ton-vulnerability-scanner

Scan FunC TON contracts for integer-as-boolean misuse, fake Jetton notifications, and unsafe gas forwarding.

9|2|Updated Mar 12, 2026
One-click install
npx skills add https://github.com/hongmaple0820/agent-academy --skill ton-vulnerability-scanner-hongmaple0820
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ton-vulnerability-scanner
Source: https://github.com/hongmaple0820/agent-academy/tree/main/skills/design/building-secure-contracts/skills/ton-vulnerability-scanner
Command: npx skills add https://github.com/hongmaple0820/agent-academy --skill ton-vulnerability-scanner-hongmaple0820

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

TON smart contracts often suffer from platform-specific security vulnerabilities. This skill provides a structured approach to identify and mitigate three critical TON-specific issues: integer-as-boolean misuse, fake Jetton transfer notifications, and unsafe gas forwarding.

Core Features & Use Cases

  • Detects integer-as-boolean misuse and boolean logic errors in FunC contracts.
  • Detects fake jetton transfer notifications and validates sender contexts.
  • Flags unsafe gas-forwarding and forward TON risks in outgoing messages.
  • Generates actionable remediation guidance and references for secure audit workflows.

Quick Start

Scan your TON contracts now to generate a vulnerability report and remediation guidance.

Frequently Asked Questions about ton-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit TON smart contracts for vulnerabilities in FunC?

To detect fake Jetton transfer notifications in TON contracts, scan FunC modules to validate sender contexts and verify transfer notification sources. The scanner flags unverified sender contexts and generates a structured report detailing the notification pattern vulnerabilities found.

What causes unsafe gas forwarding in TON contracts and how do I check it?

Unsafe gas forwarding in TON contracts occurs when forward TON is sent without gas checks, risking transaction failures. You can check this by scanning outgoing messages in FunC contracts to flag forward TON risks and generate remediation guidance for secure gas handling.

Can I use this scanner to check Jetton-related modules for integer-as-boolean misuse?

Yes, you can use the scanner to check Jetton-related modules for integer-as-boolean misuse. It detects boolean logic errors in FunC-based contracts and applies structured platform detection to audit and harden TON deployments with actionable references.

What's the best way to generate a vulnerability report for a TON deployment?

The best way to generate a vulnerability report for a TON deployment is to scan FunC contracts for platform-specific security issues. The scanner enforces pattern-based analysis and structured reporting to identify critical vulnerabilities and provide remediation guidance for development workflows.