Authorization Bypass Patterns

Provenance's marker module let anyone with zero tokens claim admin over 82 live financial assets

Trail of Bits found an authorization branch that compared a caller's balance against a supply figure the chain stops updating. Zero matched zero, and the check passed for everybody.