ton-vulnerability-scanner

Auditing a TON smart contract involves scanning FunC code to detect critical vulnerabilities such as integer-as-boolean misuse, fake Jetton implementations, and missing forward TON gas checks, followed by applying specific mitigation strategies to secure the contract.

Common FunC vulnerabilities include fake Jetton contract implementations, integer-as-boolean misuse, and failing to check forward TON gas. These high-impact flaws can lead to severe financial loss if not audited before deployment.

Fix fake Jetton implementations by identifying the vulnerable code patterns during an audit and applying the recommended code examples and mitigation strategies provided to ensure proper contract integrity on the TON blockchain.

The scanner primarily analyzes TON smart contracts written in FunC to identify critical security vulnerabilities. It evaluates FunC and Tact contract patterns to report findings with severity and actionable fix recommendations.

Failing to check forward TON gas is an improper implementation that can cause transaction failures or unexpected behavior. The scanner identifies this missing gas check pattern and provides code examples to remediate the issue.