Implementation Contract Hijacking

Mechanism

Implementation contract hijacking involves the unauthorized redirection of a smart contract’s logic by exploiting vulnerabilities in the proxy pattern or initialization process. Attackers target the delegation of calls to underlying logic contracts to gain administrative control or drain assets. This breach typically arises when the initializer function lacks proper protection or when the upgradeability controller is compromised.