awesome-ton-security

A curated list of awesome Ton security resources, continuously updated.

Articles and Blogs

• TACT FOR TON, UNCOVERING THIS LANGUAGE FEATURES AND SECURITY BEST PRACTICES
• Secure Smart Contract Programming in FunC: Top 10 Tips for TON Developers
• Secure Smart Contract Programming
• Things to Focus on while Working with TON Blockchain
• Random number generation
• Generation of block random seed
• TON Connect for Security TON Connect
• TON Blockchain Security Analysis and Potential Risk Assessment
• How does the False Top-up attack break through the defense of the exchange?
• Security risk analysis of FunC language in TON blockchain smart contracts
• Patch Thursday — Identifying Vulnerabilities in TON: Killing All Nodes
• TON Validator Nodes Maintenance and Security Guide
• TonConnect SDK 的 Origin 伪造风险分析
• TON生态安全指南：常见的钓鱼形式有哪些？
• 初识 TON：账号、Token、交易与资产安全
• TON Ecosystem Phishing Prevention Guide
• How to conduct a comprehensive security audit for projects built on TON?
• TON Ecosystem Panorama and Security Report 2024
• Toncoin Smart Contract Security Best Practices
• Beosin硬核研究 | 从风险到防护：TON智能合约的安全隐患与优化建议

CTF

• TON Hack Challenge
  • Code
  • Writeup
• Tonbit ctf
  • Tonbit ctf
  • Writeup

Audit Report

• TonBit
• Certik

Hack Event

• https://x.com/TonUP_io/status/1793006027413258631
• https://community.tonup.io/t/incident-report-of-tonup-decimal-discrepancy-of-the-deprecated-up-token/504
• https://x.com/MetaTrustAlert/status/1769956360135844284
• https://x.com/realScamSniffer/status/1788749945459318868
• https://x.com/DegenonTON/status/1779729261001326882
• https://x.com/DegenonTON/status/1783738312966189355
• https://x.com/tonfish_tg/status/1753829630644273215
• https://x.com/_yeminiz/status/1788131616943943874

Tools

• Misti – A static program analyzer for smart contracts on the TON Blockchain.

Bug Bounty

• TON security bug bounty
• STON.fi
• Tonstakers
• Ton Whales
• TON Diamonds Web
• TON Tapps Bot
• TON Web Products

Security Assurance Providers(SAP)

• https://docs.ton.org/develop/companies/auditors