ton-vulnerability-scanner

Catalogue généré le 2026-05-11

En une phrase

Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks.

Quand l'utiliser

Use when auditing FunC contracts.

Comment l'invoquer

Slash command : /ton-vulnerability-scanner (si exposé dans ton CLI)
Phrases déclencheurs : voir la description complète ci-dessous
Auto-invocation : sur demande explicite

Description complète

Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks. Use when auditing FunC contracts.

Pour aller plus loin

TON Vulnerability Scanner

1. Purpose

Systematically scan TON blockchain smart contracts written in FunC for platform-specific security vulnerabilities related to boolean logic, Jetton token handling, and gas management. This skill encodes 3 critical vulnerability patterns unique to TON's architecture.

2. When to Use This Skill

Auditing TON smart contracts (FunC language)
Reviewing Jetton token implementations
Validating token transfer notification handlers
Pre-launch security assessment of TON dApps
Reviewing gas forwarding logic
Assessing boolean condition handling

3. Platform Detection

File Extensions & Indicators

FunC files: .fc, .func

Language/Framework Markers

Project Structure

contracts/*.fc - FunC contract source
wrappers/*.ts - TypeScript wrappers
tests/*.spec.ts - Contract tests
ton.config.ts or wasm.config.ts - TON project config

(extrait — voir le SKILL.md complet pour la suite)

Source

Plugin : trailofbits/building-secure-contracts
Nom interne : ton-vulnerability-scanner
Fichier : /home/thymon/.claude/plugins/cache/trailofbits/building-secure-contracts/1.0.1/skills/ton-vulnerability-scanner/SKILL.md