TonBit Discovers Critical Vulnerability in TON VM: Earns Official Acknowledgment from TON Blockchain
Singapore, Singapore, December 2nd, 2024,
The TON blockchain ecosystem has recently undergone a significant security upgrade, thanks to the groundbreaking efforts of TonBit, a core sub-brand of BitsLab. TonBit identified and assisted resolve a core vulnerability in the TON Virtual Machine (VM), a flaw that could have severely compromised the network’s stability and security.
The vulnerability, linked to the VM’s handling of nested Continuations, presented a potential risk of exploitation by malicious smart contracts. If leveraged, the issue could have enabled attackers to disrupt validator nodes without the need to spend any TON tokens, posing a serious challenge to the network’s availability.
TonBit’s team demonstrated exceptional technical expertise by swiftly pinpointing the vulnerability and proposing an innovative solution. By replacing the recursive mechanism in the VM’s control flow with an iterative approach, TON team not only eliminated the risk but also enhanced the resilience of the TON ecosystem. The TON blockchain’s official team publicly acknowledged TonBit’s pivotal role in safeguarding the network in their latest release notes.
Strengthening the TON Ecosystem Through Innovation and Security
As the Primary Security Assurance Provider (SAP) within the TON ecosystem, TonBit continues to lead the charge in ensuring network stability and user asset protection. From identifying critical vulnerabilities to designing effective solutions, TonBit has laid a robust foundation for the long-term growth of the TON blockchain. Its expertise extends beyond vulnerability management, encompassing advancements in network security architecture, data protection, and secure blockchain application development.
The discovery and assisted resolution of this vulnerability is a testament to TonBit’s unwavering commitment to the health and safety of decentralized ecosystems. This achievement further solidifies TonBit’s reputation as a leading authority in blockchain security and highlights its dedication to driving innovation for the benefit of users and developers worldwide.
Recognition and Future Vision
TON blockchain’s acknowledgment of TonBit underscores the indispensable role the team plays in the ecosystem as its Primary Security Assurance Provider. This collaboration not only reinforces TonBit’s industry leadership but also exemplifies its steadfast resolve to advance the security and sustainability of decentralized networks.
As the blockchain industry evolves, TonBit remains focused on delivering cutting-edge solutions and fostering a secure environment for developers, projects, and users alike. By combining technical innovation with a deep understanding of blockchain dynamics, TonBit is poised to continue shaping the future of Web3 security.
About TonBit
TonBit, a core sub-brand of BitsLab, is a trusted security expert and early builder within the TON ecosystem. As the Primary Security Assurance Provider (SAP) for the TON blockchain, TonBit specializes in comprehensive security audits, including Tact and FunC language audits, ensuring the integrity and resilience of projects built on TON. Officially endorsed by TON, TonBit has successfully audited numerous high-profile projects such as Catizen, Algebra, UTonic, Ton Batch Sender, TonUp, PixelSwap, Tradoor, Miniton, Thunder Finance, and nearly 20 other projects on TON, demonstrating its expertise in securing TON-based solutions.
Additionally, TonBit has identified multiple vulnerabilities in the TON blockchain, including a critical issue in TON VM. See details here.
TonBit also hosted the highly successful TON CTF competition, which attracted thousands of participants and garnered significant exposure, underscoring its leadership in the space. More details: https://ctf.tonbit.xyz/
Readers can explore TonBit’s Sample Audit Reports to understand its approach to security here.
For more information about TON’s SAP, Readers can visit the TON documentation.
TonBit Official Links:
Website: https://www.tonbit.xyz/
Twitter: https://x.com/tonbit_
Telegram: https://t.me/BitsLabHQ