ton-vulnerability-scanner

Auditing TON smart contracts for FunC vulnerabilities involves scanning the code to detect integer-as-boolean misuse, fake Jetton transfer notifications, and unsafe forward TON gas forwarding. The scanner outputs structured findings with mitigation guidance to harden TON dApps.

Unauthorized Jetton transfers in TON contracts are typically enabled by fake transfer notification patterns and improper sender validation. The scanner identifies these specific flaws in FunC code, validating sender integrity within transfer-notification flows to prevent unauthorized asset movement.

Unsafe gas forwarding in TON smart contracts allows execution to proceed without proper gas checks, potentially leading to unexpected contract behavior. The scanner detects forward TON patterns lacking proper gas accounting and provides remediation strategies to secure contract execution.

Yes, the scanner is specifically useful for Jetton wallet integrations and pre-launch security reviews. It validates sender integrity and gas accounting in Jetton-related wallets and transfer-notification flows, producing structured findings suitable for integration into security assessments.

Integer-as-boolean misuse in FunC code occurs when integer values are incorrectly evaluated as boolean conditions, causing logic errors. The scanner detects this vulnerability pattern in TON contracts and provides detection patterns alongside test and verification strategies.