skills.rest
ayehiaa
ayehiaaCOMMUNITY
Explore all skills by this author →
GitHub

ton-vulnerability-scanner

Scan TON FunC smart contracts for boolean, Jetton, and gas vulnerabilities.

Updated May 2, 2026
Search Tags:#vulnerability scanning#ton#jetton#func#code auditing#smart contract security#gas validation
One-click install
npx skills add https://github.com/ayehiaa/my-travel-assistant --skill ton-vulnerability-scanner-ayehiaa
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ton-vulnerability-scanner
Source: https://github.com/ayehiaa/my-travel-assistant/tree/main/.agents/skills/ton-vulnerability-scanner
Command: npx skills add https://github.com/ayehiaa/my-travel-assistant --skill ton-vulnerability-scanner-ayehiaa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill reduces the risk of launching vulnerable TON smart contracts by scanning FunC code for high-impact, TON-specific security flaws in boolean handling, Jetton notification trust, and gas/forward-value safety.

Core Features & Use Cases

  • Audits FunC smart contracts by identifying contract entry points and patterns that commonly lead to exploitable behavior.
  • Detects 3 critical vulnerability patterns: integer-as-boolean misuse, fake Jetton contract notifications, and forward TON without gas checks.
  • Produces actionable findings with locations, severities, and remediation guidance suitable for pre-launch security reviews.

Quick Start

Use this skill to scan your TON FunC repository for vulnerabilities, then request a prioritized report with recommended code fixes.

Frequently Asked Questions about ton-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit FunC smart contracts for Jetton transfer vulnerabilities?▼

Detect fake Jetton contract notifications by validating sender expectations and verifying Jetton wallet authenticity within transfer_notification handlers during code reviews. This ensures contracts only accept execution from legitimate Jetton masters.

How does gas validation work for outgoing TON messages in smart contracts?▼

Gas validation for outgoing TON messages works by checking forward and value usage against msg_value or bounded constants. This prevents unsafe forwarding of TON without gas checks, which can drain contract balances.

Can I scan TON smart contract code for integer-as-boolean misuse?▼

Yes, you can scan TON smart contract code for integer-as-boolean misuse by scanning the codebase for FunC sources and entry points. This identifies unsafe boolean logic patterns that commonly lead to exploitable behavior.

What is the best way to check TON contract security before mainnet deployment?▼

Check TON contract security before mainnet deployment by auditing FunC-based contracts for high-impact security flaws in boolean handling, Jetton notification trust, and forward-value gas safety. This produces a prioritized report with remediation guidance.

When do I need to review Jetton wallet handlers in FunC code?▼

Review Jetton wallet handlers in FunC code when auditing smart contracts that process Jetton transfers. You need to validate message parsing and gas economics for outgoing calls to prevent fake transfer_notification exploits.

Related Skills

Explore More Software Engineering Skills→
SuperlendSuperlend

ton-vulnerability-scanner

Scan TON FunC contracts for integer-as-boolean misuse, fake Jetton notifications, and unguarded forward TON.

Official
Advanced
syl2042syl2042

security-best-practices

Enforce language-specific security best practices in code reviews.

Community
Advanced
Ramprasad4121Ramprasad4121
1

ton-vulnerability-scanner

Scan FunC smart contracts for integer-as-boolean, fake Jetton, and gas check vulnerabilities.

Community
Advanced
keremtoker468-dotcomkeremtoker468-dotcom

ton-vulnerability-scanner

Audit TON FunC smart contracts for critical security vulnerabilities.

Community
Advanced