Contract Self-Destruct Risk

The self-destruct risk refers to the potential for a contract to be permanently removed from the blockchain, effectively deleting its code and storage. In an upgradeable system, if a proxy or implementation contract contains a selfdestruct instruction, it can be triggered to destroy the contract and all associated funds.

This is a catastrophic failure mode that can lead to the permanent loss of all assets locked in the protocol. Modern security practices involve strictly disabling or restricting the use of the selfdestruct opcode in all contracts, especially those that hold user funds.

Audits prioritize the identification of any selfdestruct logic to ensure it is not reachable by unauthorized parties. Protecting the existence of the contract is the first step in protecting the assets it manages.