Unauthorized Admin Access
Unauthorized admin access refers to a security failure where a malicious actor gains the privileges necessary to trigger migrations or upgrade a protocol. This is often the result of leaked private keys, insecure multisig setups, or flaws in the governance process.
If an attacker gains these privileges, they can force a migration to a malicious contract, effectively stealing user funds or locking the protocol. Protecting against this requires robust key management, such as the use of hardware security modules and multi-signature wallets, as well as decentralized governance models that prevent any single individual or entity from having total control over the protocol's upgrade path.
This is a primary risk factor in the management of DeFi protocols.