I recently discovered that Alpha Homora v2 (currently around $700m TVL) is fully upgradable by an EOA (externally owned account) admin key. An EOA is essentially a normal single-signer, non-contract Ethereum account with no ability to use multisig or timelock protections. The admin key is referred to in the protocol