{"posts":[{"id":19821,"title":"$OVR tokeni: GoPlus uyar\u0131lar\u0131na ili\u015fkin a\u00e7\u0131klama","excerpt":"\u015eu anda GoPlus taraf\u0131ndan $OVR token\u0131 hakk\u0131nda bildirilen iki g\u00fcvenlik uyar\u0131s\u0131 mevcut. Ba\u011flam d\u0131\u015f\u0131nda bak\u0131ld\u0131\u011f\u0131nda bunlar olduk\u00e7a endi\u015fe verici olabilir. Bu hatay\u0131 a\u00e7\u0131kl\u0131\u011fa kavu\u015fturmak ve d\u00fczeltmek istiyoruz. \u00a0 Arkaplan GoPlus, tasar\u0131m gere\u011fi ERC-20 token ak\u0131ll\u0131 s\u00f6zle\u015fmesini kontrol eden yap\u0131y\u0131 hesaba katmayan token ak\u0131ll\u0131 s\u00f6zle\u015fme kodlar\u0131 ve i\u015flevleri \u00fczerinde otomatik analitikler \u00e7al\u0131\u015ft\u0131r\u0131r. Bunun bir nedeni var: [&hellip;]","content":"<p><strong>\u015eu anda GoPlus taraf\u0131ndan $OVR token\u0131 hakk\u0131nda bildirilen <a href=\"https:\/\/gopluslabs.io\/token-security\/1\/0x21BfBDa47A0B4B5b1248c767Ee49F7caA9B23697\">iki g\u00fcvenlik uyar\u0131s\u0131<\/a> mevcut. Ba\u011flam d\u0131\u015f\u0131nda bak\u0131ld\u0131\u011f\u0131nda bunlar olduk\u00e7a endi\u015fe verici olabilir. Bu hatay\u0131 a\u00e7\u0131kl\u0131\u011fa kavu\u015fturmak ve d\u00fczeltmek istiyoruz. <\/strong><\/p>\n<p>\u00a0<\/p>\n<h3>Arkaplan<\/h3>\n<p>GoPlus, tasar\u0131m gere\u011fi ERC-20 token ak\u0131ll\u0131 s\u00f6zle\u015fmesini kontrol eden yap\u0131y\u0131 hesaba katmayan token ak\u0131ll\u0131 s\u00f6zle\u015fme kodlar\u0131 ve i\u015flevleri \u00fczerinde otomatik analitikler \u00e7al\u0131\u015ft\u0131r\u0131r. Bunun bir nedeni var: ERC-20 token standard\u0131ndaki kontroller otomatikle\u015ftirilebilirken, ERC-20 token\u0131n\u0131 kontrol eden keyfi ak\u0131ll\u0131 s\u00f6zle\u015fme yap\u0131lar\u0131ndaki kontroller otomatikle\u015ftirilemez.<\/p>\n<p>Ne yaz\u0131k ki b\u00f6yle bir yap\u0131land\u0131rma, IBCO taraf\u0131ndan yay\u0131mlanan bir tokena dayal\u0131 olarak t\u00fcm projelerdeki risklerin yanl\u0131\u015f temsil edilmesine yol a\u00e7maktad\u0131r. Asl\u0131nda <a href=\"https:\/\/gopluslabs.io\/token-security\/1\/0x3f382dbd960e3a9bbceae22651e88158d2791550\">ayn\u0131 uyar\u0131lar Avegotchi token\u0131 $GHST<\/a>\u2018yi de etkiliyor.<\/p>\n<p>Sorunu GoPlus\u2019a bildirdik ancak rapor g\u00fcncellenmedi.<\/p>\n<p>\u00a0<\/p>\n<h3>Teknik derin dal\u0131\u015f<\/h3>\n<p>GoPlus, ERC-20 s\u00f6zle\u015fmesinin bas\u0131labilir olup olmad\u0131\u011f\u0131n\u0131, yani c\u00fczdanlarda token bas\u0131p yakma yetene\u011fine sahip olup olmad\u0131\u011f\u0131n\u0131 kontrol eder. Ancak GoPlus, ERC-20 s\u00f6zle\u015fmesinin sahibinin kim oldu\u011funu, dolay\u0131s\u0131yla <strong>kimin token basma veya yakma yetene\u011fini kullanabilece\u011fini hesaba katm\u0131yor<\/strong>.<\/p>\n<p>OVER ve ayr\u0131ca Aavegotchi durumunda, <strong>bu m\u00fclk\u00fcn sahibi IBCO ak\u0131ll\u0131 s\u00f6zle\u015fmesidir ve bu m\u00fclkiyet de\u011fi\u015ftirilemez<\/strong>.<\/p>\n<p>IBCO ak\u0131ll\u0131 s\u00f6zle\u015fmeleri, <a href=\"https:\/\/consensys.io\/diligence\/audits\/2019\/11\/aragonblack-fundraising\/\">Consensys taraf\u0131ndan denetlenen<\/a> Aragon Black \u00c7er\u00e7evesini temel al\u0131r. <a href=\"https:\/\/www.overthereality.ai\/blog\/a-new-era-for-the-ovr-token\/\">Hem OVER<\/a> hem de <a href=\"https:\/\/blog.aavegotchi.com\/let-the-great-ghst-migration-begin\/\">Aavegotchi<\/a> durumunda IBCO s\u00f6zle\u015fmelerinin \u015fu anda tamamen durduruldu\u011funu belirtmeye bile gerek yok.<\/p>\n<p>IBCO\u2019ya ve onun tokenleri nas\u0131l ve neden bas\u0131p yakt\u0131\u011f\u0131na a\u015fina de\u011filseniz <a href=\"https:\/\/hackernoon.com\/understanding-ibco-can-another-crypto-funding-mechanism-yield-accountable-results-qb4a3zi5\">bu makaleye<\/a> ve <a href=\"https:\/\/docs.overthereality.ai\/over-whitepaper\/initial-bonding-curve-offer\/terms-and-conditions\">Teknik \u0130ncelememize<\/a> ba\u015fvurabilirsiniz.<\/p>\n<p>\u00d6nceki ifadeler, OVER ak\u0131ll\u0131 s\u00f6zle\u015fmelerin do\u011frudan kontrol edilmesiyle de do\u011frulanabilir. YALNIZCA BatchedBancorMarketMaker s\u00f6zle\u015fmesi (IBCO) token basabilir ve yakabilir ve bu davran\u0131\u015f\u0131 de\u011fi\u015ftirme imkan\u0131 yoktur.<\/p>\n<p>OVR ERC-20 Ak\u0131ll\u0131 s\u00f6zle\u015fmenin incelenmesi: <a href=\"https:\/\/etherscan.io\/address\/0x21bfbda47a0b4b5b1248c767ee49f7caa9b23697#readContract#F5\">https:\/\/etherscan.io\/address\/0x21bfbda47a0b4b5b1248c767ee49f7caa9b23697#readContract#F5<\/a><\/p>\n<p>OVR ERC-20\u2019nin sahibi, IBCO ak\u0131ll\u0131 s\u00f6zle\u015fmesinin (BatchedBancorMarketMaker) adresidir: 0x8c19cf0135852ba688643f57d56be72bb898c411<\/p>\n<p>Bu ak\u0131ll\u0131 s\u00f6zle\u015fmenin kaynak koduna g\u00f6z at\u0131yoruz: <a href=\"https:\/\/etherscan.io\/address\/0x8c19cF0135852BA688643F57d56Be72bB898c411#contracts\">https:\/\/etherscan.io\/address\/0x8c19cF0135852BA688643F57d56Be72bB898c411#contracts<\/a><\/p>\n<p>OVR tokenlerini yakmaya y\u00f6nelik tek \u00e7a\u011fr\u0131, birisinin bir sat\u0131\u015f emri a\u00e7\u0131p DAI (teminat) talebinde bulunmas\u0131yla ger\u00e7ekle\u015fir:<\/p>\n<p><span style=\"font-weight: 400\">\u00a0<\/span><\/p>\n<p><img decoding=\"async\" alt=\"\" class=\"wp-image-13326 size-medium\" height=\"169\" loading=\"lazy\" src=\"https:\/\/blog.ovr.ai\/wp-content\/uploads\/2024\/02\/Screenshot-2023-10-26-at-15.09.01-560x169.png\" width=\"560\" \/><\/p>\n<h6><span style=\"font-weight: 400\">Line 731 of the BatchedBancorMarketMaker.sol<\/span><\/h6>\n<p>Son olarak ak\u0131ll\u0131 s\u00f6zle\u015fmenin sahibi, yakma fonksiyonunu kendisi \u00e7a\u011f\u0131ramaz. Yazma \u00e7a\u011fr\u0131lar\u0131n\u0131 kontrol ederek g\u00f6rebilece\u011finiz gibi, b\u00f6yle bir i\u015flev mevcut de\u011fildir: <a href=\"https:\/\/etherscan.io\/address\/0x8c19cF0135852BA688643F57d56Be72bB898c411#writeContract\">https:\/\/etherscan.io\/address\/0x8c19cF0135852BA688643F57d56Be72bB898c411#writeContract<\/a><\/p>\n<p><strong>Bu konuyla ilgili ba\u015fka sorular\u0131n\u0131z veya \u015f\u00fcpheleriniz varsa l\u00fctfen bize resmi Telegram ve Discord kanallar\u0131ndan ula\u015f\u0131n.<\/strong><\/p>\n<p><b>\u00a0<\/b><\/p>\n","permalink":"ovr-tokeni-goplus-uyarilarina-iliskin-aciklama","date":"2023-10-26 00:00:00","image_small":"https:\/\/blog.ovr.ai\/wp-content\/uploads\/2024\/02\/blog_over_token_1920x1080_v1-150x150.jpg","image_medium":"https:\/\/blog.ovr.ai\/wp-content\/uploads\/2024\/02\/blog_over_token_1920x1080_v1-300x169.jpg","image_large":"https:\/\/blog.ovr.ai\/wp-content\/uploads\/2024\/02\/blog_over_token_1920x1080_v1-1024x576.jpg","image_full":"https:\/\/blog.ovr.ai\/wp-content\/uploads\/2024\/02\/blog_over_token_1920x1080_v1.jpg","single_url":"https:\/\/blog.ovr.ai\/tr\/ovr-tokeni-goplus-uyarilarina-iliskin-aciklama\/","translations":{"en":{"single_url":"https:\/\/blog.ovr.ai\/ovr-token-clarification-on-goplus-alerts\/","permalink":"ovr-token-clarification-on-goplus-alerts"},"fr":{"single_url":"https:\/\/blog.ovr.ai\/fr\/jeton-ovr-clarification-sur-les-alertes-goplus\/","permalink":"jeton-ovr-clarification-sur-les-alertes-goplus"},"es":{"single_url":"https:\/\/blog.ovr.ai\/es\/ovr-token-clarification-on-goplus-alerts-2\/","permalink":"ovr-token-clarification-on-goplus-alerts-2"},"tr":{"single_url":"https:\/\/blog.ovr.ai\/tr\/ovr-tokeni-goplus-uyarilarina-iliskin-aciklama\/","permalink":"ovr-tokeni-goplus-uyarilarina-iliskin-aciklama"},"zh":{"single_url":"https:\/\/blog.ovr.ai\/zh\/ovr-token-clarification-on-goplus-alerts-3\/","permalink":"ovr-token-clarification-on-goplus-alerts-3"}}}]}