The Open Network (TON) is a high-performance blockchain platform designed for scalability and efficiency, leveraging an asynchronous execution model and a multi-layered architecture. While TON's design offers significant advantages, it also introduces unique challenges for smart contract development and security. This paper introduces a comprehensive audit checklist for TON smart contracts, based on an empirical analysis of 34 professional audit reports containing 233 real-world vulnerabilities. The checklist addresses TON-specific challenges, such as asynchronous message handling, and provides actionable insights for developers and auditors. We also present detailed case studies of vulnerabilities in TON smart contracts, highlighting their implications and offering lessons learned. To validate practical utility, we conducted a practitioner survey (n=11 complete responses), confirming the checklist's value alongside automated tools. By adopting this checklist, developers and auditors can systematically identify and mitigate vulnerabilities, enhancing the security and reliability of TON-based projects. Our work bridges the gap between Ethereum's mature audit methodologies and the emerging needs of the TON ecosystem, fostering a more secure and robust blockchain environment.

翻译：开放网络（TON）是一个为可扩展性和效率设计的高性能区块链平台，采用异步执行模型和多层架构。尽管TON的设计具有显著优势，但它也为智能合约开发和安全性带来了独特挑战。本文基于对34份专业审计报告（包含233个真实世界漏洞）的实证分析，提出了一套TON智能合约综合审计检查清单。该清单针对异步消息处理等TON特有挑战，为开发者和审计人员提供了可操作的见解。我们还呈现了TON智能合约漏洞的详细案例研究，突出了其影响并总结了经验教训。为验证实用价值，我们开展了一项从业者调查（n=11份完整回复），确认了该清单与自动化工具相辅相成的价值。通过采用这份检查清单，开发者和审计人员可以系统地识别和缓解漏洞，从而提升基于TON项目的安全性和可靠性。我们的工作弥合了以太坊成熟审计方法与TON生态系统新兴需求之间的差距，助力构建更安全、更健壮的区块链环境。