Sample audit report — see how a Hackerbane report is structured. Open the report →

TON security review

TON is a high-throughput blockchain built around asynchronous messages between contracts, with jettons as its token standard and FunC and Tact as its languages. Hackerbane audits TON contracts, from jetton minters to the bounce handlers that keep balances honest.

What we review

TON bugs live in the message flow: a balance credited before the bounce returns, or an opcode anyone can send. The storage-slot patterns Ethereum auditors know do not apply, and our review follows TON's actor model instead.

  • Jetton minter and wallet contracts.
  • Opcodes that change ownership or mint.
  • Bounce and bounced-message handlers.
  • Services that send internal messages from a hot wallet.

FunC and Tact

We read both languages natively and review compiled behavior where the two differ. A jetton audit covers the minter, the wallet contract, and every message path between them.

Next step

Request an audit

Share your FunC or Tact repo, scope, and timeline – we'll propose an audit plan and estimate.