Good day everyone,
I hope you are all having a good day, welcome to CryptoGod-1's blog on all things crypto. In this post I will be looking at the issued related to the TON network as highlighted in CertiK's latest report.
Tact's Hidden Security Traps
The blockchain security firm CertiK have revealed that their latest audit has uncovered potential security risks in Tact, the programming language used for smart contracts on the TON blockchain. Their new security report has highlighted concerns over the Open Telegram Network (TON). This is a blockchain platform known for its user-friendly approach to creating smart-contracts.
CertiK highlighted the potential vulnerabilities in Tact, the programming language specifically designed for TON. Tact aims to simplify development while also enhancing security, but the audit showed that certain coding practices could inadvertently expose the smart contracts to risk.
CertiK compares Tact to its predecessor, FunC, and noted that a number of frequent mistakes are made when developers use the language. These errors can lead to transaction failures, loss of funds, and exploitable security gaps.
One of the major issues highlighted was Tact’s strict address format. This format has inconsistencies with existing standards, such as TEP-74, and this could lead to failed transactions or lost tokens. CertiK flagged the challenges in managing concurrent operations as the TON blockchain does manage to avoid like reentrancy, which is common on Ethereum, but it has an unpredictable transaction order which could facilitate attacks done on exploiting timing difference.
CertiK also noted that developers need to explicitly organise data within smart contracts as they flagged an area of concern being data serialization. Failure on developers to do so could results in misinterpretations and unpredictable program behaviour. The report goes on to highlight potential errors in Tact’s handling of numbers, which could lead to glitches if developers are not vigilant.
Gas is also an issue, with CertiK noting the importance of managing 'gas' as any improper estimations and control of gas usage by developers could cause transactions to fail midway or potentially drain funds from a contract.
Have a great day.
Peace. CryptoGod-1.
Referral Links and Follow Me:
