What problem does it solve? TON smart contracts written in FunC contain platform-specific vulnerabilities—integer-as-boolean misuse, fake Jetton transfer notifications, and unvalidated forward TON amounts—that generic Solidity-focused audit tools cannot detect, leaving contracts exposed to fund drainage and unauthorized token crediting. ## Core Features & Use Cases - Boolean Logic Detection: Identifies positive integers used as booleans in FunC, where bitwise NOT operations produce unexpected truthy results that break contract conditions. - Fake Jetton Validation: Flags transfer_notification handlers that fail to validate the sender against the stored Jetton wallet address, preventing attackers from crediting themselves tokens they never sent. - Gas & Forward Amount Review: Detects user-controlled forward_ton_amount values that lack msg_value validation, which can drain the contract's TON balance. - Use Case: Before launching a TON staking dApp, run this audit to verify that your transfer_notification handler validates the Jetton wallet sender, all booleans use -1/0, and forward amounts are bounded—then apply the provided FunC fix patterns and TypeScript test templates. ## Quick Start Audit the FunC contracts in my TON project for the three critical vulnerability patterns and report findings with fixes.
