The Open Network (TON) is a high-performance blockchain platform designed for scalability and efficiency, leveraging an asynchronous execution model and a multi-layered architecture. While TON's design offers significant advantages, it also introduces unique challenges for smart contract development and security. This paper introduces a comprehensive audit checklist for TON smart contracts, based on an analysis of 34 professional audit reports containing 233 real-world vulnerabilities. The checklist addresses TON-specific challenges, such as asynchronous message handling, and provides actionable insights for developers and auditors. We also present detailed case studies of vulnerabilities in TON smart contracts, highlighting their implications and offering lessons learned. By adopting this checklist, developers and auditors can systematically identify and mitigate vulnerabilities, enhancing the security and reliability of TON-based projects. Our work bridges the gap between Ethereum's mature audit methodologies and the emerging needs of the TON ecosystem, fostering a more secure and robust blockchain environment.
翻译:开放网络(TON)是一个专为可扩展性和高效性设计的高性能区块链平台,其采用异步执行模型和多层架构。尽管TON的设计具有显著优势,但也为智能合约开发与安全带来了独特挑战。本文基于对包含233个现实世界漏洞的34份专业审计报告的分析,提出了一份针对TON智能合约的全面审计清单。该清单解决了TON特有的挑战,例如异步消息处理,并为开发者和审计人员提供了可操作的见解。我们还详细介绍了TON智能合约漏洞的案例研究,阐明其影响并总结经验教训。通过采用此清单,开发者和审计人员能够系统性地识别并缓解漏洞,从而提升基于TON项目的安全性与可靠性。我们的工作弥合了以太坊成熟审计方法与TON生态系统新兴需求之间的差距,有助于构建更安全、更稳健的区块链环境。