TON Vesting

CertiK5 Aug 2022Code version: not recorded (see the report)

Audit

CertiK reviewed TON (TON Vesting) on 5 Aug 2022: 6 findings, 0 critical; 2 marked fixed, 4 open.

No open critical findings

Open the report Open TON’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	0	0
Medium	0	0
Low	4	2

Low`uint` values are stored as `int`Open

`seqno` and `subwallet_id` are saved into storage via `store_int()` but loaded via `load_uint()`. This can lead to exceptions in case of negative/too big values.

LowCode DuplicationOpen

Loading data from the storage is done by the identical code several times. `locked_amount` calculation is done by the identical code two times.

LowFunction return value and argument types are notOpen

Function declarations contain `_` instead of real return type. Argument types are omitted.

LowUsing of arbitrary integers in bitwise logical opOpen

`allow_elector` and `can_use_restricted` are 1-bit uint. However, they are used as part of logical expression. This can lead to accidental errors, like: ```c if (3 & 4) { ;; never happens } ```