ton-vulnerability-scanner

Scan TON FunC smart contracts for boolean, Jetton, and gas-forward vulnerabilities.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/DobricLilujun/LabAgentSkill --skill ton-vulnerability-scanner-dobriclilujun
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ton-vulnerability-scanner
Source: https://github.com/DobricLilujun/LabAgentSkill/tree/main/skillsHub/skills_scaling/building-secure-contracts/skills/ton-vulnerability-scanner
Command: npx skills add https://github.com/DobricLilujun/LabAgentSkill --skill ton-vulnerability-scanner-dobriclilujun

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Systematically scan TON blockchain smart contracts written in FunC for platform-specific security vulnerabilities related to boolean logic, Jetton token handling, and gas management. This skill targets TON FunC audits to identify 3 critical vulnerability patterns and provide actionable remediation guidance.

Core Features & Use Cases

  • Detect 3 critical vulnerability patterns: integer-as-boolean misuse, fake Jetton contracts, and unsafe gas-forwarding logic.
  • Analyze FunC source files (.fc/.func) and related wrappers to produce a structured vulnerability report with file references.
  • Applicable to pre-launch audits of TON dApps, Jetton-related contracts, and security reviews of gas forwarding mechanisms.

Quick Start

Scan your TON FunC contracts for the three vulnerability patterns and generate a comprehensive vulnerability report.

Frequently Asked Questions about ton-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit TON FunC smart contracts for security vulnerabilities?▼

To audit TON FunC contracts, scan the source files to identify critical vulnerability patterns including integer-as-boolean misuse, fake Jetton contracts, and unsafe gas-forwarding logic. The process generates a structured report with file references and remediation suggestions.

What security vulnerabilities should I look for in TON Jetton contracts?▼

When reviewing TON Jetton contracts, look for fake Jetton contract vulnerabilities alongside unsafe gas-forwarding logic. A targeted FunC audit detects these critical patterns and provides actionable remediation guidance.

Can I scan .fc and .func files for boolean handling issues in TON?▼

Yes, you can analyze FunC source files (.fc/.func) to detect integer-as-boolean misuse. The scan enforces platform detection for FunC files and assesses pattern-based risks to produce a structured vulnerability report.

What is the best way to check gas-forwarding patterns in TON dApps before launch?▼

The best way to check gas-forwarding patterns is running a pre-launch audit of TON dApps using pattern-based risk assessment. This identifies unsafe gas-forwarding logic in FunC code and provides structured remediation suggestions.

Does this vulnerability scanner require specific dependencies to analyze FunC code?▼

No, the vulnerability scanner operates without external dependencies. It directly enforces platform detection on FunC files and evaluates them against known security patterns to output a comprehensive vulnerability report.

Why do I need a specialized scanner for TON blockchain smart contracts?▼

You need a specialized scanner because TON FunC contracts have platform-specific vulnerabilities like boolean handling and Jetton logic issues that generic tools miss. A specialized audit ensures accurate pattern-based risk assessment and targeted remediation.