ton-vulnerability-scanner

Detect critical security vulnerabilities in TON smart contracts.

Updated Jun 9, 2026
One-click install
npx skills add https://github.com/iiammae/opero --skill ton-vulnerability-scanner-iiammae
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ton-vulnerability-scanner
Source: https://github.com/iiammae/opero/tree/main/.agents/skills/ton-vulnerability-scanner
Command: npx skills add https://github.com/iiammae/opero --skill ton-vulnerability-scanner-iiammae

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires TON Blueprint, toncli, ton-compiler, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill identifies and mitigates critical security vulnerabilities in TON smart contracts, ensuring robustness and trustworthiness.

Core Features & Use Cases

  • Vulnerability Detection: Identifies 3 critical vulnerabilities unique to TON's architecture.
  • Auditing Support: Facilitates the auditing of TON smart contracts written in FunC.
  • Use Case: Prior to deploying a new dApp, use this Skill to scan for vulnerabilities in the FunC contracts to prevent security breaches.

Quick Start

Run the ton-vulnerability-scanner skill on your FunC contracts to automatically scan for security vulnerabilities.

Frequently Asked Questions about ton-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan TON smart contracts for security vulnerabilities before deployment?

Pre-launch security assessment for TON dApps involves scanning FunC contracts to mitigate critical vulnerabilities like fake Jetton contracts and forward TON without gas checks, ensuring robustness before deployment.

What critical vulnerabilities can be detected in FunC smart contracts?

Vulnerability detection for TON architecture targets integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks, preventing security breaches in your dApps.

Do I need TON Blueprint and toncli to audit FunC smart contracts?

Yes, vulnerability scanning for TON smart contracts requires TON Blueprint, toncli, and ton-compiler as dependencies to execute the security auditing process on your FunC codebase.

How do I run a vulnerability scan on FunC contracts using toncli?

To run a vulnerability scan on FunC contracts, execute the Skill within your toncli and TON Blueprint environment to automatically detect critical security flaws in your TON dApp.

What is the best way to prevent fake Jetton contract vulnerabilities in TON?

The best way to prevent fake Jetton contract vulnerabilities in TON is to perform pre-launch security auditing using a vulnerability scanner to identify and mitigate these specific architectural flaws.