Arbitrum One
On Arbitrum One, the Arbitrum Security Council, a 9-of-12 multisig, can instantly replace the code of 28 core contracts. A token vote can do the same, after a 17d 8h delay.
On a small screen, swipe sideways across the painting.
In the room
Security council
Arbitrum Security Council
- Signatures
- 9/12
- Delay
- None, instant
- Holds
- 28 core keys · instant
The same people also sign as L2SecurityCouncilEmergency, L2SecurityCouncilPropose. Their keys are counted here once, each at its fastest path.
See the 30 keys
Core contracts
- SequencerInbox
- RollupProxy
- Bridge
- EdgeChallengeManager
- UpgradeExecutor
- L1Timelock
- Outbox
- Inbox
- L1ERC20Gateway
- L1ARBGateway
- L1WethGateway
- GatewayRouter
- L1CustomGateway
- RollupEventInbox
- OutboxV0
- OutboxV1
- L2Timelock · on the L2
- TreasuryGovernor · on the L2
- SecurityCouncilNomineeElectionGovernor · on the L2
- TreasuryTimelock · on the L2
- L2UpgradeExecutor · on the L2
- SecurityCouncilManager · on the L2
- L2CustomGateway · on the L2
- L2ERC20Gateway · on the L2
- L2GatewayRouter · on the L2
- L2WethGateway · on the L2
- L2WETH · on the L2
- L2ARBGateway · on the L2
Peripheral
- L1ArbitrumToken
- L2ArbitrumToken · on the L2
DAO vote
CoreGovernor
- Delay
- 17d 8h
- Holds
- 28 core keys · ⏳ 17d 8h
See the 30 keys
Core contracts
- SequencerInbox · ⏳ 17d 8h
- RollupProxy · ⏳ 17d 8h
- Bridge · ⏳ 17d 8h
- EdgeChallengeManager · ⏳ 17d 8h
- UpgradeExecutor · ⏳ 17d 8h
- L1Timelock · ⏳ 17d 8h
- Outbox · ⏳ 17d 8h
- Inbox · ⏳ 17d 8h
- L1ERC20Gateway · ⏳ 17d 8h
- L1ARBGateway · ⏳ 17d 8h
- L1WethGateway · ⏳ 17d 8h
- GatewayRouter · ⏳ 17d 8h
- L1CustomGateway · ⏳ 17d 8h
- RollupEventInbox · ⏳ 17d 8h
- OutboxV0 · ⏳ 17d 8h
- OutboxV1 · ⏳ 17d 8h
- L2Timelock · on the L2 · ⏳ 17d 8h
- TreasuryGovernor · on the L2 · ⏳ 17d 8h
- SecurityCouncilNomineeElectionGovernor · on the L2 · ⏳ 17d 8h
- TreasuryTimelock · on the L2 · ⏳ 17d 8h
- L2UpgradeExecutor · on the L2 · ⏳ 17d 8h
- SecurityCouncilManager · on the L2 · ⏳ 17d 8h
- L2CustomGateway · on the L2 · ⏳ 17d 8h
- L2ERC20Gateway · on the L2 · ⏳ 17d 8h
- L2GatewayRouter · on the L2 · ⏳ 17d 8h
- L2WethGateway · on the L2 · ⏳ 17d 8h
- L2WETH · on the L2 · ⏳ 17d 8h
- L2ARBGateway · on the L2 · ⏳ 17d 8h
Peripheral
- L1ArbitrumToken · ⏳ 17d 8h
- L2ArbitrumToken · on the L2 · ⏳ 17d 8h
Not in the painting
One upgradable contract has no key-holder named in the data, so it is not hung on the rack: wstETHEscrow.
Other roles, no upgrade keys
- SecurityCouncilMemberElectionGovernor · Can interact with SecurityCouncilManager
- SecurityCouncilMemberRemovalGovernor · Can interact with SecurityCouncilManager
- Arbitrum L2 Multisig 1 · 4/6 · Can interact with TipCollectionToggler
- GnosisSafeL2 · 3/5
- Arbitrum Multisig 1 · 4/6 · Can interact with SequencerInbox
- OspSoundnessGuard · Can interact with PauseExecutor
- EOA 1, EOA 2 and EOA 3 · Can interact with SequencerInbox
Snapshot of 23 October 2026. Live permissions on L2BEAT ↗