Governance Gallery All rollups

ZKsync Era

Stage 0ZK Rollup$256M secured

On ZKsync Era, the EmergencyUpgradeBoard contract can instantly replace the code of 9 core contracts.

Oil painting of ZKsync Era's governance: the key-holders seated in a council gallery, their keys hanging below.

On a small screen, swipe sideways across the painting.

In the room

Security council

Emergency​Upgrade​Board

Delay
None, instant
Holds
9 core keys · instant
See the 11 keys

Core contracts

  • BridgeHub
  • MessageRoot
  • L1AssetRouter
  • ChainTypeManager
  • L1Nullifier
  • ProtocolUpgradeHandler
  • L1ERC20Bridge
  • L1NativeTokenVault
  • ChainAssetHandler

Peripheral

  • CTMDeploymentTracker
  • ZkToken · on the L2

Team multisig

Matter Labs Multisig

Signatures
4/7
Delay
None, instant
Holds
1 peripheral key only
See the 1 key

Peripheral

  • ServerNotifier

Not in the painting

2 upgradable contracts have no key-holder named in the data, so they are not hung on the rack: Diamond, L1ERC20Bridge_wstETH.

Other roles, no upgrade keys

  • Guardians · 5/8 · Can interact with ProtocolUpgradeHandler
  • SecurityCouncil · 6/8 · Can interact with ProtocolUpgradeHandler
  • ZK Foundation Multisig · 3/6 · Can interact with EmergencyUpgradeBoard
  • ValidatorTimelock · Can interact with Diamond
  • EraMultisigValidator · 3/8 · Can interact with ValidatorTimelock
  • EOA 1 and EOA 2 · Can interact with EraMultisigValidator
  • ZkProtocolGovernor · Can interact with ProtocolUpgradeHandler
  • ZkTokenGovernor · Can interact with ZkToken

Snapshot of 23 October 2026. Live permissions on L2BEAT ↗