Access Control Misconfiguration
Access control misconfiguration occurs when a smart contract fails to properly restrict sensitive functions to authorized users or roles. This often happens due to poor implementation of ownership patterns, such as failing to protect administrative functions that allow for minting tokens or changing critical parameters.
If an attacker gains unauthorized access to these functions, they can take full control of the protocol. This vulnerability is often the result of human error during the deployment or upgrade process.
Proper access control requires a strict definition of roles and the use of battle-tested libraries like OpenZeppelin to manage permissions. It is a foundational security concern that, if neglected, can lead to the total loss of all protocol assets.