OWASP releases 2026 Smart Contract Top 10. New addition: SC10 Proxy and Upgradeability Vulnerabilities. Insecure upgrade patterns and weak governance over contract upgrades now prominent risk. Attackers chaining vulnerabilities together - flash loans plus oracle manipulation. Threat landscape maturing.