Back to Blog
Architecture

Solidity Attack Vector #5: Improper Access Control

SecurityInfinity Research5 min read

Solidity Attack Vector #5: Improper Access Control

This is the 'Forgot to add onlyOnwer' bug. It allows any random user to call critical administrative functions.

Exploit

An attacker calls an initialize() function that wasn't properly guarded, becomes the owner, and drains the contract.

Defense

Always use robust modifiers and audit all state-changing functions for proper authorization.

Share this security research