ton-vulnerability-scanner

Detect TON vulnerability patterns in FunC contracts and report mitigations.

Updated Jan 17, 2026
One-click install
npx skills add https://github.com/mejango/juicy-vision --skill ton-vulnerability-scanner-mejango
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ton-vulnerability-scanner
Source: https://github.com/mejango/juicy-vision/tree/main/.claude/plugins/building-secure-contracts/skills/not-so-smart-contracts-scanners/ton-vulnerability-scanner
Command: npx skills add https://github.com/mejango/juicy-vision --skill ton-vulnerability-scanner-mejango

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill identifies and reports TON vulnerability patterns in FunC contracts to enable secure audits.

Core Features & Use Cases

  • Detects three critical TON vulnerabilities: integer-as-boolean misuse, fake Jetton transfers, and forward TON without gas checks.
  • Guides security reviews for FunC contracts, Jetton workflows, and gas-management logic.
  • Provides remediation guidance, references, and testing workflows to validate fixes.

Quick Start

Run the TON vulnerability scanner against your TON contracts to generate a security report and recommended mitigations.

Frequently Asked Questions about ton-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit TON smart contracts for vulnerabilities in FunC?

To audit TON smart contracts, you scan FunC source code to identify critical vulnerability patterns like integer-as-boolean misuse, fake Jetton transfers, and forward TON without gas checks. The scanner flags findings with references and guides fixes.

What are common FunC security issues when building Jetton workflows?

Common FunC security issues in Jetton workflows include fake Jetton transfers, integer-as-boolean misuse, and forwarding TON without gas checks. Auditing identifies these patterns and provides remediation guidance to secure contracts.

Does this TON vulnerability scanner detect fake Jetton transfer patterns?

Yes, the TON vulnerability scanner detects fake Jetton transfer patterns. It analyzes contract sources to flag these specific vulnerabilities alongside integer-as-boolean misuse and forward TON without gas checks.

How do I fix forward TON without gas checks in my FunC contract?

To fix forward TON without gas checks, the scanner provides remediation guidance and testing workflows. It identifies the vulnerable pattern in your FunC contract sources and recommends mitigations to validate the fixes.

Can I use this scanner for general code review on TON smart contracts?

Yes, you can use this scanner for general code review on TON smart contracts. It guides security reviews for FunC contracts, Jetton workflows, and gas-management logic by identifying and reporting vulnerability patterns.

What is the best way to test mitigations for TON smart contract vulnerabilities?

The best way to test mitigations for TON smart contract vulnerabilities is to follow the scanner's guided testing workflows. It flags findings with references and provides specific remediation guidance to validate fixes effectively.