Attacks on Ethereum

V diplomski nalogi smo obravnavali zasnove in principe delovanje omrežja Ethereum, ki poleg prenosa sredstev omogoča tudi pisanje pametnih pogodb ter njihovo objavo v omrežju. Na ta način lahko izdelamo decentralizirane namenske programe, nad katerimi, ko jih enkrat objavimo, centralna avtoriteta nima več nadzora. Ker takih programov ne moremo več spreminjati, je potrebno biti že pri njihovi izdelavi izredno pazljiv in natančen. V delu predstavimo napade, ki so se v preteklosti že zgodili v omrežju Ethereum, njihove posledice in načine reševanja. Da se izognemo njihovim ponovitvam, predstavimo dobre prakse pisanja pametnih pogodb ter ključne težave, s katerimi se razvijalec tekom razvoja sooča.In this thesis we aim to provide the concepts and principles necessary to understand how the Ethereum network works. It allows us to write smart contracts and deploy them to the network. This way decentralised applications with no central authority can be written. Due to the fact that contracts cannot be modified once they have been published to the network, we need to be careful how we structure them. We present the most relevant attacks that have happened on the network in the past. In order to avoid them in the future, we present good practices for writing smart contracts and the key problems one faces during their development