ton-vulnerability-scanner
Scans TON blockchain FunC smart contracts for security vulnerabilities like missing sender checks and gas issues.
Install
npx skills add https://github.com/trailofbits/skills --skill ton-vulnerability-scannerStats
| Total installs | 1,172 |
| Weekly installs | 1.2K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Detects FunC contracts via file extensions (.fc, .func) and TON project structure (Blueprint, toncli configs)
- Identifies three vulnerability patterns: missing sender validation in Jetton handlers, incorrect boolean logic using positive integers instead of -1/0, and forward TON amounts without gas checks
- Provides detailed findings with vulnerable code snippets, attack scenarios, proof-of-concept examples, and recommended fixes
- Includes testing strategies with unit and integration test templates for validating boolean operations, rejecting fake Jetton transfers, and verifying gas constraints
Tags
Related skills
| Skill | Installs | vs ton-vulnerability-scanner |
|---|---|---|
| aflpp | 1,161 | -11 |
| okx-security | 1,052 | -120 |
| semgrep-rule-creator | 1,229 | +57 |
| auth-wechat-miniprogram | 1,073 | -99 |
| testing-handbook-generator | 1,189 | +17 |
FAQ
- How many installs does ton-vulnerability-scanner have?
- ton-vulnerability-scanner has 1,172 total installs and 1.2K installs this week.
- Where is ton-vulnerability-scanner hosted?
- ton-vulnerability-scanner is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does ton-vulnerability-scanner have?
- ton-vulnerability-scanner has 4.0K GitHub stars.
- When was ton-vulnerability-scanner first indexed?
- OrangeBot.AI first indexed ton-vulnerability-scanner on Jan 19, 2026.
- How do I install ton-vulnerability-scanner?
- Run: npx skills add https://github.com/trailofbits/skills --skill ton-vulnerability-scanner