The Move Prover (`move prove`) allows developers to write formal specification blocks (`spec fun`, `ensures`, `requires`, `aborts_if`). It mathematically proves that code conforms to specifications across all possible inputs using automated SMT solvers.
move
spec transfer {
aborts_if balance < amount;
ensures balance == old(balance) - amount;
}