calls
# Output: "Code was successfully deployed to object address 0x..."

Step 5: Test on Testnet

bash

# Run entry functions to verify deployment
aptos move run \
    --profile testnet \
    --function-id <testnet_address>::<module>::<function> \
    --args ...

# Test multiple scenarios
# - Happy paths
# - Error cases (should abort with correct error codes)
# - Access control
# - Edge cases

# Verify using explorer
# https://explorer.aptoslabs.com/?network=testnet

Step 6: Deploy to Mainnet (After Testnet Success)

Only deploy to mainnet after thorough testnet testing.

bash

# Initialize mainnet account
aptos init --network mainnet --profile mainnet

# IMPORTANT: Backup your private key securely!
# The private key is in ~/.aptos/config.yaml — DO NOT read this file; users must manage keys directly

# Deploy to mainnet as object (modern pattern)
aptos move deploy-object \
    --address-name my_addr \
    --profile mainnet \
    --max-gas 20000  # Optional: set gas limit

# Review prompts carefully before confirming:
# 1. Gas confirmation: Review gas costs
# 2. Object address: Note the object address for future reference

# OR use --assume-yes to auto-confirm (only if you're confident)
aptos move deploy-object \
    --address-name my_addr \
    --profile mainnet \
    --assume-yes

# SAVE THE OBJECT ADDRESS from output
# You'll need it for upgrades and documentation

# Confirm deployment
# Review transaction in explorer:
# https://explorer.aptoslabs.com/?network=mainnet

Step 7: Verify Deployment

bash

# Check module is published
aptos account list --account <mainnet_address> --profile mainnet

# Look for your module in the output
# "0x...::my_module": { ... }

# Run view function to verify
aptos move view \
    --profile mainnet \
    --function-id <mainnet_address>::<module>::<view_function> \
    --args ...

Step 8: Document Deployment

Create deployment record:

markdown

# Deployment Record

**Date:** 2026-01-23 **Network:** Mainnet **Module:** my_module **Address:** 0x123abc... **Transaction:** 0x456def...

## Verification

- [x] Deployed successfully
- [x] Module visible in explorer
- [x] View functions working
- [x] Entry functions tested

## Links

- Explorer: https://explorer.aptoslabs.com/account/0x123abc...?network=mainnet
- Transaction: https://explorer.aptoslabs.com/txn/0x456def...?network=mainnet

## Notes

- All security checks passed
- 100% test coverage verified
- Tested on testnet for 1 week before mainnet

Module Upgrades

Upgrading Existing Object Deployment

Object-deployed modules are upgradeable by default for the deployer.

bash

# Upgrade existing object deployment
aptos move upgrade-object \
    --address-name my_addr \
    --object-address <object_address_from_initial_deploy> \
    --profile mainnet

# Upgrade with auto-confirm
aptos move upgrade-object \
    --address-name my_addr \
    --object-address <object_address> \
    --profile mainnet \
    --assume-yes

# Verify upgrade
aptos account list --account <object_address> --profile mainnet

IMPORTANT: Save the object address from your initial

deploy-object

output - you need it for upgrades.

Upgrade Compatibility Rules:

✅ CAN: Add new functions
✅ CAN: Add new structs
✅ CAN: Add new fields to structs (with care)
❌ CANNOT: Remove existing functions (breaks compatibility)
❌ CANNOT: Change function signatures (breaks compatibility)
❌ CANNOT: Remove struct fields (breaks existing data)

Making Modules Immutable

To prevent future upgrades:

move

// In your module
fun init_module(account: &signer) {
    // After deployment, burn upgrade capability
    // (implementation depends on your setup)
}

Cost Estimation

Gas Costs

bash

# Typical deployment costs:
# - Small module: ~500-1000 gas units
# - Medium module: ~1000-5000 gas units
# - Large module: ~5000-20000 gas units

# When you run deploy-object, the CLI shows gas estimate before confirming
# Use --assume-yes only after you've verified costs on testnet first

Mainnet Costs

Gas costs are paid in APT:

Gas units × Gas price = Total cost
Example: 5000 gas units × 100 Octas/gas = 500,000 Octas = 0.005 APT

Multi-Module Deployment

Deploying Multiple Modules

Option 1: Single package (Recommended)

project/
├── Move.toml
└── sources/
    ├── module1.move
    ├── module2.move
    └── module3.move

bash

# Deploys all modules at once as a single object
aptos move deploy-object --address-name my_addr --profile testnet

Option 2: Separate packages with dependencies

bash

# Deploy dependency package first
cd dependency-package
aptos move deploy-object --address-name dep_addr --profile testnet
# Note the object address from output

# Update main package Move.toml to reference dependency address
# Then deploy main package
cd ../main-package
aptos move deploy-object --address-name main_addr --profile testnet

Troubleshooting Deployment

"Insufficient APT balance"

Testnet/Devnet: Use the web faucet (requires login):

Get your account address:
```
aptos account list --profile testnet
```

Go to:

https://aptos.dev/network/faucet?address=<your_address>

Login and request testnet APT
Verify balance:
```
aptos account balance --profile testnet
```

Mainnet: Transfer real APT to your account from an exchange or wallet.

"Module already exists" (for object deployments)

bash

# Use upgrade-object with the original object address
aptos move upgrade-object \
    --address-name my_addr \
    --object-address <object_address_from_initial_deploy> \
    --profile testnet

"Compilation failed"

bash

# Fix compilation errors first
aptos move compile
# Fix all errors shown, then retry deployment

"Gas limit exceeded"

bash

# Increase max gas
aptos move deploy-object \
    --address-name my_addr \
    --profile testnet \
    --max-gas 50000

Deployment Checklist

Before Deployment:

Security audit passed
100% test coverage
All tests passing
Code compiles successfully
Named addresses configured
Target network selected (testnet first!)

During Deployment:

Correct network selected
Correct address specified
Transaction submitted
Transaction hash recorded

After Deployment:

Module visible in explorer
View functions work
Entry functions tested
Deployment documented
Team notified

ALWAYS Rules

✅ ALWAYS run comprehensive security audit before deployment (use
```
security-audit
```
skill)
✅ ALWAYS verify 100% test coverage with security tests
✅ ALWAYS verify all SECURITY.md patterns (arithmetic, storage scoping, reference safety, business logic)
✅ ALWAYS deploy to testnet before mainnet
✅ ALWAYS test on testnet thoroughly (happy paths, error cases, security scenarios)
✅ ALWAYS backup private keys securely
✅ ALWAYS document deployment addresses
✅ ALWAYS verify deployment in explorer
✅ ALWAYS test functions after deployment
✅ ALWAYS use separate keys for testnet and mainnet (SECURITY.md - Operations)

NEVER Rules

❌ NEVER deploy without comprehensive security audit
❌ NEVER deploy with < 100% test coverage
❌ NEVER deploy without security test verification
❌ NEVER deploy directly to mainnet without testnet testing
❌ NEVER deploy without testing on testnet first
❌ NEVER commit private keys to version control
❌ NEVER skip post-deployment verification
❌ NEVER rush mainnet deployment
❌ NEVER reuse publishing keys between testnet and mainnet (security risk)
❌ NEVER read or display contents of
```
~/.aptos/config.yaml
```
or
```
.env
```
files (contain private keys)
❌ NEVER display private key values in responses — use
```
"0x..."
```
placeholders

❌ NEVER run

cat ~/.aptos/config.yaml

echo $VITE_MODULE_PUBLISHER_ACCOUNT_PRIVATE_KEY

, or similar commands

❌ NEVER run
```
git add .
```
or
```
git add -A
```
without confirming
```
.env
```
is in
```
.gitignore
```

References

Official Documentation:

CLI Publishing: https://aptos.dev/build/cli/working-with-move-contracts
Network Endpoints: https://aptos.dev/nodes/networks
Gas and Fees: https://aptos.dev/concepts/gas-txn-fee

Explorers:

Mainnet: https://explorer.aptoslabs.com/?network=mainnet
Testnet: https://explorer.aptoslabs.com/?network=testnet
Devnet: https://explorer.aptoslabs.com/?network=devnet

Related Skills:

```
security-audit
```
- Audit before deployment
```
generate-tests
```
- Ensure tests exist
```
use-aptos-cli
```
- CLI command reference
```
troubleshoot-errors
```
- Fix deployment errors

Remember: Security audit → 100% tests → Testnet → Thorough testing → Mainnet. Never skip testnet.

deploy-contracts

NPX Install

Tags

SKILL.md Content

Deploy Contracts Skill

Overview

Pre-Deployment Checklist

Security Audit ⭐ CRITICAL - See SECURITY.md

Testing

Code Quality

Configuration

Object Deployment (Modern Pattern)

CRITICAL: Use Correct Deployment Command

Alternative Object Deployment Commands

Deployment Workflow

Step 1: Test Locally

Step 2: Compile

Step 3: Deploy to Devnet (Optional)

Step 4: Deploy to Testnet (REQUIRED)

Step 5: Test on Testnet

Step 6: Deploy to Mainnet (After Testnet Success)

Step 7: Verify Deployment

Step 8: Document Deployment

Module Upgrades

Upgrading Existing Object Deployment

Making Modules Immutable

Cost Estimation

Gas Costs

Mainnet Costs

Multi-Module Deployment

Deploying Multiple Modules

Troubleshooting Deployment

"Insufficient APT balance"

"Module already exists" (for object deployments)

"Compilation failed"

"Gas limit exceeded"

Deployment Checklist

ALWAYS Rules

NEVER Rules

References