Cover anti-patterns and possible attacks on Tact smart-contracts

[anton-trunov]

Anti-patterns:

• [ ] on-chain string parsing from a human-friendly format into a machine-readable binary structure -- a dapp frontend should do that and only communicate with its smart contracts using machine-readable structures messages, so we don't impose too much load on the blockchain

[novusnota]

General guidelines for TON smart contracts: https://docs.ton.org/develop/smart-contracts/guidelines Security tips: https://docs.ton.org/develop/smart-contracts/security/secure-programming

[anton-trunov]

Some issues observed in FunC, many could be applied to Tact as well: https://github.com/slowmist/Toncoin-Smart-Contract-Security-Best-Practices/blob/main/README.md

[anton-trunov]

A post by CertiK: https://blog.ton.org/secure-smart-contract-programming-in-func