We want to share the full story of a recent security incident with one of our smart contracts. This is written for everyone (not just developers) to understand what went wrong, what we learned and what we plan to do going forward.
We are providing a comprehensive technical post-mortem regarding a sophisticated smart contract vulnerability that was exploited in our recently deployed Base contract. 
This incident demonstrates the critical importance of proper access control implementation in upgradeable smart contracts.