<\/span><\/p> Ak\u0131ll\u0131 s\u00f6zle\u015fmeler, blok zincir<\/a> teknolojisi \u00fczerinde \u00e7al\u0131\u015f\u0131r. Belirli ko\u015fullar sa\u011fland\u0131\u011f\u0131nda otomatik olarak devreye girerler.<\/p> En b\u00fcy\u00fck avantajlar\u0131, arac\u0131ya gerek duymadan g\u00fcvenli ve \u015feffaf i\u015flemler yapabilmeleridir. Ethereum a\u011f\u0131, ak\u0131ll\u0131 s\u00f6zle\u015fmelerin en yayg\u0131n kullan\u0131ld\u0131\u011f\u0131 a\u011fd\u0131r.<\/p> S\u00f6zle\u015fmeler genellikle programlama dilleriyle, \u00f6rne\u011fin Solidity ile yaz\u0131l\u0131r. \u00d6rne\u011fin \u00f6deme yap\u0131ld\u0131\u011f\u0131nda, s\u00f6zle\u015fme otomatik olarak i\u015flemi ger\u00e7ekle\u015ftirir. Bu i\u015flemler, bir NFT\u2019nin transferi, bir tokenin stake edilmesi ve bir hizmetin otomatik teslimi gibi bir\u00e7ok senaryoda kullan\u0131l\u0131r.<\/p> Ak\u0131ll\u0131 s\u00f6zle\u015fmeler, de\u011fi\u015ftirilemez bi\u00e7imde blok zincire kaydedilir. Bu durum, manip\u00fclasyon ve doland\u0131r\u0131c\u0131l\u0131k riskini indirir. DeFi projeleri, NFT pazaryerleri ve DAO sistemleri gibi bir\u00e7ok Web3 uygulamas\u0131, ak\u0131ll\u0131 s\u00f6zle\u015fmeler sayesinde \u00e7al\u0131\u015f\u0131r.<\/p> <\/span><\/p> Ak\u0131ll\u0131 s\u00f6zle\u015fme g\u00fcvenli\u011fi, blok zincir \u00fczerindeki kodlar\u0131n hata ve sald\u0131r\u0131lara kar\u015f\u0131 korunmas\u0131n\u0131 sa\u011flar. Denetim, formal do\u011frulama, test ve \u00e7ok zincirli g\u00fcvenlik \u00f6nlemleriyle DeFi projeleri g\u00fcvence alt\u0131na al\u0131n\u0131r.<\/p> S\u00f6zle\u015fmeler otomatik \u00e7al\u0131\u015ft\u0131klar\u0131 i\u00e7in, i\u00e7erdikleri kodlardaki a\u00e7\u0131klar ciddi g\u00fcvenlik riskleri do\u011furabilir. Bu nedenle, ak\u0131ll\u0131 s\u00f6zle\u015fme g\u00fcvenli\u011fi geli\u015ftiriciler ve kullan\u0131c\u0131lar i\u00e7in hayati \u00f6neme sahiptir.<\/p> Ak\u0131ll\u0131 s\u00f6zle\u015fme g\u00fcvenli\u011fi i\u00e7in \u00e7e\u015fitli \u00f6nlemler al\u0131n\u0131r. Bunlar aras\u0131nda kod denetimleri, test senaryolar\u0131, hata tespiti ve eri\u015fim kontrol\u00fc yer al\u0131r. Ayr\u0131ca g\u00fcvenlik protokolleri de uygulan\u0131r.<\/p> DeFi projelerinde<\/a> s\u0131k\u00e7a ya\u015fanan sald\u0131r\u0131lar, ak\u0131ll\u0131 s\u00f6zle\u015fme g\u00fcvenli\u011fini daha fazla \u00f6nemli hale getirmektedir.<\/p> <\/span><\/p> Geli\u015ftiricilerin kar\u015f\u0131la\u015ft\u0131\u011f\u0131 tehditler belirli g\u00fcvenlik a\u00e7\u0131klar\u0131 etraf\u0131nda yo\u011funla\u015fmaktad\u0131r. A\u00e7\u0131klar, kullan\u0131c\u0131 fonlar\u0131n\u0131n kayb\u0131na yol a\u00e7abilir. Ayr\u0131ca sistemin k\u00f6t\u00fcye kullan\u0131lmas\u0131na yol a\u00e7abilir.<\/p> A\u00e7\u0131klar\u0131 erken tespit etmek ve \u00f6nlemek, g\u00fcvenli bir ak\u0131ll\u0131 s\u00f6zle\u015fme<\/a> altyap\u0131s\u0131 i\u00e7in kritik \u00f6neme sahiptir.<\/p> Ak\u0131ll\u0131 s\u00f6zle\u015fmenin ba\u015fka bir s\u00f6zle\u015fmeye fon g\u00f6nderdi\u011finde ortaya \u00e7\u0131kar. D\u0131\u015f s\u00f6zle\u015fme, kontrol\u00fc al\u0131r ve orijinal s\u00f6zle\u015fmeyi tekrar \u00e7a\u011f\u0131r\u0131r. Bu durum bir a\u00e7\u0131k yaratmaktad\u0131r. Bu t\u00fcr sald\u0131r\u0131lar, genellikle Ethereum tabanl\u0131 s\u00f6zle\u015fmelerde g\u00f6r\u00fcl\u00fcr. Sald\u0131rgan, ayn\u0131 i\u015flemi defalarca tetikleyerek izinsiz fon \u00e7ekebilir.<\/p> Sald\u0131r\u0131n\u0131n nedeni, fon transferi ger\u00e7ekle\u015ftirilmeden \u00f6nce s\u00f6zle\u015fmenin durumunun g\u00fcncellenmemesidir.<\/p> Fon g\u00f6nderimi s\u0131ras\u0131nda d\u0131\u015f \u00e7a\u011fr\u0131lar yap\u0131ld\u0131\u011f\u0131nda, sald\u0131rgan bu \u00e7a\u011fr\u0131y\u0131 tekrar edebilir. En bilinen \u00f6rne\u011fi 2016\u2019daki The DAO sald\u0131r\u0131s\u0131d\u0131r. Bu sald\u0131r\u0131da milyonlarca dolar de\u011ferinde ETH \u00e7al\u0131nm\u0131\u015ft\u0131r.<\/p> Bahsetti\u011fimiz t\u00fcrde sald\u0131r\u0131lardan korunmak i\u00e7in “checks-effects-interactions” deseni uygulanmal\u0131d\u0131r. Fon g\u00f6nderilmeden \u00f6nce s\u00f6zle\u015fme durumu g\u00fcncellenmeli, d\u0131\u015f etkile\u015fimler en sona b\u0131rak\u0131lmal\u0131d\u0131r.<\/p> Integer overflow (ta\u015fma) ve integer underflow (alt ta\u015fma) ak\u0131ll\u0131 s\u00f6zle\u015fme g\u00fcvenli\u011fi i\u00e7in kritik hesaplama hatas\u0131d\u0131r. Bu hatalar, bir de\u011fi\u015fkenin alabilece\u011fi say\u0131 aral\u0131\u011f\u0131n\u0131n d\u0131\u015f\u0131na \u00e7\u0131k\u0131ld\u0131\u011f\u0131nda meydana gelir.<\/p> Integer Overflow:<\/strong> Tam say\u0131 de\u011fi\u015fkenine maksimum de\u011ferden fazla de\u011fer eklenirse, de\u011fer s\u0131f\u0131rdan ba\u015flayarak yeniden saymaya ba\u015flar. \u00d6rne\u011fin, uint8 t\u00fcr\u00fcnde (maksimum 255) bir de\u011fi\u015fkene 1 eklenirse sonu\u00e7 0 olur.<\/p>\n<\/li>\n Integer Underflow: <\/strong>Tam say\u0131 de\u011fi\u015fkeninden minimum de\u011ferden fazla \u00e7\u0131karma yap\u0131l\u0131rsa, de\u011fer en b\u00fcy\u00fck de\u011fere s\u0131\u00e7rar. \u00d6rne\u011fin, uint8 t\u00fcr\u00fcnde bir de\u011fi\u015fkenden 1 \u00e7\u0131kar\u0131l\u0131rsa sonu\u00e7 255 olur.<\/p>\n<\/li>\n<\/ul> Bahsetti\u011fimiz a\u00e7\u0131klar, sald\u0131rganlar\u0131n token bakiyelerini art\u0131rmas\u0131na ve fonlar\u0131n izinsiz aktar\u0131lmas\u0131na neden olabilir. Bu sorunlar\u0131 \u00f6nlemek i\u00e7in, Solidity\u2019nin 0.8.0 ve \u00fczeri s\u00fcr\u00fcmlerinde bu hatalar otomatik olarak kontrol alt\u0131na al\u0131nm\u0131\u015ft\u0131r. Daha eski s\u00fcr\u00fcmlerde ise SafeMath k\u00fct\u00fcphanesi kullan\u0131lmas\u0131 \u00f6nerilir.<\/p> Timestamp manip\u00fclasyonu, bir ak\u0131ll\u0131 s\u00f6zle\u015fmede blok zaman damgalar\u0131n\u0131n k\u00f6t\u00fc niyetli kullan\u0131m\u0131 sonucu olu\u015fan bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131d\u0131r.<\/p> Blok zincirinde her blo\u011fa zaman damgas\u0131 bulunur. Bu de\u011fer, baz\u0131 ak\u0131ll\u0131 s\u00f6zle\u015fmelerde \u00f6d\u00fcl da\u011f\u0131t\u0131m\u0131 ve zaman kilidi gibi i\u015flevler i\u00e7in kullan\u0131l\u0131r.<\/p> Zaman damgas\u0131, sabit bir de\u011fer de\u011fildir. Blok \u00fcreticileri, bu de\u011feri birka\u00e7 saniyelik bir esneklikle belirleyebilir. E\u011fer bir s\u00f6zle\u015fme kararlar\u0131 blocktimestamp gibi de\u011fi\u015fkenlere ba\u011fl\u0131ysa, bu durum sald\u0131rganlara f\u0131rsat verebilir.<\/p> \u00d6rne\u011fin, bir madenci<\/a>, belirli bir zaman aral\u0131\u011f\u0131nda i\u015flemlerden \u00e7\u0131kar sa\u011flamak i\u00e7in blok zaman\u0131n\u0131 de\u011fi\u015ftirebilir.<\/p> Timestamp manip\u00fclasyonunu \u00f6nlemek i\u00e7in, zaman damgalar\u0131na a\u015f\u0131r\u0131 g\u00fcvenmekten ka\u00e7\u0131n\u0131lmal\u0131d\u0131r. M\u00fcmk\u00fcnse i\u015flem s\u0131ras\u0131 ve blok say\u0131s\u0131 gibi daha az manip\u00fcle edilebilir y\u00f6ntemler tercih edilmelidir.<\/p> DoS (Denial of Service \u2013 Hizmet Reddi) sald\u0131r\u0131lar\u0131, bir ak\u0131ll\u0131 s\u00f6zle\u015fmenin i\u015flevlerini ge\u00e7ici ve kal\u0131c\u0131 olarak kullan\u0131lmaz hale getirmeyi ama\u00e7lar.<\/p> Sald\u0131r\u0131lar, s\u00f6zle\u015fmenin baz\u0131 b\u00f6l\u00fcmlerine eri\u015fimi engeller. Bu durum kullan\u0131c\u0131lar\u0131n sistemden yararlanmas\u0131n\u0131 \u00f6nler.<\/p> Blok zincir d\u00fcnyas\u0131nda DoS sald\u0131r\u0131lar\u0131 genellikle \u015fu yollarla ger\u00e7ekle\u015ftirilir,<\/p> Sonsuz d\u00f6ng\u00fc olu\u015fturarak i\u015flemin \u201cgas limit\u201d s\u0131n\u0131r\u0131n\u0131 a\u015fmas\u0131.<\/p>\n<\/li>\n Kritik fonksiyonlara eri\u015fimi olan adreslerin engellenmesi.<\/p>\n<\/li>\n S\u00f6zle\u015fmeye gerekli veri ve kaynaklar\u0131n ula\u015fmas\u0131n\u0131n \u00f6nlenmesi.<\/p>\n<\/li>\n<\/ul> Bahsetti\u011fimiz sald\u0131r\u0131lar sonucunda ak\u0131ll\u0131 s\u00f6zle\u015fme \u00e7al\u0131\u015fmay\u0131 durdurabilir ve kullan\u0131c\u0131 fonlar\u0131na eri\u015fim engellenebilir. Kodun optimize edilmesi ve eri\u015fim kontrollerinin dikkatli planlanmas\u0131 \u00f6nemlidir.<\/p> Front-running<\/a>, bir i\u015flemin blok zincir a\u011f\u0131na g\u00f6nderilmesinden sonra madenciler ve botlar<\/a> taraf\u0131ndan benzer bir i\u015flemin daha \u00f6nce ger\u00e7ekle\u015ftirilmesidir. Bu sald\u0131r\u0131lar, \u00f6zellikle DeFi platformlar\u0131nda, DEX\u2019lerde ve NFT<\/a> a\u00e7\u0131k art\u0131rmalar\u0131nda s\u0131k\u00e7a g\u00f6r\u00fcl\u00fcr.<\/p> \u00d6rne\u011fin, b\u00fcy\u00fck miktarda token sat\u0131n almak isteyen bir kullan\u0131c\u0131n\u0131n i\u015flemi mempool\u2019da <\/a>g\u00f6r\u00fclebilir. Bir sald\u0131rgan, bu i\u015flemi fark edip kendi i\u015flemini daha y\u00fcksek gas ile \u00f6ne alabilir.<\/p> Sonu\u00e7 olarak fiyat y\u00fckselir ve orijinal kullan\u0131c\u0131 daha pahal\u0131ya almak zorunda kal\u0131r. Sald\u0131rgan, ald\u0131\u011f\u0131 tokeni hemen satarak k\u00e2r elde eder.<\/p> Front-running sald\u0131r\u0131lar\u0131n\u0131 \u00f6nlemek i\u00e7in \u015fu y\u00f6ntemler \u00f6nerilir.<\/p> \u0130\u015flem verilerini \u015fifreleyerek g\u00f6nderme.<\/p>\n<\/li>\n Slippage<\/a> s\u0131n\u0131rlar\u0131 koyma.<\/p>\n<\/li>\n MEV (Maximum Extractable Value) korumal\u0131 \u00e7\u00f6z\u00fcmler kullanma.<\/p>\n<\/li>\n<\/ul> Sald\u0131r\u0131lar, \u015feffaf ancak a\u00e7\u0131k i\u015flem s\u0131ralamas\u0131na sahip blok zincirlerin do\u011fal risklerindendir.<\/p> Ak\u0131ll\u0131 s\u00f6zle\u015fmeler otomasyon sa\u011flar, ama g\u00fcvenlik a\u00e7\u0131klar\u0131 ciddi riskler ta\u015f\u0131r. A\u015fa\u011f\u0131daki tabloda en yayg\u0131n g\u00fcvenlik a\u00e7\u0131klar\u0131 ve olas\u0131 etkileri \u00f6zetlenmi\u015ftir.<\/p>Ak\u0131ll\u0131 S\u00f6zle\u015fme G\u00fcvenli\u011fi Nedir?<\/strong><\/h2>
En Yayg\u0131n G\u00fcvenlik A\u00e7\u0131klar\u0131<\/strong><\/h2>
Reentrancy (Yinelenen \u00c7a\u011fr\u0131) Sald\u0131r\u0131s\u0131<\/strong><\/h3>
Integer Overflow \/ Underflow<\/strong><\/h3>
\n
Timestamp Manip\u00fclasyonu<\/strong><\/h3>
DoS (Hizmet Reddi) Sald\u0131r\u0131lar\u0131<\/strong><\/h3>
\n
Front-running<\/strong><\/h3>
\n
Ak\u0131ll\u0131 S\u00f6zle\u015fme G\u00fcvenli\u011fi A\u00e7\u0131klar\u0131<\/strong><\/h3>
![\"Ak\u0131ll\u0131](\"https:\/\/cimg.co\/wp-content\/uploads\/sites\/5\/2025\/05\/14085316\/1747212796-akilli-sozlesme-guvenligi.jpg\")
<\/p>![\"Ak\u0131ll\u0131](\"https:\/\/cimg.co\/wp-content\/uploads\/sites\/5\/2025\/05\/14085325\/1747212805-akilli-sozlesme-guvenligi-3.jpg\")
<\/p>![\"En](\"https:\/\/cimg.co\/wp-content\/uploads\/sites\/5\/2025\/05\/14085320\/1747212800-akilli-sozlesme-guvenligi.jpg\")
<\/p>