TonBit

TonBit is a core sub-brand of BitsLab and the officially recognized Primary Security Assurance Provider (SAP) for the TON blockchain. Established as an early builder within the TON ecosystem, TonBit delivers comprehensive blockchain security services including smart contract audits for Tact and FunC languages, and proactive penetration testing for Web3 projects.

Core Products/Services

TonBit's primary offerings are focused exclusively on the TON blockchain ecosystem:

• Smart Contract Audits: In-depth security code reviews for smart contracts written in Tact and FunC, the native programming languages of the TON blockchain. TonBit has completed audits for over 30 high-profile TON projects including Torch Finance, Fiva Protocol, Catizen, UTonic, Tonstakers, Duckchain, PixelSwap, and TonUp.
• Penetration Testing: Proactive security assessments for high-impact Web3 projects, identifying vulnerabilities before they can be exploited.

Key Strengths

TonBit has demonstrated exceptional technical expertise through its track record of responsible vulnerability disclosure directly to the TON Foundation:

• Discovered three separate critical vulnerabilities in the TON Virtual Machine (TON VM), each receiving official acknowledgment from the TON team
• Identified a critical vulnerability capable of causing TON VM resource exhaustion and validator crashes
• Discovered a "Continuation Parameter Abuse Vulnerability" in TON light nodes
• Identified a non-atomic state migration vulnerability in RUNVM instructions

The team brings over 10 years of cybersecurity experience, has published 20+ blockchain security academic papers, and includes DEFCON champions and researchers who have found 0-day vulnerabilities in public blockchains including Sui, NKN, OKX, Nervos, and Cosmos.

Notable Clients/Projects

Audited projects include Fiva Protocol, Torch Finance, Catizen, Algebra, UTonic, Ton Batch Sender, TonUp, PixelSwap, Tradoor, Miniton, Thunder Finance, Duckchain, Tonstakers, SecondLive-Ton, PumpMeme, Beetroot Finance, Codatta, and over 30 additional TON ecosystem projects.

Why Choose TonBit

As the officially endorsed Primary Security Assurance Provider (SAP) for the TON blockchain, TonBit offers unmatched specialization in TON-specific security. Their deep expertise in Tact and FunC smart contract languages, combined with a proven track record of discovering and responsibly disclosing critical TON VM vulnerabilities, makes them the go-to security partner for projects building on TON. Beyond audits, TonBit actively contributes to ecosystem security through community initiatives such as the TON CTF competition (attracting 300+ teams from 20+ universities) and co-hosting the TON Global Hackerhouse with the TON Foundation.