Abstract
On Abstract, the EmergencyUpgradeBoard contract can instantly replace the code of 8 core contracts.

On a small screen, swipe sideways across the painting.
In the room
Security council
EmergencyUpgradeBoard
- Delay
- None, instant
- Holds
- 8 core keys · instant
See the 10 keys
Core contracts
- BridgeHub
- MessageRoot
- L1AssetRouter
- ChainTypeManager
- L1Nullifier
- ProtocolUpgradeHandler
- L1NativeTokenVault
- ChainAssetHandler
Peripheral
- CTMDeploymentTracker
- ZkToken · on the L2
Team multisig
Matter Labs Multisig
- Signatures
- 4/7
- Delay
- None, instant
- Holds
- 1 peripheral key only
See the 1 key
Peripheral
- ServerNotifier
Not in the painting
One upgradable contract has no key-holder named in the data, so it is not hung on the rack: Diamond.
Other roles, no upgrade keys
- Abstract Multisig · 4/8 · Can upgrade with no delay
- Guardians · 5/8 · Can interact with ProtocolUpgradeHandler
- SecurityCouncil · 6/8 · Can interact with ProtocolUpgradeHandler
- ZK Foundation Multisig · 3/6 · Can interact with EmergencyUpgradeBoard
- ValidatorTimelock · Can interact with Diamond
- EraMultisigValidator · 1/3 · Can interact with ValidatorTimelock
- EOA 1 and EOA 2 · Can interact with EraMultisigValidator
- ZkProtocolGovernor · Can interact with ProtocolUpgradeHandler
Show 1 more
- ZkTokenGovernor · Can interact with ZkToken
Snapshot of 23 October 2026. Live permissions on L2BEAT ↗