ton-vulnerability-scanner

Auditing TON smart contracts involves scanning FunC code to identify critical vulnerabilities like integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks. The scanner analyzes insecure patterns and provides remediation guidance.

Common security vulnerabilities in FunC smart contracts include integer-as-boolean misuse, fake Jetton contracts, and forwarding TON without gas checks. Identifying these insecure patterns early prevents potential exploits and financial losses.

Checking for fake Jetton contracts in TON involves scanning the smart contract code for specific insecure patterns that mimic legitimate Jettons. The scanner detects these fake contracts and provides detailed explanations and code examples for remediation.

The vulnerability scanner primarily analyzes FunC contracts but also mentions analyzing Tact contracts. It scans for critical TON-specific vulnerabilities and provides detailed reports and remediation guidance for both.

Preventing forward TON without gas checks requires scanning the smart contract to identify missing gas validations. The scanner detects this specific vulnerability and provides code examples to implement proper gas checks before deployment.

Yes, you can scan a new TON DeFi protocol for security flaws before deployment by running the scanner on the contracts directory. It proactively identifies and helps fix potential vulnerabilities, ensuring the safety of user funds.