ton-vulnerability-scanner

Detect security vulnerabilities in TON smart contracts written in FunC.

1|Updated Apr 7, 2026
One-click install
npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill ton-vulnerability-scanner-rohanbhatia27
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ton-vulnerability-scanner
Source: https://github.com/rohanbhatia27/rohanstutoring-redesign/tree/main/.agents/skills/ton-vulnerability-scanner
Command: npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill ton-vulnerability-scanner-rohanbhatia27

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ton-cli, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the detection of security vulnerabilities in TON smart contracts, ensuring the safety and reliability of your applications.

Core Features & Use Cases

  • Vulnerability Detection: Automatically scan FunC-based smart contracts for three critical vulnerabilities.
  • Custom Reports: Generate detailed reports with file references and severity levels.
  • Quick Fix Recommendations: Provide direct recommendations for fixing detected issues.
  • Use Case: Before deploying a new dApp, use this Skill to perform a pre-launch security audit to catch potential vulnerabilities early.

Quick Start

Use the ton-vulnerability-scanner skill to scan the smart contracts in the 'contracts' directory of your TON project.

Frequently Asked Questions about ton-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan TON smart contracts for vulnerabilities before deployment?

To scan TON smart contracts for vulnerabilities, you can automate the detection of security flaws in FunC language files. This process checks for integer overflow, fake Jetton contracts, and gas checks, providing immediate fix recommendations and detailed reports with file references and severity levels.

What security issues should I look for in FunC smart contracts?

When auditing FunC smart contracts, you should look for integer overflow, fake Jetton contracts, and missing gas checks. Automating this security audit identifies these critical patterns and provides direct recommendations for fixing the detected issues before your dApp launch.

Does TON vulnerability scanning require any specific command-line tools?

TON vulnerability scanning requires the ton-cli command-line tool for execution. You must have this dependency installed in your environment to run the automated detection scripts that identify security vulnerabilities in your FunC smart contracts.

Can I use an automated security audit for TON dApp pre-launch checks?

You can use an automated security audit for TON dApp pre-launch checks by scanning the smart contracts in your project's directory. This generates custom reports with severity levels and file references, catching potential vulnerabilities early before deployment.

What is the best way to detect fake Jetton contracts in TON?

The best way to detect fake Jetton contracts in TON is to use an automated vulnerability scanner that checks FunC code for specific malicious patterns. This approach identifies the fake contracts and provides immediate fix recommendations to ensure application safety.