ton-vulnerability-scanner

ton vulnerability scanner

trailofbits 6.2k ↓ 3.7k CC-BY-SA-4.0 updated 28d ago
Claude Code
View source ↗

What it does

  • Auditing TON smart contracts (FunC language)
  • Reviewing Jetton token implementations
  • Validating token transfer notification handlers
  • Pre-launch security assessment of TON dApps
  • Reviewing gas forwarding logic
  • Assessing boolean condition handling
  • FunC files: .fc, .func

Requirements & configuration

  • Reviewing Jetton token implementations
  • Validating token transfer notification handlers
  • TON contracts require thorough manual review:

Derived from the skill's own SKILL.md documentation · extracted 2026-07-23

ton vulnerability scanner

Source

Repository: https://github.com/trailofbits/skills

ton-vulnerability-scanner FAQ

What does the ton-vulnerability-scanner skill do?

Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks. Use when auditing FunC contracts. Auditing TON smart contracts (FunC language) Reviewing Jetton token implementations

What does ton-vulnerability-scanner require?

Reviewing Jetton token implementations Validating token transfer notification handlers TON contracts require thorough manual review:

How do I install ton-vulnerability-scanner?

Run: npx -y skills add https://github.com/trailofbits/skills --skill ton-vulnerability-scanner --agent claude-code — the source lives at github.com/trailofbits/skills.

Maintain ton-vulnerability-scanner?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[ton-vulnerability-scanner on getagentictools](https://getagentictools.com/skills/trailofbits-skills-ton-vulnerability-scanner?ref=badge)
npx agentictools info skills/trailofbits-skills-ton-vulnerability-scanner

The second line is the CLI lookup for this page — handy in READMEs and docs.