TON Security Analyzer

TSA is a static analysis tool based on symbolic execution and designed for smart contracts on the TON blockchain.

Powered by

100%

TSA analysis covers up to 90% of audit scope and can find vulnerabilities which auditors could miss.

Average analysis of TON smart contract by TSA runs less than 5 minutes.

TSA is designed for a few purposes: Detect possible TVM runtime errors, generate regression tests, and detect honeypots.

Detect Runtime Errors: Find possible misbehavior while processing integers (overflow/underflow, division by zero) and slices/builders.
Generate Tests: TSA is able to generate Blueprint-based tests based on discovered execution paths.
Honeypots Detection: TSA can detect and report malicious contracts that are created to fool users.

Features

We develop TSA as an open-source tool, which should give all TON smart contract developers opportunity to build secured and reliable products.

Based on symbolic execution for comprehensive smart contract analysis on the TON blockchain.

Find possible misbehavior while processing integers (overflow/underflow, division by zero) and slices/builders.

Generate Blueprint-based tests based on discovered execution paths that allow to fix expected behavior.

Detect and report malicious contracts that are created to fool users.

Works on TVM bitcode level, supporting smart contracts written in any language.

Inspired by and actively using the Universal Symbolic Virtual Machine (USVM).

FAQ

Find answers to common questions about TSA and how it can help you build secure smart contracts.