Upgradeable Proxies: When the Upgrade Is the Attack

Delegatecall storage takeover, slot-0 storage collisions, uninitialized implementations, UUPS selfdestruct bricking (Parity/Wormhole), and initializer front-running