Does this replace a professional manual audit?

No. While it provides systematic checks for common patterns, it is designed as a developer aid and pre-audit tool. Critical financial applications should always undergo a comprehensive third-party manual audit.

How does it help fix identified issues?

For every vulnerability found, the skill generates a detailed report including the specific file location, an explanation of the attack scenario, and a corrected code implementation to fix the flaw.

Which vulnerabilities can this skill detect?

It focuses on three critical TON patterns: Fake Jetton contract exploits (missing sender checks), integer-as-boolean misuse (using 1 instead of -1), and improper gas forwarding logic.

What languages does this scanner support?

This skill specifically targets the FunC language (.fc and .func files), which is the primary language used for developing smart contracts on The Open Network (TON) blockchain.

Can it integrate with TON development frameworks?

Yes, it is designed to recognize project structures from popular tools like TON Blueprint and toncli, making it easy to run across your entire contracts directory.

TON Smart Contract Security Scanner

Name: TON Smart Contract Security Scanner
Author: monmacllcapp

bymonmacllcapp

0•

セキュリティとテスト

Audits TON blockchain smart contracts written in FunC to identify and remediate platform-specific security vulnerabilities.

The TON Vulnerability Scanner is a specialized security tool designed for developers building on The Open Network (TON). It systematically analyzes FunC smart contracts to detect three critical, architecture-specific risks: integer-as-boolean logic errors, fake Jetton contract exploits via missing sender validation, and improper gas management during TON forwarding. By providing automated detection patterns, detailed vulnerability reports, and code-based remediation steps, this skill ensures that dApps are secure, gas-efficient, and compliant with TON's unique execution environment before deployment.

主な機能

010 GitHub stars

02Automated FunC source code scanning for critical TON-specific vulnerabilities

03Validation of boolean logic using TON’s unique -1/0 integer standards

04Detailed reporting with vulnerable code snippets and recommended fixes

05Analysis of gas forwarding and message value handling to prevent contract drainage

06Detection of 'Fake Jetton' exploits through sender validation analysis

ユースケース

01Security auditing of FunC smart contracts before mainnet deployment

02Validating Jetton token implementations and transfer notification handlers

03Reviewing gas economics and fee calculations in complex TON dApps

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add monmacllcapp/skill-forks ton-vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill