skills.rest
erenisiklar
erenisiklarCOMMUNITY
Explore all skills by this author →
GitHub

ton-vulnerability-scanner

Detect three critical TON vulnerability patterns in FunC contracts.

Updated Mar 27, 2026
Search Tags:#security#vulnerability#audit#ton#jetton#func
One-click install
npx skills add https://github.com/erenisiklar/Pusula --skill ton-vulnerability-scanner-erenisiklar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ton-vulnerability-scanner
Source: https://github.com/erenisiklar/Pusula/tree/main/.claude/skills/ton-vulnerability-scanner
Command: npx skills add https://github.com/erenisiklar/Pusula --skill ton-vulnerability-scanner-erenisiklar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

TON contracts are often riddled with security flaws that can enable unauthorized access, misbilling, or gas mismanagement. This Skill automates detection for three TON-specific vulnerability patterns to help auditors identify and remediate issues quickly.

Core Features & Use Cases

  • Automated detection of the three critical TON vulnerability patterns: integer-as-boolean misuse, fake Jetton transfer notifications, and forward TON without gas checks.
  • Evidence-rich findings with file and function references, plus practical remediation guidance.
  • Suitable for routine TON FunC security audits, code reviews, and pre-launch security assessments across contracts, wrappers, and notification handlers.

Quick Start

Run the TON vulnerability scanner against your codebase to detect the three patterns and produce a remediation report.

Frequently Asked Questions about ton-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit FunC contracts for TON vulnerabilities?▼

Auditing FunC contracts for TON vulnerabilities involves scanning your codebase to detect three critical patterns: integer-as-boolean misuse, fake Jetton transfer notifications, and forward TON without gas checks. The scanner generates evidence-rich findings with file references and practical mitigations.

What security flaws affect Jetton handling in TON smart contracts?▼

A critical security flaw affecting Jetton handling is fake Jetton transfer notifications, where unauthorized contracts send false transfer callbacks. This scanner detects this pattern along with integer-as-boolean misuse and unchecked forward TON gas deductions across your codebase.

How does forward TON gas mismanagement occur in FunC code?▼

Forward TON gas mismanagement occurs when contracts forward TON without gas checks, potentially draining contract balances. This scanner detects this specific vulnerability pattern by analyzing gas-forward logic across notification handlers and wrappers to provide actionable remediation.

Can I use this scanner for pre-launch security assessments of TON contracts?▼

Yes, you can use this scanner for pre-launch security assessments of TON contracts. It is suitable for routine FunC security audits and code reviews, detecting three critical vulnerability patterns across contracts, wrappers, and notification handlers before deployment.

What is the best way to detect integer-as-boolean misuse in TON smart contracts?▼

The best way to detect integer-as-boolean misuse in TON smart contracts is to apply an automated scanner to your FunC codebase. This Skill identifies this specific pattern alongside fake Jetton notifications and gas-forward flaws, providing file and function references for remediation.

Related Skills

Explore More Software Engineering Skills→
manuelbrandner85manuelbrandner85

ton-vulnerability-scanner

Scans FunC smart contracts for integer-as-boolean misuse, fake Jetton exploits, and gas management flaws.

Community
Advanced
mejangomejango

ton-vulnerability-scanner

Detect TON vulnerability patterns in FunC contracts and report mitigations.

Community
Advanced
keremtoker468-dotcomkeremtoker468-dotcom

ton-vulnerability-scanner

Audit TON FunC smart contracts for critical security vulnerabilities.

Community
Advanced
SuperlendSuperlend

ton-vulnerability-scanner

Scan TON FunC contracts for integer-as-boolean misuse, fake Jetton notifications, and unguarded forward TON.

Official
Advanced