Delegatecall

An EVM operation that runs another contract’s code with the calling contract’s own storage and authority. Legitimate for libraries, but in a multisig it can hand full control to whoever wrote that code, the mechanism behind the 2025 Bybit theft.