Everyone talks about smart contract security after a DeFi hack, but I'm starting to think the bigger risk is no longer the code.
More and more attacks succeed because an admin wallet gets compromised, a private key is stolen, or someone unknowingly signs a malicious transaction. The protocol isn't exploited—the existing permissions are.
That raises an important question: are we securing smart contracts while giving too much authority to a single key?
While researching this topic, I came across Newton Protocol. What caught my attention wasn't hype, but its focus on authorization. Instead of relying only on private keys, it adds policy-based verification before transactions are executed.
I don't see it as a guaranteed answer, and real-world adoption will ultimately decide its value. Still, I believe exploring stronger authorization models is a conversation DeFi needs.
As attacks increasingly target people instead of code, reducing the impact of a single compromised wallet may become just as important as writing secure smart contracts.