skills.rest
allanninal
allanninalCOMMUNITY
Explore all skills by this author →
Website𝕏@allanninGitHub

ton-vulnerability-scanner

Scan FunC smart contracts for critical TON security vulnerabilities.

1|Updated Jan 31, 2026
Search Tags:#security#vulnerability#audit#smart contract#ton#func
One-click install
npx skills add https://github.com/allanninal/claude-code-skills --skill ton-vulnerability-scanner-allanninal
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ton-vulnerability-scanner
Source: https://github.com/allanninal/claude-code-skills/tree/main/skills/ton-vulnerability-scanner
Command: npx skills add https://github.com/allanninal/claude-code-skills --skill ton-vulnerability-scanner-allanninal

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies and helps fix critical, platform-specific security vulnerabilities in TON (The Open Network) smart contracts written in FunC, preventing potential exploits and financial loss.

Core Features & Use Cases

  • Vulnerability Detection: Scans for 3 high-impact issues: fake Jetton contracts, integer-as-boolean misuse, and improper gas handling in forward operations.
  • Code Analysis: Analyzes FunC/Tact code for specific insecure patterns.
  • Fix Recommendations: Provides detailed explanations and code examples for remediation.
  • Use Case: You've developed a new Jetton token on TON and need to ensure its contract is secure before launch. Run this Skill to audit your contract for common pitfalls like unauthorized minting or balance drainage.

Quick Start

Use the ton-vulnerability-scanner skill to audit the smart contracts in the 'contracts/' directory.

Frequently Asked Questions about ton-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit TON smart contracts written in FunC for security vulnerabilities?▼

Auditing TON smart contracts written in FunC involves scanning the codebase for critical security vulnerabilities like integer-as-boolean misuse, fake Jetton contracts, and improper forward TON gas handling. This analysis identifies insecure patterns and provides detailed code examples for remediation.

What are common security vulnerabilities in TON FunC smart contracts?▼

Common security vulnerabilities in TON FunC smart contracts include fake Jetton contracts, integer-as-boolean misuse, and improper gas handling in forward operations. Identifying these critical flaws prevents potential exploits and financial loss during token launches or contract interactions.

How do I secure a Jetton token contract on TON before launch?▼

Securing a Jetton token contract on TON involves scanning the FunC code for unauthorized minting or balance drainage vulnerabilities. This audit checks for specific insecure patterns, fake contract implementations, and provides mitigation strategies to ensure the contract is secure before launch.

Can I scan TON smart contracts for improper gas handling in forward operations?▼

Yes, you can scan TON smart contracts for improper gas handling in forward operations. This detects vulnerabilities where forward TON is sent without proper gas checks, providing detailed vulnerability patterns and code examples to mitigate potential execution failures.

What is the best way to detect integer-as-boolean misuse in FunC code?▼

Detecting integer-as-boolean misuse in FunC code requires analyzing the smart contract for specific insecure patterns where integers are improperly cast or evaluated as boolean values. This analysis provides detailed vulnerability patterns and code examples for effective remediation.

Related Skills

Explore More Software Engineering Skills→
hairyfhairyf
4

ton-blueprint

Scaffold, compile, test, and deploy TON smart contracts.

Community
Advanced
mejangomejango

ton-vulnerability-scanner

Detect TON vulnerability patterns in FunC contracts and report mitigations.

Community
Advanced
SuperlendSuperlend

ton-vulnerability-scanner

Scan TON FunC contracts for integer-as-boolean misuse, fake Jetton notifications, and unguarded forward TON.

Official
Advanced
keremtoker468-dotcomkeremtoker468-dotcom

ton-vulnerability-scanner

Audit TON FunC smart contracts for critical security vulnerabilities.

Community
Advanced