Lens
On Lens, the EmergencyUpgradeBoard contract can instantly replace the code of 9 core contracts.
On a small screen, swipe sideways across the painting.
In the room
Security council
EmergencyUpgradeBoard
- Delay
- None, instant
- Holds
- 9 core keys · instant
See the 11 keys
Core contracts
- BridgeHub
- MessageRoot
- L1AssetRouter
- ChainTypeManager
- L1Nullifier
- ProtocolUpgradeHandler
- L1USDCBridge
- L1NativeTokenVault
- ChainAssetHandler
Peripheral
- CTMDeploymentTracker
- ZkToken · on the L2
Team multisig
Avail Multisig 1
- Signatures
- 4/7
- Delay
- 1d
- Holds
- 1 instant + 1 delayed core keys
See the 2 keys
Core contracts
- AvailBridgeV1 · ⏳ 1d
- Vector
Team multisig
Matter Labs Multisig
- Signatures
- 4/7
- Delay
- None, instant
- Holds
- 1 peripheral key only
See the 1 key
Peripheral
- ServerNotifier
Not in the painting
One upgradable contract has no key-holder named in the data, so it is not hung on the rack: Diamond.
Other roles, no upgrade keys
- Guardians · 5/8 · Can interact with ProtocolUpgradeHandler
- SecurityCouncil · 6/8 · Can interact with ProtocolUpgradeHandler
- ZK Foundation Multisig · 3/6 · Can interact with EmergencyUpgradeBoard
- ValidatorTimelock · Can interact with Diamond
- Lens Multisig · 2/3 · Can interact with Diamond
- Avail Multisig 2 · 3/5 · Can interact with AvailBridgeV1
- SP1VerifierGatewayMultisig · 2/3 · Can interact with SP1VerifierGateway
- EOA 1 and EOA 2 · Can interact with ValidatorTimelock
Show 3 more
- EOA 3 · Can interact with Vector
- ZkProtocolGovernor · Can interact with ProtocolUpgradeHandler
- ZkTokenGovernor · Can interact with ZkToken
Snapshot of 23 October 2026. Live permissions on L2BEAT ↗