Architecture
Solidity Attack Vector #5: Improper Access Control
SecurityInfinity Research•5 min read
Solidity Attack Vector #5: Improper Access Control
This is the 'Forgot to add onlyOnwer' bug. It allows any random user to call critical administrative functions.
Exploit
An attacker calls an initialize() function that wasn't properly guarded, becomes the owner, and drains the contract.
Defense
Always use robust modifiers and audit all state-changing functions for proper authorization.