Skip to content

Commit

Permalink
added TON Blockahin audits info
Browse files Browse the repository at this point in the history
  • Loading branch information
SwiftAdviser committed Nov 27, 2024
1 parent 4f49fba commit 12b2265
Show file tree
Hide file tree
Showing 10 changed files with 53 additions and 0 deletions.
Binary file added audits/TON_Blockchain_CertiK.pdf
Binary file not shown.
Binary file not shown.
Binary file added audits/TON_Blockchain_SlowMist.pdf
Binary file not shown.
Binary file added audits/TON_Blockchain_ToB.pdf
Binary file not shown.
Binary file added audits/TON_Blockchain_tonlib_Zellic.pdf
Binary file not shown.
Binary file added audits/TVM_Upgrade_ToB_2023.pdf
Binary file not shown.
Binary file added audits/TVM_and_Fift_ToB.pdf
Binary file not shown.
43 changes: 43 additions & 0 deletions docs/v3/concepts/dive-into-ton/ton-blockchain/security-measures.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,43 @@
# Security Audits

The security of the TON Blockchain ecosystem is of utmost importance. Below is a summary of completed audits for key components of the TON Blockchain, conducted by renowned auditing firms.

## TON Blockchain

The core blockchain modules were audited to ensure the robustness and security.

**Audit Firms**: Trail of Bits, SlowMist, CertiK
**Audit Reports**:
- [Trail of Bits: TON Blockchain Audit Report](https://docs.ton.org/audits/TON_Blockchain_ToB.pdf)
- [SlowMist: TON Blockchain Audit Report](https://docs.ton.org/audits/TON_Blockchain_SlowMist.pdf)
- [CertiK: TON Blockchain Audit Report](https://docs.ton.org/audits/TON_Blockchain_CertiK.pdf)
- [CertiK: TON Masterchain Contracts Formal Verification](https://docs.ton.org/audits/TON_Blockchain_Formal_Verification_CertiK.pdf)

## TON Blockchain Library (tonlib)

Zellic conducted a security assessment for TON from October 16th to November 17th, 2023. During this engagement, Zellic reviewed Tonlib’s code for security vulnerabilities, design issues, and general weaknesses in security posture.

**Audit Firm**: Zellic
**Audit Report**:
- [Zellic: Audit Report](https://docs.ton.org/audits/TON_Blockchain_tonlib_Zellic.pdf)

## TVM and Fift

The TON Virtual Machine and the Fift programming language.

**Audit Firm**: Trail of Bits
**Audit Report**:
- [Trail of Bits Audit Report - TVM & Fift](https://docs.ton.org/audits/TVM_and_Fift_ToB.pdf)

## TVM Upgrade 2023.07

TVM Upgrade 2023.07 were analyzed for security and potential vulnerabilities.

**Audit Firm**: Trail of Bits
**Audit Report**:
- [Trail of Bits Audit Report - TVM Upgrade](https://docs.ton.org/audits/TVM_Upgrade_ToB_2023.pdf)

---

## Bug Bounty Program
To further enhance the security of the TON ecosystem, we encourage security researchers and developers to participate in the [TON Blockchain Bug Bounty Program](https://github.com/ton-blockchain/bug-bounty).
9 changes: 9 additions & 0 deletions docs/v3/documentation/tvm/changelog/tvm-upgrade-2023-07.md
Original file line number Diff line number Diff line change
Expand Up @@ -281,3 +281,12 @@ Currently it is difficult to calculate cost of sending message in contract (whic

- `SENDMSG` takes a cell and mode as input. Creates an output action and returns a fee for creating a message. Mode has the same effect as in the case of SENDRAWMSG. Additionally `+1024` means - do not create an action, only estimate fee. Other modes affect the fee calculation as follows: `+64` substitutes the entire balance of the incoming message as an outgoing value (slightly inaccurate, gas expenses that cannot be estimated before the computation is completed are not taken into account), `+128` substitutes the value of the entire balance of the contract before the start of the computation phase (slightly inaccurate, since gas expenses that cannot be estimated before the completion of the computation phase are not taken into account).
- `SENDRAWMSG`, `RAWRESERVE`, `SETLIBCODE`, `CHANGELIB` - `+16` flag is added, that means in the case of action fail - bounce transaction. No effect if `+2` is used.


## Security Audits

The upgrade to the TON Virtual Machine (TVM) were analyzed for security and potential vulnerabilities.

- **Audit Firm**: Trail of Bits
- **Audit Report**:
- [Trail of Bits Audit Report - TVM Upgrade](https://docs.ton.org/audits/TVM_Upgrade_ToB_2023.pdf)
1 change: 1 addition & 0 deletions sidebars/concepts.js
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,7 @@ module.exports = [
'v3/concepts/dive-into-ton/ton-blockchain/ton-networking',
'v3/concepts/dive-into-ton/ton-blockchain/sharding',
'v3/concepts/dive-into-ton/ton-blockchain/blockchain-comparison',
'v3/concepts/dive-into-ton/ton-blockchain/security-measures',
],
},
{
Expand Down

0 comments on commit 12b2265

Please sign in to comment.