Governance Gallery All rollups

GRVT

Stage 0Other

On GRVT, the EmergencyUpgradeBoard contract can instantly replace the code of 6 core contracts.

Oil painting of GRVT's governance: the key-holders seated in a council gallery, their keys hanging below.

On a small screen, swipe sideways across the painting.

In the room

Security council

Emergency​Upgrade​Board

Delay
None, instant
Holds
6 core keys · instant
See the 8 keys

Core contracts

  • BridgeHub
  • MessageRoot
  • ChainTypeManager
  • ProtocolUpgradeHandler
  • L1NativeTokenVault
  • ChainAssetHandler

Peripheral

  • CTMDeploymentTracker
  • ZkToken · on the L2

Team multisig

Matter Labs Multisig

Signatures
4/7
Delay
None, instant
Holds
1 peripheral key only
See the 1 key

Peripheral

  • ServerNotifier

Not in the painting

One upgradable contract has no key-holder named in the data, so it is not hung on the rack: Diamond.

Other roles, no upgrade keys

  • Guardians · 5/8 · Can interact with ProtocolUpgradeHandler
  • GrvtChainAdminMultisig · 4/7 · Can upgrade with no delay
  • SecurityCouncil · 6/8 · Can interact with ProtocolUpgradeHandler
  • ZK Foundation Multisig · 3/6 · Can interact with EmergencyUpgradeBoard
  • ValidatorTimelock · Can interact with Diamond
  • GRVTTransactionFilterer · Can interact with Diamond
  • GrvtBridgeAdminMultisig · 4/7 · Can interact with GRVTTransactionFilterer
  • Governance · Can interact with GRVTTransactionFilterer
Show 7 more
  • GRVTBridgeProxy · Can interact with GRVTTransactionFilterer
  • L1AssetRouter · Can interact with GRVTTransactionFilterer
  • L1Nullifier · Can interact with GRVTTransactionFilterer
  • EOA 1 · Can interact with GRVTBridgeProxy
  • EOA 2 · Can interact with GRVTTransactionFilterer
  • ZkProtocolGovernor · Can interact with ProtocolUpgradeHandler
  • ZkTokenGovernor · Can interact with ZkToken

Snapshot of 23 October 2026. Live permissions on L2BEAT ↗