Positive Web3
132 subscribers
2 photos
13 links
Web3 Security Research audit@positive.com
x.com/PositiveWeb3
GitHub.com/PositiveSecurity
Download Telegram
#update

The "update v2" commit makes changes to the README.md file of the TON smart contract audit guide (https://github.com/PositiveSecurity/ton-audit-guide), with the main points summarized as follows:

Restructuring Security Recommendations:
- Updated guidelines on operation independence, using the carry-value pattern, protection against replay attacks, and proper flag handling.

Enhancing Message Formation and Gas Management:
- Revised key verification, gas cost calculations, and measures to prevent depletion of the contract's balance.

Updating Contract Upgrade Procedures:
- Clarified aspects related to the secure use of code update functions (set_code and set_data) and ensuring compatibility with existing storage.

Additional Guidelines for FunC and Tact:
- Expanded recommendations on the correct use of function modifiers, variable handling, and documentation practices.

#PositiveWeb3
๐Ÿ‘4๐Ÿ”ฅ3๐Ÿ‘1