cadence-lang

name

cadence-lang

description

Comprehensive guide for writing correct, secure, and idiomatic Cadence smart contract code on the Flow blockchain. Covers language fundamentals (resources, contracts, transactions, interfaces, accounts, references, imports), access control and entitlements, capabilities, pre/post conditions, security best practices, anti-patterns to avoid, and proven design patterns. TRIGGER when: writing or debugging Cadence code, asking about Cadence syntax, access(self), access(all), entitlements, resources, move operator (<-), capabilities, references, pre/post conditions, storage paths, "how do I write cadence", "cadence error", "compile error in .cdc", "what does access(self) mean", "how do resources work", "capability-based security". DO NOT TRIGGER when: building NFT/FT token contracts (use cadence-tokens), setting up flow.json or FCL (use flow-project-setup), reviewing existing code for vulnerabilities (use cadence-audit), generating new contracts from scratch (use cadence-scaffold).

Cadence Language Guide

Write secure, correct Cadence code by following these rules. Cadence uses resource-oriented programming, capability-based security, and explicit access control.

Key Principles

1. Secure by default — start with access(self), expand only when needed
2. Resource safety — resources exist in one place, must be explicitly moved (<-) or destroyed
3. Capability-based security — access delegated through unforgeable, revocable capabilities
4. Explicit over implicit — force developers to make security decisions
5. Document generated code — follow the Cadence documentation conventions in the relevant reference docs

Navigation Map

Read the relevant reference file based on your task:

Task	Reference
Import patterns, flow.json setup	imports.md
Resource lifecycle, move operator	resources.md
Contract structure, init, deployment	contracts.md
Transaction phases, entitlements	transactions.md
Documentation conventions	documentation.md
Interfaces, intersection types	interfaces.md
Account storage, keys, capabilities	accounts.md
References, authorized refs	references.md
Access modifiers, visibility rules	access-control.md
Entitlements, mappings, Identity, sets	entitlements.md
Capabilities, security model	capabilities.md
Pre/post conditions, before()	conditions.md
Security best practices	security-best-practices.md
Anti-patterns to avoid	anti-patterns.md
Design patterns	design-patterns.md

For security-sensitive tasks, also read security-best-practices.md and anti-patterns.md.

Companion Skills

This skill provides the language foundation. Other skills build on it:

• cadence-testing — Use alongside when writing tests for Cadence code. Tests are Cadence too and must follow every rule in this skill.
• cadence-tokens — Use alongside this skill when building NFT/FT contracts. Token contracts must follow all rules here plus token-specific standards.
• cadence-audit — Use to verify code follows the security rules and patterns documented here.
• cadence-scaffold — Use to generate contracts/transactions that follow these rules by default.
• flow-cli — Use to deploy and test the Cadence code written with this skill's guidance.
• flow-react-sdk — Use when the Cadence scripts/transactions will be called from React hooks.