ton-vulnerability-scanner

To audit FunC smart contracts for security vulnerabilities on TON, you can scan your project's code to automatically identify critical issues like integer-as-boolean misuse and fake Jetton contracts. The scanner provides detailed code analysis and specific mitigation strategies for each detected vulnerability pattern.

Before deploying a TON smart contract, check for three critical vulnerabilities: integer-as-boolean misuse, fake Jetton contracts, and forwarding TON without gas checks. Scanning for these platform-specific flaws prevents potential exploits and financial loss in decentralized applications.

Yes, you can use this vulnerability scanner to audit Tact contracts in your TON project. It supports analyzing both FunC and Tact contracts within your project directories to identify vulnerable patterns and provide specific code fixes.

The best way to detect fake Jetton contracts in FunC code is to run an automated vulnerability scan on your TON smart contracts. The scanner analyzes your codebase for this specific pattern, providing detailed code references and mitigation strategies to fix the identified issue.

Forwarding TON without gas checks causes security issues because it allows operations to proceed without verifying sufficient transaction fees, potentially leading to unexpected contract behavior or exploitation. The scanner detects this pattern in FunC contracts and provides specific code fixes to mitigate the risk.