ton-vulnerability-scanner

Scan TON FunC smart contracts for boolean, Jetton, and gas-forward vulnerabilities.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/DobricLilujun/LabAgentSkill --skill ton-vulnerability-scanner-dobriclilujun
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ton-vulnerability-scanner
Source: https://github.com/DobricLilujun/LabAgentSkill/tree/main/skillsHub/skills_scaling/building-secure-contracts/skills/ton-vulnerability-scanner
Command: npx skills add https://github.com/DobricLilujun/LabAgentSkill --skill ton-vulnerability-scanner-dobriclilujun

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Systematically scan TON blockchain smart contracts written in FunC for platform-specific security vulnerabilities related to boolean logic, Jetton token handling, and gas management. This skill targets TON FunC audits to identify 3 critical vulnerability patterns and provide actionable remediation guidance.

Core Features & Use Cases

  • Detect 3 critical vulnerability patterns: integer-as-boolean misuse, fake Jetton contracts, and unsafe gas-forwarding logic.
  • Analyze FunC source files (.fc/.func) and related wrappers to produce a structured vulnerability report with file references.
  • Applicable to pre-launch audits of TON dApps, Jetton-related contracts, and security reviews of gas forwarding mechanisms.

Quick Start

Scan your TON FunC contracts for the three vulnerability patterns and generate a comprehensive vulnerability report.

Frequently Asked Questions about ton-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit TON FunC smart contracts for security vulnerabilities?

To audit TON FunC contracts, scan the source files to identify critical vulnerability patterns including integer-as-boolean misuse, fake Jetton contracts, and unsafe gas-forwarding logic. The process generates a structured report with file references and remediation suggestions.

What security vulnerabilities should I look for in TON Jetton contracts?

When reviewing TON Jetton contracts, look for fake Jetton contract vulnerabilities alongside unsafe gas-forwarding logic. A targeted FunC audit detects these critical patterns and provides actionable remediation guidance.

Can I scan .fc and .func files for boolean handling issues in TON?

Yes, you can analyze FunC source files (.fc/.func) to detect integer-as-boolean misuse. The scan enforces platform detection for FunC files and assesses pattern-based risks to produce a structured vulnerability report.

What is the best way to check gas-forwarding patterns in TON dApps before launch?

The best way to check gas-forwarding patterns is running a pre-launch audit of TON dApps using pattern-based risk assessment. This identifies unsafe gas-forwarding logic in FunC code and provides structured remediation suggestions.

Does this vulnerability scanner require specific dependencies to analyze FunC code?

No, the vulnerability scanner operates without external dependencies. It directly enforces platform detection on FunC files and evaluates them against known security patterns to output a comprehensive vulnerability report.

Why do I need a specialized scanner for TON blockchain smart contracts?

You need a specialized scanner because TON FunC contracts have platform-specific vulnerabilities like boolean handling and Jetton logic issues that generic tools miss. A specialized audit ensures accurate pattern-based risk assessment and targeted remediation.