This year has seen tremendous growth for The Open Network (TON), connected with Telegram. Wallets that are enabled on-chain have increased from over a million in January to over nine million by June.
Rising Concerns: Phishing Attacks and Security Risks
Even with its quick growth, scammers have been posing a greater threat to TON. Blockchain security company SlowMist warned in June 2024 of an increase in phishing attempts directed against the TON ecosystem.
The TON Foundation aims to onboard 500 million users by 2028, underscoring the need to bolster protection against various attack vectors while facilitating widespread adoption. Discussions with industry leaders and entities like the TON Foundation seek insights into these threats and strategies to safeguard user assets.
Lead smart contract auditor at Hacken, Stepan Chekhovskoi brought out issues with Telegram’s Mini Apps’ security procedures. Although the quantity of Mini Apps such as Notcoin or Hamster Kombat has increased, he pointed out that not all of them follow recommended security procedures. “It’s worth mentioning that this is not Telegram’s fault,” Chekhovskoi said, emphasizing that the owners and project teams of these apps are ultimately responsible for user safety.
“However, Telegram has to take care of the security of the platform itself and to ensure its functionality enables users to seamlessly secure its accounts; it has little to nothing to do with the security of a Mini App developed by a third party.”
According to a spokesperson from the TON Foundation, the responsibility for safety lies with users and projects, as affirmed by the foundation.
“As TON blockchain is open-source and permissionless, individual users and projects must be careful to ensure their own safety and security when undertaking network activity.”
Responsibility and Security Measures
A TON Foundation representative reaffirmed that users and projects are ultimately in charge of implementing security measures within Mini Apps. The foundation applauds several projects for taking proactive actions to protect consumers and encourages these programs to follow strict security guidelines.
For example, the well-known TON-based wallet Tonkeeper has added functionality that lets users confirm the authenticity of non-fungible tokens (NFTs) they’ve received.
“We have seen many projects taking proactive measures to safeguard their users,” a TON Foundation official stated. Non-fungible tokens (NFTs) can be verified as legitimate by users of the well-known TON-based wallet Tonkeeper. The spokesperson also emphasized the powerful deterrent that a lively and engaged community provides against lawbreakers.
“Users should always be careful when transacting onchain. Please remember that any onchain transaction is irreversible. We strongly advise our users not to click on suspicious links and double-check every detail before signing any onchain transaction.”
Best Practices and User Guidelines
Chekhovskoi went on to talk about security features unique to Telegram’s Mini Apps, drawing comparisons between the private key management of these apps and custodial and non-custodial cryptocurrency wallets. Strong encryption and authentication procedures are essential, he underlined, adding that secure private key encryption is essential for self-custodial apps.
Users are encouraged to utilize strong authentication techniques and take caution when using unofficial programs or those from unknown developers to reduce the hazards associated with automated logins across devices.
Safeguarding Against Scams and Phishing
Given the decentralized nature of the TON ecosystem, it has become a target for scammers. Hacken stressed that while there is no foolproof solution, users can protect themselves by avoiding non-verified apps and get-rich-quick schemes. Steve Milton, CEO of Fintopio, recommended checking for verification marks on Mini Apps as a precaution against phishing attacks: “Projects that have undergone this rigorous process, such as Fintopio, have demonstrated a commitment to transparency and reliability,”
“Always remain skeptical of free money offerings. If you embrace a suspicious opportunity, it is better not to risk your main crypto wallet and create a new account for this purpose.”
Chekhovskoi repeated these remarks, warning users that quick wins frequently turn into traps and stressing the need to be alert and pay attention to advice from reliable sources, such as the TON Foundation, to be secure on Telegram and TON.
Image by frimufilms on Freepik
Disclosure Statement: Miami Crypto does not take any external funding, or support to bring crypto news to the readers. We do not have any conflicts of interest while writing news stories on Miami Crypto.