TONCO security record
As of 10 Nov 2026, TONCO has 1 audit report on Trustblock, by Trail of Bits, dated 16 Jan 2026. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits1
Newest first
| Report | Security firm | Date | Scope | Critical findings | Source |
|---|---|---|---|---|---|
| TONCO CLAMM DEX v1. | Security firm: Trail of Bits | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
Findings28
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 1 | 0 | 5 |
| Low | 2 | 0 | 2 |
HighFee calculation mismatch in PositionNFT burn operation causes incorrect fee growth tracking for token1TONCO CLAMM DEX v1. · Trail of Bits · 16 Jan 2026Fixed
The report gives no description here.
Open the reportHighProxy TON balance of the router can be stolenTONCO CLAMM DEX v1. · Trail of Bits · 16 Jan 2026Fixed
The report gives no description here.
Open the reportHighThe router’s TON balance can be drained via negative amount calculationTONCO CLAMM DEX v1. · Trail of Bits · 16 Jan 2026Fixed
The report gives no description here.
Open the reportMediumMalformed multihop cell can lead to jetton lossTONCO CLAMM DEX v1. · Trail of Bits · 16 Jan 2026Fixed
The report gives no description here.
Open the reportMediumOccupied ticks guard blocks addition of liquidity to existing ticks and allows MAX_USER_TICKS overflowTONCO CLAMM DEX v1. · Trail of Bits · 16 Jan 2026Fixed
The report gives no description here.
Open the reportMediumOverflow in getMaxLiquidityForAmount0Precise can result in fund lossTONCO CLAMM DEX v1. · Trail of Bits · 16 Jan 2026Fixed
The report gives no description here.
Open the reportMediumowner_address can be spoofed to bypass the pool lock in the swapOperation functionTONCO CLAMM DEX v1. · Trail of Bits · 16 Jan 2026Fixed
The report gives no description here.
Open the reportMediumprice_sqrt can be manipulated by swapping through an empty poolTONCO CLAMM DEX v1. · Trail of Bits · 16 Jan 2026Fixed
The report gives no description here.
Open the reportLowRouter will keep the jettons if the transfer notification contains an unsupported operationTONCO CLAMM DEX v1. · Trail of Bits · 16 Jan 2026Fixed
The report gives no description here.
Open the reportLowtimelock_delay cannot be updatedTONCO CLAMM DEX v1. · Trail of Bits · 16 Jan 2026Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="tonco"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us