Ton Vulnerability Scanner

Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks. Use when auditing FunC contracts. (project, gitignored)

plurigrid 937c68e 2 files · 2.3 KB Updated

File contents

Ton Vulnerability Scanner Skill

Trit: -1 (MINUS) Category: building-secure-contracts Author: Trail of Bits Source: trailofbits/skills License: AGPL-3.0

Description

Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks. Use when auditing FunC contracts. (project, gitignored)

When to Use

This is a Trail of Bits security skill. Refer to the original repository for detailed usage guidelines and examples.

See: https://github.com/trailofbits/skills

Related Skills

  • audit-context-building
  • codeql
  • semgrep
  • variant-analysis

SDF Interleaving

This skill connects to Software Design for Flexibility (Hanson & Sussman, 2021):

Primary Chapter: 9. Generic Procedures

Concepts: dispatch, multimethod, predicate dispatch, generic

GF(3) Balanced Triad

ton-vulnerability-scanner (○) + SDF.Ch9 (○) + [balancer] (○) = 0

Skill Trit: 0 (ERGODIC - coordination)

Connection Pattern

Generic procedures dispatch on predicates. This skill selects implementations dynamically.

plurigrid/asi/tree/main/skills/ton-vulnerability-scanner commit 937c68e389

Frequently asked questions

npx skillmds@latest add plurigrid/ton-vulnerability-scanner