Security auditing for the TON Foundation: a collaborative approach to secure ecosystem development
SmartState is delighted to have collaborated with the TON Foundation, working together to optimize functional components of the TON protocol and successfully resolving unique security goals for the TON ecosystem projects. Our joint efforts have led to the development of an effective security audit methodology tailored specifically to address specific challenges facing the TON blockchain.
Unique Methodology for the TON protocol
As a one-of-a-kind protocol, TON requires innovative solutions that cater to its distinct security needs. SmartState’s comprehensive auditing approach for each crypto project on the TON protocol includes (but not limited to):
- Best code practices
- FA2 compliance (if applicable)
- Logical bugs and code logic issues
- Error handling issues
- Cryptographic errors
- Protocol and header parsing errors
- Private data leaks
- Unchecked call return method
- Code with no effects
- Unused vars
- Use of deprecated functions
- Authorization issues
- Reentrancy
- Arithmetic overflows/underflows
- Hidden malicious code
- External contract referencing
- Short address/parameter attack
- Uninitialized storage pointers
- Floating points and precision
- Message rebounce
- The order of data import
- Consider the case where a message fails
- Cost refund
- Cell data and storage params
- Security of concurrent message calls and locks
- Access control is enforced properly
- Asynchronous messages do not create race condition
- Address formats handled correctly
- Gas accounting is correct
- Bounced messages are handled correctly
- The funds are reserved correctly
- Function specifiers are correct
- Logic is implemented properly
Collaborative Approach: Security benefits
We are delighted to join the TON ecosystem, and we are committed to ensuring the security of projects and developers alike. In an ever-evolving blockchain landscape where innovation often comes with new security challenges, SmartState’s goal is to create conditions that empower every project and developer to feel confident in protecting their work and data. Partnering with the TON Foundation not only reinforces SmartState’s commitment to the highest safety standards, but also provides an opportunity to make a meaningful contribution to the TON ecosystem.
We operate following recognized international standards such as ISO/IEC 27001 and NIST, which ensures strict control over all processes. SmartState’s methodology includes continuous audits, risk assessments and the implementation of innovative solutions tailored to the unique features of the TON blockchain platform. Our approach goes beyond meeting the highest security standards — we are constantly and proactively looking for new ways to improve security and to protect the entire ecosystem from current and future threats.
For developers, this means being assured that their projects can grow and develop in a secure environment which enables them to focus on innovation, knowing that their infrastructure and data are robustly protected.
Our shared goal is to create a trusted environment where every participant can safely develop and implement their solutions. We aim to build a future where security and innovation walk side by side, ensuring sustainable growth for all ecosystem participants.
Conclusion
Our collaboration with the TON Foundation marks an important milestone in our mission to safeguard the blockchain ecosystem community and raise the overall security level of the industry. By working together, we are committed to delivering cutting-edge auditing services that cater specifically to the unique needs of TON projects. Join us in this journey as we strive to create a secure and innovative environment for all participants in the TON ecosystem.
About SmartState
Launched in 2019 and incorporated in Dubai, SmartState is an independent Web3 security company providing top-notch external security audits and enterprise level blockchain security services.
We’ve built a professional team of skilled white-hat hackers, cyber security experts, analysts and developers. The SmartState team have extensive experience in ethical hacking and cyber security, blockchain & Web3 development, financial and economic sectors.
We’ve conducted security audits for >300 projects so far. None of code audited by SmartState had been hacked. Blockchains like TON, large projects like EYWA, 1inch and CrossCurve & exchanges such as Binance and KuCoin rely on our experience.
🚀 Concerned about your project & assets security? Book free security consultation! Let’s get in touch: info@smartstate.tech
Stay tuned and find more about us and what we provide on our:
Disclaimer
An audit does not provide any warranties regarding the code security. We presume that a single audit cannot be considered totally sufficient and always recommend several independent audits and a public bug bounty program to ensure code security.
Always DYOR. This article does not constitute legal, financial or investment advice, and we are not responsible for any decisions based on our analysis or recommendations.
