Obukwankala bwa Smart Contract mu DeFi: Ebizibu Eby'ekikugu n'Enkola Z'okubiraba

Obulamu bwa Decentralized Finance (DeFi) buwandiika obulungi, obukadde bw'ekikula ky'ebyensimbi obutandikirwako ku nsonga y'ekikula kya blockchain. Buwa obusobozi obw'ekitangaala, obutakwatibwa, n'obukakasa mu byensimbi, okuva mu kukola n'okuwandiika okutuuka ku kufuna obuwunga n'okugula eby'ensimbi, byonna nga tewali mukwano ogusobola. Mu mutima gw'ekikula kino kuli obukodyo obw'amaanyi
contract—ekikodi ekikola ebikozesebwa ebyokulonda n'okukozesa ebirungi mu buli kintu ekikolebwa.Naye, obuwanga buno bujja n'obuvunaanyizibwa obukulu. Okwogera okw'ekika "ekikodi kye mateeka" mu nsonga za DeFi kitegeeza nti tewali mukutu gw'okusaba obuyambi bw'abalala bw'oyinza okutuuka ku bw'eky'ekintu kyakolebwa. Singa waliwo akakosa mu kikodi, ssente zisobola okuba nga ziwedde mu kkuuma. of an eye. Ku nsonga efu nga Exbix, eyaweze ku nkuhaza obulamu obukakasa n'obulungi mu nsi ya crypto, okwongera okutegeera ebyokulabirako bino kyekimu ku bazzukulu baffe.
Omukutu guno ogw'amaanyi gujja mu nsi y'obukugu bw'amasimu. Tujja kusobola okukuuma obutali bumu, okwekenneenya ku bifo ebikozesebwa mu nsi, era, eky'amaanyi, tukuyambe na n'ekwughị na ị nwere ihe ọmụma iji soro ụzọ DeFi nke ọma. Cheta, ndị ọrụ nwere ihe ọmụma bụ ndị nchebe. Na mgbe ị na-enyocha nnukwu ohere nke crypto, ị nwere ike ịzụ ahịa na nnukwu njikọ dịka BNB/USDT na ETH/USDT na anyị na-echebe na nke dị mfe iji Exbix exchange dashboard.
Okukwata: Ekitibwa Ekikulu ky'Obulamu bwa DeFi
DeFi ekirina obukadde obusatu mu bbeeyi y'ebyuma eby'ekika. Ekitibwa kino kikulu kisinga okuba ekitibwa ekikulu ku bakyamu abateekateeka okufuna obukodyo. Ekikaddyo kimu kisobola okuleeta obutaddayo obugatta mu bbeeyi y'obukadde obusatu. dollars, okutaka obugumu bw'abakuguzi era n'okukyuusa obukugu.
Naye kino si kiki ekisobola okutya. Kiri mu kuteekateeka okw'amaanyi ku masomo n'okukakasa. Okuyiga nga bino ebikozesebwa, abatekinologye n'abakozesa balina okukola ku nsi y'obulamu obugumu. Ku bano abagala okuddamu okwekenneenya mu nteekateeka z'okutunda ezitava mu masoko ga spot, okutegeera ebizibu bino kisobola okuba. kikadde musanvu okuddamu mu bintu ebikakasa ku Exbix Futures platform.
Oluvannyuma 1: Ekitangaala – Kiki Ekikozesebwa mu Kkooti & Kiki Ekikosa?
Ekikozesebwa mu kkooti kireeteddwa mu pulogulaamu ewereddwa ku blockchain ekikola bwe kityo ekikiddwa obukwata. Bikwata ku ntegeka ezikozesebwa okuteekateeka okudda mu nkola y’ebyawandiiko okutuusa ku bano b’ebyawandiiko bonna nga balina obugumu bw’ensonga, nga tewali muntu asangiddwa mu kwegatta oba okudda mu mbeera.
Olw’ani balina obuvunaanyizibwa?
- Okutakuwalirako: Olw’ensonga ezikozesebwa, bikwata ku ntegeka ezikozesebwa okuteekateeka okudda mu nkola y’ebyawandiiko okutuusa ku bano b’ebyawandiiko bonna nga balina obugumu bw’ensonga, nga tewali muntu asangiddwa mu kwegatta oba okudda mu mbeera. change. Ekitibwa ekiri mu code kirema mu nsi, wabula singa ebikozesebwa eby'enjawulo byateekeddwa mu ntandikwa.
- Obukugu: Ekitongole kya DeFi kireeta obukugu obw'enjawulo, nga kisangibwa mu biseera ebisinga eby'ekikozesebwa. Obukugu buno bujja mu “ekitundu ekyokulwanyisa.”
- Okukozesebwa (Ekitangaala ky'Omuwendo): Ekitangaala kino kireeta Ekitanga kya DeFi n'ekizibu kyayo ekikulu. Ebyokulabirako bikoledwa okwekolagana. Ekizibu mu kimu ku byokulabirako kisobola okwekenneenya mu bimwe ebyekikola ku kimu.
- Obulamu Obw'Omukutu: N'ekikula ky'okusaba kuteekateeka okweteeka, kisobola okuleeta obutali bw'ekitiibwa, kyokka kiki ky'ekizibu ky'ekikola okwekenneenya mu kimu.
- Omukulu Nsonga: Amakontraki agasaba amakuru avuye hanze (nko ku giciro cy'igicuruzwa). Aya makuru aturuka ku “oracles.” Niba oracle ifite ikibazo cyangwa ikaba yarahinduwe, amakontraki akoresha aya makuru azakora hashingiwe ku makuru atari yo.
Mbere yo kwinjira mu bibazo bya tekiniki, ni byiza guhora wemeza ko ibikorwa byawe by'ubucuruzi bifite umutekano ku rubuga rwizewe. You can check the latest prices and movements for various assets on the Exbix Markets page.
Part 2: Ebikadde ezisanzwe ze Smart Contract n'Okukozesa
Let’s break down the most common categories of vulnerabilities that have led to significant losses mu DeFi.
1. Reentrancy Attacks: Ekibala Ekitandika
Reentrancy attack ye ekibala ekikulu mu smart contract, nga yategekeddwa mu DAO hack mu 2016, eyateekateeka okufuna 3.6 million ETH ne kuteeka mu nteekateeka ya Ethereum.
- Ki kiki? Reentrancy attack ekigenda wakati omukago ogw'obulimba gwebuulira mu kuteeka mu mukago ogusaba nga tekyakoma ku mukutu ogw'ekikola. Kino kisobola okuwa omutemu amawulire okwewala okuweereza ssente nga tebalina kuteekateeka.
- Okw'ekola:
- Omukago A gina
withdraw()ekikola ekitwala ETH ku mukozesa na oge na-emelite balansi n'ime onye ọrụ. - Nkwekorita B nke onye na-emebi iwu na-akpọ
withdraw(). - Nkwekorita A na-eziga ETH na Nkwekorita B.
- Nkwekorita B nwere
fallback()ọrụ (nke na-anata ETH) nke ozugbo na-akpọwithdraw()na Nkwekorita A ọzọ. - Nkwekorita A ekyali tekyali ekigendererwa ku mwenda w’akabi, n’akatandika okwongera ETH, n’akatandika okuddamu.
- Ekikolo kino kijja okubeera, kikyusa Contract A, okutuusa nga gas y’okusaba ejja mu kifo oba nga kontrakiti eyafuluma.
- Omukago A gina
- Ekigendererwa eky’amaanyi: Okukuba kwa DAO (2016).
- Olw’okusobola Okukiririza:
- Jjanjira Checks-Effects-Interactions: Ono ni mulundi ogw'ekikadde. Nnyinza:
- Jjanjira ebintu byonna (nga,
require(balances[msg.sender] >= amount);). - Okukola okukola ku bintu byonna eby'oku mutendera ogw'ekika (e.g.,
balances[msg.sender] -= amount;). - Okwesiri, jikọta na nkwekọrịta ndị ọzọ ma ọ bụ EOAs (njikọ) (e.g.,
msg.sender.call{value: amount}("");).
- Jjanjira ebintu byonna (nga,
- Jiri Nchedo Reentrancy: OpenZeppelin na-enye
ReentrancyGuardmodifier nke na-emechi ọrụ n'oge mmezu ya, na-egbochi oku ndị na-emegharị.
- Jjanjira Checks-Effects-Interactions: Ono ni mulundi ogw'ekikadde. Nnyinza:
2. Okukwasa ku Oracle
Amakontraki aganya akasaba amakuru agakora mu buzima busanzwe. Oracles ni serivisi zishinzwe gutanga aya makuru. Gukora ku buryo ibiciro byatanzwe na oracle bihinduka ni imwe mu nzira nyamukuru z'ibitero.
- Ni iki? Umukora w'ikintu akora ku biciro by'umutungo ku isoko ritanga serivisi (DEX) ifite ubushobozi buke bwo gucuruza kugira ngo fool a protocol’s oracle into reporting a incorrect price.
- Okwu o si otú a:
- Protocol na-enye ego na-eji ọnụahịa DEX’s dị ka oracle ya iji chọpụta ego ole nwere ike ịrịba ama na collateral.
- Onye na-emebi iwu na-ewepụ ego ngwa ngwa iji wepụ mmiri na trading pair, dịka, ABC/ETH, na-eme ka ọ bụrụ nke na-adịghị mmiri.
- Omusajja asalawo okufuna ABC eya kusinga mu kifo ky’amasanyalaze ku pool erina obutafuna.
- Oracle y’ekikozesebwa mu protocol eyafulumya omusolo ogwawandiikiddwa.
- Omusajja asaba ABC eyakubiddwa mu nteekateeka ng’ekifaananyi okufuna obukadde bw’amaanyi ga bintu eby’okusaba okuva mu protocol.
- Omusajja akyusa omusolo ogw’amaanyi, era omusolo gwa ABC ekitanga, naye protocol esigala na collateral eya bulijjo ne debt enkulu ey'obutali bw'ekyama.
- Ebikadde Ebigya: Harvest Finance hack ($34 million eyafulumye), Compound’s DAI ekitundu.
- Okweyambisa:
- Yinza Obukadde Obutali: Yinza obukadde obukakasa ng'ama networks g'ama oracles nga Chainlink, eyakubiddwa okota data okuva mu nsonda ezikola mu ngeri eya bulijjo ne ebyawandiiko, nga bikwata ku kutandika okwawukana okw'ekikula.
- Funa Ekitundu ky'Obuwandiiko Obukozesebwa mu Banga (TWAPs): Okukozesa ekitundu ky'ebyawandiiko mu banga (nga, emyezi 30) mu kifo ky'ekisale ky'ekiseera kimu kizinga obukodyo obutali bungi.
- Funa Ebyawandiiko Ezingiramu: Tosobola kuweta ku mliimu wa DEX umwe ku nsonga ya kukola okw'ekisenge eky'amaanyi.
3. Okudda mu Nsonda n'Okusaba
Amakompiyuta galiyinza okubeera n'ekitundu ku nsonda y'ekitundu. uint256 (ekitundu ekitakola) mu Solidity gina n'ekitundu eky'okusaba 2^256 - 1.
- Ki ky'ekyo?
- Overflow: Mukama ogw'ekikola (nga okudduka) bwe guva mu namba enkulu okusinga obutonde, guli "gukwata" ku namba empanvu nnyo.
- Underflow: Mukama ogw'ekikola (nga okudda) bwe guva mu namba etali munsi zero (ku namba ezitakola, ezitakola ezitali zimu), guli gukwata ku namba enkulu nnyo. number.
- Otu ngwugwu nke
100tokens. Onye ọrụ na-eji101. Nchịkọta100 - 101ga-eme ka ọ bụrụ na ọ na-erughị ala, na-eduga na ngwugwu nke2^256 - 1, na-enye onye ọrụ ngwugwu fọrọ nke nta ka ọ bụrụ na ọ dịghị njedebe.
- Ganya Solidity 0.8.x oba n'ekirungi: Ekitabo ky'ekikozesebwa kisobola okwekenneenya ku bbeeyi/okuwangula era kisubira ebyokulabirako bwe bibaawo.
- Ganya SafeMath ku bbeeyi ezikadde: Ekitabo kya OpenZeppelin SafeMath kyawandiika ebyokukozesa mu bbeeyi ezirungi okutuusa ku v0.8.
4. Obutukiriza bw'Okukozesa
Amakonti mangi agira emikutu egenda okukozesebwa mu ngeri ezikozesebwa ku nsalo ezikuyitibwa (nka, omukwano, omukulembeze).
- Ki ky'ogenda? Emikutu egikulu ku nteekateeka y'ekikozesebwa (nka, okuzza mu nkola amakonti, okuzza ebikozesebwa ebipya, okuzza ebisanyizo) kisobola okuba nga kyakolebwa obutakwatibwa wabula nga tekyakwatibwa mu kifo kya modifier nga
- Eksempel Wekubye: Ihacking ya Parity Wallet (2017), kung donde omunye umsebenzisi ngokungafanele uqale umsebenzi owawenza waba ngumnikazi wesivumelwano sebhayisikobho bese “ezibulala”, eqinisa ~500,000 ETH phakade.
- Indlela Yokugwema Lokhu:
- Sebenzisa Ukulawulwa Kofinyelelo
Modifiers: Gamba modifiers ng'ogwa OpenZeppelin’s
OwnableobaAccessControlokukakasa okukyusa ebikozesebwa eby'amaanyi. - Okukola Obukugu n'Okukola Ebyokulabirako: Ebyokulabirako eby'ekikozesebwa bisanyizo by'ekikozesebwa bikwatagana n'okukakasa nti abateeberezebwa tebasobola kutuuka ku bintu eby'amaanyi.
- Sebenzisa Ukulawulwa Kofinyelelo
Modifiers: Gamba modifiers ng'ogwa OpenZeppelin’s
onlyOwner. 5. Okufuga n'Okutendeka kw'Obukugu Okukola Obulamu
Mu blockchain, ebyokulonda biboneka mu mempool nga tebyakolebwa. Abakola ebyokulonda babikola mu nteekateeka y'okusaba, akasanyizo akakulu akasobola okufuna obuwangwa obw'amaanyi.
- Ki ky'ogenda? Omusasi asanga ebyokulonda ebikola (nga, okuteeka omuwendo ogukulu ogusobola okukyusa akawungeezi) mu mempool era asaba ebyokulonda bye. transaction na gas fee enkulu ka mbụ.
- Otu o si arụ ọrụ:
- Onye ọrụ A na-ewepụta azụmahịa iji zụta 10,000 XYZ tokens, nke ga-eme ka ọnụahịa ahụ dị ukwuu.
- Onye mwakpo B hụrụ azụmahịa a ma ngwa ngwa na-ewepụta azụmahịa iji zụta XYZ mbụ, na gas fee ka ukwuu.
- Miner na-emezu azụmahịa Onye mwakpo B’s buy order ya mbere. Igiciro cya XYZ kirazamuka.
- Ordere ya User A irakorwa ku giciro gishya, cyazamutse.
- Umugizi wa nabi B ahita acuruza utugabane twa XYZ yaguze, akunguka ku itandukaniro ry'igiciro ryatewe n'ubucuruzi bwa User A.
- Uko Wabirinda:
- Koreshya Submarine Sends: Uburyo nka bwo gukoresha ekitibwa-nyumba, we ggwanga ekigendererwa kireeteddwa mu maaso era ekikola kireeteddwa mu biseera eby’omu maaso.
- Funa Flash Bots: Ku Ethereum, obukugu ng'ogw'ekikola Flashbots bwebukozesa bwetegereza okuzza mu maaso ebyokulonda okuva mu biseera eby'omu maaso obukozesa ku bamalirizi.
- Wandiika Obutali Buwandiikiddwa: Ku DEXs, abakozi basobola okuteeka obutali buwandiikiddwa obukulu okwewala okutuuka ku bwebuzibu mu kutunda. obulamu obutali bwawugiridde.
(… Ekigambo kikyusa ku ~4100 ebyawandiikiddwa, kikyusa ku bingi ebyokulabirako ng'ekikozesebwa mu Logic Errors, Rug Pulls, Flash Loan Attacks, n'ekitundu ekinene ku Bwe Wandyagadde Okukola nga Omukozesebwa n'Empisa Eza Nnyingi ku Bakola …)
Ekifaananyi 5: Bwe Wandyagadde Okukola nga Omukozesebwa mu DeFi
Ng'ekyali abatekinzi b'okuva mu kuteeka code etekeddwa, abakozi basaanidde okukola ku nsonga. Wano ng'ogenda okukyusa eby'obufuzi bwo:
- Okwetegereza (DYOR): Togenda mu kuteeka mu projekiti gye tokyagala. Osome ebikozesebwa byabwe, osanyukire ku bintu byabwe eby'okuzaala.
- Okukola ku Bwekyusa: Ekitangaala kiki? project eya auditiddwa n'ekikola ekirina obuvunaanyizibwa ng'ekikola ConsenSys Diligence, Trail of Bits, CertiK, oba Quantstamp? Osome amawulire g'okuziika! N.B: Okuzikibwa si kuteekateeka, naye okuba nga tewali kuteekateeka kuli ekitundu ekikulu eky'ekikangabwa.
- Okukakasa Obutamanya bw'Ekibiina: Kuba n'obuvunaanyizibwa ku bibiina ebyo byonna eby'obutamanya. Wabula obutamanya bukiikula, obutamanya bukozi "rug pulls" bw'ekyangu nnyo okukola nga tewali muntu. consequence.
- Ganda Nnyon: Tegera ku bbeera obulungi okusinga bwe wogenda okufuna. Tandika okwekenneenya ku protocol n'ekitundu ekitono mu banga ly'okusaba.
- Funa Ekitabo ky'Obulamu: Ekitabo ky'obulamu kikiriza obulamu bwo bw'ekikadde, nga kikwata ku bbeera ez'amaanyi ku bbeera n'amaanyi. Bwe wogenda okugezaako ku dApp empya, jjukira okwekenneenya ku URL mu ngeri ey'amaanyi.
- G理解新农场的风险: 高且不可持续的APY通常是骗局的最大诱惑。如果看起来好得令人难以置信,那几乎总是如此。
- 监控社交渠道: 团队是否响应?社区是否活跃?一个死气沉沉的Telegram或Discord可能是个坏兆头。
对于那些更喜欢精心策划体验的人,开始 okugenda kw'okuziika ku mukutu ogw'amaanyi n'ogw'ekikula nga Exbix kunyweza nnyo obuzibu buno. Tuweereza ku bunnya bw'ekikula, nga tukuyamba okutegeera ku nteekateeka yo y'okuziika ku bbeeyi nga ETC/USDT ku ekikiddwa ekikadde eky'okuziika.
Okumaliriza: Obuvunanyizibwa Obusanyizo ku Muwendo Ogugumu
Obw'ekikadde bwa DeFi bukozi mu nsi ey'ekikadde ey'amaanyi n'amaanyi, naye tebulina bbeeyi z'ekizikiza. Obutebenkevu bw'amaanyi g'ekikadde si kintu kye kisinga, naye... ekizikyo eya abatekinologiya; kyekyo ekikula ky'ekizikyo. Abatekinologiya basabwa okutegeka okuzannyisa, okwekwasa okw'amaanyi, n'okusaba obukugu. Abakozesa basabwa okwewandiisa n'okukola nga balina obukakafu.
Olugendo olw'okuwandiika ekizikyo eky'amaanyi mu DeFi lujja. Okutegeera obutakwatagana obujjuvu, okufuna obusanyizo okuva mu bintu ebyakolebwa mu biseera ebyedda, n'okukola nga bagenda mu maaso n'ekirungi ky'ekizikyo, tujja twaya twaya tusobola okuzimba omukago ogw'amaanyi n'ogw'ekirungi mu by'ensimbi. Ekifaananyi kya DeFi kisinga obusobozi okuba kusiima okw'ekikugu. Kisabwa okuzimbibwa, omusana ku musana, ku nsonga y'ekikugu n'ekirungi.
Jjangu olabe, jjangu okutegeera, era osanyuse mu bujjuvu ku Exbix


