TON Vulnerability Scanner FAQs

Question 1

Can this skill fix the vulnerabilities it finds?

Accepted Answer

Yes, the scanner provides specific code recommendations and refactored snippets to fix identified security flaws directly within your FunC source files.

Question 2

Which vulnerabilities does this skill detect?

Accepted Answer

It focuses on three critical TON-specific patterns: improper boolean logic (using 1 instead of -1), missing sender checks in Jetton handlers (Fake Jetton vulnerability), and insufficient gas reservations for forwarded TON.

Question 3

What languages does the TON Vulnerability Scanner support?

Accepted Answer

It primarily supports FunC (.fc and .func files), the primary language for TON smart contracts, and can also identify project structures using the Tact language.

Question 4

Is this a replacement for a professional security audit?

Accepted Answer

While it's a powerful tool for catching common critical errors during development, it should be used as a pre-audit tool to harden code and not as a total replacement for a comprehensive manual security review.

Question 5

Does it support the Jetton standard?

Accepted Answer

Yes, it specifically analyzes transfer_notification handlers to ensure they follow the TEP-74 Jetton standard for secure token transfers and sender validation.

TON Vulnerability Scanner

主要功能

使用场景

TON Vulnerability Scanner

主要功能

使用场景