Hamster

when

Foundation

mini

Steve

The Open Network (TON), a blockchain platform integrated with Telegram, has experienced record-breaking growth in 2024. The number of onchain-activated wallets surged from approximately 1 million in January to over 9 million in June.
However, TON’s <a href="https://cointelegraph.com/news/hamster-kombat-239-million-users-telegram-durov">massive inflow of new users</a> has not been overlooked by scammers. In June 2024, blockchain security firm SlowMist&nbsp;<a href="https://cointelegraph.com/news/ton-phishing-attacks-slowmist-warns">issued a warning on increasing phishing attacks</a>&nbsp;on the TON ecosystem.
As the TON Foundation ambitiously expects to onboard 500 million users by 2028, it raises the question of how to properly protect users from attacks of all possible vectors without hindering rapid adoption.
Cointelegraph contacted several executives and firms, including the TON Foundation, to better understand the nature of risks in the <a href="https://cointelegraph.com/news/what-is-toncoin-ton-and-how-to-buy-it">TON ecosystem</a> and identify steps to keep users’ assets safe.
<h2 id="telegram-isn-t-responsible-for-the-safety-of-mini-apps-says-hacken-executive">Telegram isn’t responsible for the safety of Mini Apps, says Hacken executive</h2>
While identifying the risks in the TON ecosystem, one should realize that Telegram is not responsible for the safety of TON-linked Mini Apps.
The number of Mini Apps on Telegram — such as&nbsp;<a href="https://cointelegraph.com/news/bybit-hamster-kombat-token-pre-market">Notcoin or Hamster Kombat</a> — has been surging significantly over the past few months. However, not all of those apps adhere to the best practices of security to ensure the safety of funds of their users, Stepan Chekhovskoi, lead smart contract auditor at the cybersecurity firm Hacken, told Cointelegraph.
“It’s worth mentioning that this is not Telegram’s fault,” Chekhovskoi emphasized, adding that users’ safety on Mini Apps lies on founders and project teams. He added:
<blockquote data-ct-non-breakable="true">
 “However, Telegram has to take care of the security of the platform itself and to ensure its functionality enables users to seamlessly secure its accounts; it has little to nothing to do with the security of a Mini App developed by a third party.”
</blockquote>
A spokesperson from the TON Foundation confirmed that users and projects are solely responsible for safety, stating:
<blockquote data-ct-non-breakable="true">
 “As TON blockchain is open-source and permissionless, individual users and projects must be careful to ensure their own safety and security when undertaking network activity.”
</blockquote>
<h2 data-ct-non-breakable="true" id="ton-foundation-impressed-with-security-measures-by-some-mini-apps">TON Foundation “impressed” with security measures by some Mini Apps</h2>
The TON Foundation strongly encourages security measures adopted by Mini Apps on Telegram.
“We have been impressed with the actions of many projects as they look to protect their users,” a representative at the TON Foundation told Cointelegraph.
For example, Tonkeeper, one of the most popular TON-based wallets, has enabled users to mark whether a non-fungible token (NFT) they have received is legitimate.
The spokesperson also highlighted the importance of an active and engaged community as one of the best safeguards against bad actors. The representative added:
<blockquote data-ct-non-breakable="true">
 “Users should always be careful when transacting onchain. Please remember that any onchain transaction is irreversible. We strongly advise our users not to click on suspicious links and double-check every detail before signing any onchain transaction.”
</blockquote>
<h2 data-ct-non-breakable="true" id="self-custodial-and-custodial-mini-apps-on-telegram">Self-custodial and custodial Mini Apps on Telegram</h2>
According to Hacken’s Chekhovskoi, Telegram Mini Apps are “no different” from apps built on other platforms from a security perspective. As such, one should apply the same web and crypto security measures to those apps.
According to Chekhovskoi, Telegram’s Mini Apps have two ways of managing user private keys, which can be compared to <a href="https://cointelegraph.com/explained/various-forms-of-bitcoin-custody-explained">custodial and non-custodial wallets</a> in crypto.
“The majority of Telegram Mini Apps are custodial, so like any other provider of a custodial wallet, they must properly identify their users using additional passwords, 2FA [two-factor authentication] mechanisms and others,” the expert said.
For self-custodial apps, users must ensure strong encryption for private key storage. “If the application doesn’t require an eight-symbol-character password, including numbers and special symbols, or at least a fingerprint, it means the private key is not securely encrypted,” Chekhovskoi noted.
Related: <a href="https://cointelegraph.com/news/bybit-hamster-kombat-token-pre-market">Bybit lists Hamster Kombat’s token for pre-market trading</a>
Users should also vary the risks associated with automated login on all devices. If the automated login is enabled, anyone who gets access to the user’s device by default has access to their Mini Apps.
<h2 id="non-technical-threats-in-the-ton-ecosystem">Non-technical threats in the TON ecosystem</h2>
The TON ecosystem’s decentralized nature and ease of use naturally lure scammers, and there’s “no silver bullet to protect users,” according to Hacken.
To avoid non-technical scams on TON, individuals should exercise caution when interacting with non-official apps and those launched by lesser-known developers.
According to Steve Milton, co-founder and CEO of the crypto wallet Fintopio, one way to avoid potential phishing attacks is to check whether Mini Apps have a verification mark.
Telegram <a href="https://telegram.org/verify" target="_blank" rel="noopener nofollow">offers</a> verification for public figures and organizations so that users can easily identify official sources. The Telegram team generally verifies bots as well as official channels or public groups.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/cf0a80c9-a140-4464-976c-836f68a6508c.png" alt="TON ecosystem scams on the rise: How to stay safe">
 <figcaption style="text-align: center;">
 An example of Telegram’s verification mark for popular tap-to-earn game Hamster Kombat. Source: Hamster Kombat
 </figcaption>
</figure>
“Projects that have undergone this rigorous process, such as Fintopio, have demonstrated a commitment to transparency and reliability,” Milton said.
Hacken’s Chekhovskoi also cautioned against get-rich-quick schemes on Telegram, stressing that free cheese is only found in a mousetrap. He stated:
<blockquote data-ct-non-breakable="true">
 “Always remain skeptical of free money offerings. If you embrace a suspicious opportunity, it is better not to risk your main crypto wallet and create a new account for this purpose.”
</blockquote>
For more tips on staying safe on TON and Telegram, users can also <a href="https://blog.ton.org/how-to-stay-safe-on-ton-and-telegram" target="_blank" rel="noopener nofollow">follow</a> relevant guidance from the TON Foundation.
Magazine: <a href="https://cointelegraph.com/magazine/ethereum-phishing-drainers-ton-bitcoin/">As Ethereum phishing gets harder, drainers move to TON and Bitcoin</a>

TON ecosystem scams on the rise: How to stay safe

Table of Contents

Cointelegraph

Andre artikler udgivet 10. jul. 2024

Tokenize.it Launches Groundbreaking BWALA Security Token Offering

Travala Accepts Andrew Tate’s ‘Daddy’ Memecoin for Travel

Circle minted $250m USDC on Solana

Uniswap Labs Challenges SEC’s Proposed Crypto Exchange Definition Amid Legal Shift

Leading The RWA Revolution: Public Masterpiece Announces Its Successful Transformation

Bitcoin To Hit $200K In 2025: Analysts Say Core Scientific, Iren Energy Will Outperform

Join our free newsletter for daily crypto updates!