# Immutable X

Markdown version of https://ethbeat.org/layer2s/projects/immutablex

## Summary

**Warning:** This project is archived and no longer maintained.

**Warning:** Why is the project listed in others? The data availability committee threshold is too low. Consequence: projects with a low DAC threshold rely on the honesty of few entities to safely attest data availability on Ethereum. These entities can collude with the proposer to finalize an unavailable state, which can cause loss of funds. Learn more about the [recategorisation](https://medium.com/l2beat/framework-update-l2-projects-recategorisation-5d43b0d1fe50).

- Total Value Secured: $562.51 K (-2.56% compared to seven days ago; canonically bridged $562.51 K, natively minted $0.00, externally bridged $0.00; 0.00% with additional trust assumptions compared to the tokens involved and the Stage assigned to the project's canonical messaging bridge)
- TVS by asset: ETH & derivatives $525.42 K (93.4%), Stablecoins $26.10 K (4.64%), Other $10.98 K (1.95%)
- Associated tokens: IMX: $7.43 K (1.32% of TVS)
- Past day UOPS: No data
- Type: Other
- Purposes: NFT, Exchange
- Host chain: Ethereum

### Risks

- Sequencer failure: No mechanism (sentiment: bad)
- State validation: Validity proofs (ST) (sentiment: good)
- Data availability: External (DAC) (sentiment: bad)
- Exit window: 14d (sentiment: warning)
- Proposer failure: Use escape hatch (sentiment: good)

### About

Immutable X is an NFT-focused Validium providing zero gas fees, instant trades and scalability for applications.

### Links

- Website: https://immutable.com/
- Bridge: https://toolkit.immutable.com/squid-bridge/
- Docs: https://docs.starkware.co/starkex/perpetual/perpetual_overview.html
- Explorer: https://immutascan.io/
- Repository: https://github.com/starkware-libs/starkex-contracts
- Social: https://medium.com/@immutablex, https://twitter.com/Immutable, https://discord.com/invite/immutable-play, https://reddit.com/r/ImmutableX/, https://linkedin.com/company/immutable-1/, https://youtube.com/channel/UCR_WlrGou7hm0ACXYpldcuA
- Other: https://growthepie.com/chains/immutable-x
- Contracts explorer (Disco): https://disco.ethbeat.org/ui/p/immutablex

### Badges

- Application-specific chain: This project is built to operate a specific application
- Data Availability Committee: There is a Data Availability Committee that provides/attests to data availability
- StarkEx: This project was deployed utilizing the StarkEx technology from StarkWare
- Uses SHARP: The project uses a shared prover contract - SHARP

## Value Secured

The interactive TVS charts are shown on [the HTML page](https://ethbeat.org/layer2s/projects/immutablex#tvs).

Token by token: [TVS breakdown](https://ethbeat.org/layer2s/projects/immutablex/tvs-breakdown).

- [TVS chart (JSON)](https://ethbeat.org/api/scaling/tvs/immutablex?range=max)
- [TVS breakdown by token (JSON)](https://ethbeat.org/api/scaling/tvs/immutablex/breakdown)

## Activity

The interactive activity chart is shown on [the HTML page](https://ethbeat.org/layer2s/projects/immutablex#activity).

Data source: StarkEx Aggregations API

- [Activity chart (JSON)](https://ethbeat.org/api/scaling/activity/immutablex?range=max)

## Milestones & Incidents

- 2026-03-05: [Immutable X migrated to Immutable zkEVM](https://x.com/Immutable/status/2016389261575258446). Immutable X deployed contracts for migration to Immutable zkEVM. Operation of Immutable X halts.
- 2022-06-29: [IMX Token introduced](https://www.immutable.com/blog/introducing-imx-to-power-ethereums-first-layer-2-for-nfts). Immutable announce IMX, the native ERC-20 utility token of Immutable X.
- 2021-04-08: [Trading is live on Immutable X Marketplace](https://twitter.com/immutable/status/1380269810525872131?s=21&t=kyMdE6ORI9f76e8aqizlpg). Immutable has launched the first phase of its Layer 2 scaling protocol.

## Risk summary

### Funds can be stolen if

1. a contract receives a malicious code upgrade. There is a 14d delay on code upgrades.

### Funds can be lost if

2. the external data becomes unavailable (CRITICAL).

### Users can be censored if

3. the committee restricts their access to the external data,
4. the operator refuses to include their transactions. However, there exists a mechanism to independently exit the system.

### MEV can be extracted if

5. the operator exploits their centralized position and frontruns user transactions.

## Risk analysis

### Sequencer failure

No mechanism (sentiment: bad)

There is no mechanism to have transactions be included if the sequencer is down or censoring.

### State validation

Validity proofs (ST) (sentiment: good)

STARKs are zero knowledge proofs that ensure state correctness.

### Data availability

External (DAC) (sentiment: bad)

Proof construction relies fully on data that is NOT published onchain. There exists a Data Availability Committee (DAC) with a threshold of 5/7 that is tasked with protecting and supplying the data.

### Exit window

14d (sentiment: warning)

Users have 14d to exit funds in case of an unwanted upgrade. There is a 14d delay before a upgrade is applied, and withdrawals can take up to 0s to be processed.

### Proposer failure

Use escape hatch (sentiment: good)

Users are able to trustlessly exit by submitting a Merkle proof of funds. NFTs will be minted on L1 to exit.

## Data availability

### Data is not stored on chain

The balances of the users are not published onchain, but rather sent to external trusted parties, also known as committee members. A state update is valid and accepted onchain only if at least a quorum of the committee members sign a state update.

**Risks**

- Funds can be lost if the external data becomes unavailable (CRITICAL).
- Users can be censored if the committee restricts their access to the external data.

**References**

- [Data Availability Modes - StarkEx documentation](https://docs.starkware.co/starkex/con_data_availability.html#data_availability_modes)
- [Validium - StarkEx documentation](https://docs.starkware.co/starkex/con_data_availability.html#validium_starkex)
- [Availability Verifiers - StarkEx documentation](https://docs.starkware.co/starkex/spot/shared/contract-management.html#availability_verifiers_spot)

## State validation

### Validity proofs

Each update to the system state must be accompanied by a ZK proof that ensures that the new state was derived by correctly applying a series of valid user transactions to the previous state. These proofs are then verified on Ethereum by a smart contract. The system state is represented using Merkle roots.

**References**

- [Enforcing Consistency on the On-Chain State - StarkEx documentation](https://docs.starkware.co/starkex/spot/shared/README-off-chain-state.html#enforcing_consistency_in_the_on_chain_state_spot)

## Upgrades & Governance

### Past upgrades

The metrics include upgrades on the currently used proxy contracts. Historical proxy contracts and changes of such are not included.

- Count of upgrades: 10
- Last upgrade: 5mo 17d ago
- Avg upgrade interval: 8mo 20d

- 2026-05-20 23:38 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x9af235b6b0759b9fa2b301c7bc7bf04e05e5bd15000abe74b405466e09fca332](https://etherscan.io/tx/0x9af235b6b0759b9fa2b301c7bc7bf04e05e5bd15000abe74b405466e09fca332), implementations: [0x273b65a7231321D4ee47a4c47408Ef43517455Ec](https://etherscan.io/address/0x273b65a7231321D4ee47a4c47408Ef43517455Ec#code) ([diff](https://disco.ethbeat.org/diff/eth:0x58b5484F489f7858DC83a5a677338074b57de806/eth:0x273b65a7231321D4ee47a4c47408Ef43517455Ec))
- 2026-03-05 01:07 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x07ac699d0dc30804af73843cc1cba5f50780135e25932cf78be69a3e6c11b194](https://etherscan.io/tx/0x07ac699d0dc30804af73843cc1cba5f50780135e25932cf78be69a3e6c11b194), implementations: [0x58b5484F489f7858DC83a5a677338074b57de806](https://etherscan.io/address/0x58b5484F489f7858DC83a5a677338074b57de806#code) ([diff](https://disco.ethbeat.org/diff/eth:0x4EDD62189732e9fF476ABa880b48c29432A7AC9B/eth:0x58b5484F489f7858DC83a5a677338074b57de806))
- 2024-06-04 04:22 UTC, upgrade of [AxelarGasService](https://etherscan.io/address/0x2d5d7d31F671F86C782533cc367F14109a082712#code): transaction [0x89d167023ab2edd2f46e1c80f09118d7ab37362d845b2a9a781ec97eaa5c6563](https://etherscan.io/tx/0x89d167023ab2edd2f46e1c80f09118d7ab37362d845b2a9a781ec97eaa5c6563), implementations: [0xcb5C784DCf8FF342625DbC53B356ed0Cbb0EBB9b](https://etherscan.io/address/0xcb5C784DCf8FF342625DbC53B356ed0Cbb0EBB9b#code) ([diff](https://disco.ethbeat.org/diff/eth:0x4Fe2d119873790cc9e15F6cC53cae1C2eb2039dC/eth:0xcb5C784DCf8FF342625DbC53B356ed0Cbb0EBB9b))
- 2024-05-20 06:39 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x3425fd24435e4aefdb08f3970e61e446eb5d21a1e0c916d1ba9331b060b72192](https://etherscan.io/tx/0x3425fd24435e4aefdb08f3970e61e446eb5d21a1e0c916d1ba9331b060b72192), implementations: [0x4EDD62189732e9fF476ABa880b48c29432A7AC9B](https://etherscan.io/address/0x4EDD62189732e9fF476ABa880b48c29432A7AC9B#code) ([diff](https://disco.ethbeat.org/diff/eth:0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC/eth:0x4EDD62189732e9fF476ABa880b48c29432A7AC9B))
- 2023-12-19 05:10 UTC, deployment of [RootAxelarBridgeAdaptor](https://etherscan.io/address/0x4f49B53928A71E553bB1B0F66a5BcB54Fd4E8932#code): transaction [0x39c068494cbb3daa564a918bda53218f86d781976e6a8235c1c89a03dc9ec182](https://etherscan.io/tx/0x39c068494cbb3daa564a918bda53218f86d781976e6a8235c1c89a03dc9ec182), implementations: [0xE2E91C1Ae2873720C3b975a8034e887A35323345](https://etherscan.io/address/0xE2E91C1Ae2873720C3b975a8034e887A35323345#code)
- 2023-12-19 05:09 UTC, deployment of [RootERC20BridgeFlowRate](https://etherscan.io/address/0xBa5E35E26Ae59c7aea6F029B68c6460De2d13eB6#code): transaction [0x2e14d2e7f495b17f93c4c839315cfedfd5ee28df540e6433ccc6abb0206b0775](https://etherscan.io/tx/0x2e14d2e7f495b17f93c4c839315cfedfd5ee28df540e6433ccc6abb0206b0775), implementations: [0x177EaFe0f1F3359375B1728dae0530a75C83E154](https://etherscan.io/address/0x177EaFe0f1F3359375B1728dae0530a75C83E154#code)
- 2023-12-14 07:19 UTC, deployment of [AxelarGasService](https://etherscan.io/address/0x2d5d7d31F671F86C782533cc367F14109a082712#code): transaction [0xfc2554f725e599e45041529be0d88fd97508a5d3fb043cd26fc93a0bb45bf887](https://etherscan.io/tx/0xfc2554f725e599e45041529be0d88fd97508a5d3fb043cd26fc93a0bb45bf887), implementations: [0x4Fe2d119873790cc9e15F6cC53cae1C2eb2039dC](https://etherscan.io/address/0x4Fe2d119873790cc9e15F6cC53cae1C2eb2039dC#code)
- 2022-01-13 08:08 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x658a93571ca9733ba346bd746790a6d07821d86c89fd90809e85bf7f2f8d9797](https://etherscan.io/tx/0x658a93571ca9733ba346bd746790a6d07821d86c89fd90809e85bf7f2f8d9797), implementations: [0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC](https://etherscan.io/address/0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC#code) ([diff](https://disco.ethbeat.org/diff/eth:0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC/eth:0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC))
- 2021-09-09 16:30 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0xeaa0efb3937eee43c1083cc776d5033b131e6ef12ba0d0646db1b34e600847cd](https://etherscan.io/tx/0xeaa0efb3937eee43c1083cc776d5033b131e6ef12ba0d0646db1b34e600847cd), implementations: [0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC](https://etherscan.io/address/0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC#code) ([diff](https://disco.ethbeat.org/diff/eth:0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC/eth:0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC))
- 2021-08-31 08:15 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x26fb60bb6b5ff3ef22cd959d007588f7410586499870411cfddc2759b97d44d6](https://etherscan.io/tx/0x26fb60bb6b5ff3ef22cd959d007588f7410586499870411cfddc2759b97d44d6), implementations: [0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC](https://etherscan.io/address/0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC#code) ([diff](https://disco.ethbeat.org/diff/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378/eth:0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC))
- 2021-03-26 08:01 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x9e8cc538b40a70723a287ece3ecb4e6aafbbde0e04f621124df6e4c2d7995dc7](https://etherscan.io/tx/0x9e8cc538b40a70723a287ece3ecb4e6aafbbde0e04f621124df6e4c2d7995dc7), implementations: [0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378](https://etherscan.io/address/0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378#code) ([diff](https://disco.ethbeat.org/diff/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378))
- 2021-03-25 11:24 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x79f72bef0984e3ae76ab638c078f92f1a0d4ad2a289b8a91e072d81f77d505ce](https://etherscan.io/tx/0x79f72bef0984e3ae76ab638c078f92f1a0d4ad2a289b8a91e072d81f77d505ce), implementations: [0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378](https://etherscan.io/address/0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378#code) ([diff](https://disco.ethbeat.org/diff/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378))
- 2021-03-16 18:04 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0xf42d8fc579401fc76769bf63ba72f7277aac976aeb2a4cd3eca899ca08de7c20](https://etherscan.io/tx/0xf42d8fc579401fc76769bf63ba72f7277aac976aeb2a4cd3eca899ca08de7c20), implementations: [0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378](https://etherscan.io/address/0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378#code) ([diff](https://disco.ethbeat.org/diff/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378))
- 2021-03-10 15:13 UTC, deployment of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x9b57c19aa91cc17c9487085b68532cd65d1e4c263b5928f14c03a9d36c9097df](https://etherscan.io/tx/0x9b57c19aa91cc17c9487085b68532cd65d1e4c263b5928f14c03a9d36c9097df), implementations: [0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378](https://etherscan.io/address/0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378#code)

## Updates

Each date links the update on the HTML page, which also shows its contract diffs.

### [2026-06-22 08:57 UTC](https://ethbeat.org/layer2s/projects/immutablex?update=3fe237ea) (1 change)

Disabled withdrawal queue of 1 day for all withdrawals from the Immutable X bridge to Ethereum (it was enabled very recently).

### [2026-06-18 10:27 UTC](https://ethbeat.org/layer2s/projects/immutablex?update=681d6764) (1 change)

Enabled withdrawal queue of 1 day for all withdrawals from the Immutable X bridge to Ethereum, probably as a security measure. Note that the chain is archived and TVS is very low already.

### [2026-06-08 10:15 UTC](https://ethbeat.org/layer2s/projects/immutablex?update=e507dd07) (3 changes)

Axelar gas service owner changed (the owner address of this contract is the microservice that pays for gas for cross-chain communication on Axelar).

Also rotated owner of the operators contract of Axelar gas service.

### [2026-05-21 15:35 UTC](https://ethbeat.org/layer2s/projects/immutablex?update=8538c490) (high severity, 29 changes)

Upgrade to ImmutableX contract: https://disco.l2beat.com/diff/eth:0x58b5484F489f7858DC83a5a677338074b57de806/eth:0x273b65a7231321D4ee47a4c47408Ef43517455Ec.

It introduces 7 hardcoded L1 addresses that are granted VCO tokens from the ImmutableX bridge, each different amounts. They have already withdrawn these tokens. Amounts are small and token is worthless according to coingecko.

Also, added `registerSender` and `registerEthAddress` functions from Users.sol in StarkEx repo to register an eth address for a given starknet address after checking a valid signature.

### [2026-03-05 09:30 UTC](https://ethbeat.org/layer2s/projects/immutablex?update=75b1271a) (high severity, 131 changes)

Immutable X migrates assets and the state root to immutable zkevm. Immutable X is deprecated now: https://x.com/Immutable/status/2016389261575258446?s=20.

State root is injected into a specific contract (`zkEVMWithdrawalProcessor`) on immutable zkevm via Axelar message (`sendVaultRoot()` funtion on `VaultRootSenderAdapter`). Tokens are migrated manually by migration manager (`migrateHoldings()` function on `StarkExchangeMigration`), data for each token must be given as `TokenMigrationDetails`.

### [2026-03-02 11:28 UTC](https://ethbeat.org/layer2s/projects/immutablex?update=e9c95375) (1 change)

Rotated ms member.

### [2025-07-14 12:45 UTC](https://ethbeat.org/layer2s/projects/immutablex?update=94a37ca2) (5 changes)

Discovery rerun on the same block number with only config-related changes.

### [2025-03-07 13:48 UTC](https://ethbeat.org/layer2s/projects/immutablex?update=ce008c7c) (1 change)

MS: single member change.

### [2024-12-12 15:33 UTC](https://ethbeat.org/layer2s/projects/immutablex?update=0b5b02d3) (4 changes)

Removed Multisig1 as admin of StarkExchange, now admin is only Multisig2.

### [2024-12-05 06:21 UTC](https://ethbeat.org/layer2s/projects/immutablex?update=faff190e) (3 changes)

Second Governor MS added.

### [2024-05-20 09:34 UTC](https://ethbeat.org/layer2s/projects/immutablex?update=54cd158e) (high severity, 17 changes)

Starkex diamond contracts are upgraded to [version 4.0.1](https://github.com/starkware-libs/starkex-contracts/releases).

- Removed the need to register users (Registration is now only required for deposit cancellation and escape flows.)
- Slight change to the way the hash message for on-chain registration is calculated.

#### AllVerifiers.2.sol

- formatting
- uncheckedTokenContractCall() removed

#### TokensAndRamping.3.sol

Change to the way the hash message for on-chain registration is calculated. (ownerKey vs ethKey)

- formatting
- withdrawTo(), withdrawNftTo(), is now withdraw(), withdrawNft()
- EllipticCurve lib added
- registerUser() is now registerAdddress() and using `ECDSA.verify`
- starkKey is now ownerKey

#### Other diamond facets

- formatting and minor changes

#### DepositCancelDelay

- Reduced from 3 days to 2 days.

### [2023-10-02 13:37 UTC](https://ethbeat.org/layer2s/projects/immutablex?update=9ca82b7e) (2 changes)

## Operator

### The system has a centralized operator

The operator is the only entity that can propose blocks. A live and trustworthy operator is vital to the health of the system. Typically, the Operator is the hot wallet of the StarkEx service submitting state updates for which proofs have been already submitted and verified.

**Risks**

- MEV can be extracted if the operator exploits their centralized position and frontruns user transactions.

**References**

- [Operator - StarkEx documentation](https://docs.starkware.co/starkex/perpetual/shared/contract-management.html#operator_perpetual)

### Users can force exit the system

Force exit allows the users to escape censorship by withdrawing their funds. The system allows users to force the withdrawal of funds by submitting a request directly to the contract onchain. The request must be served within a defined time period. If this does not happen, the system will halt regular operation and permit trustless withdrawal of funds.

**Risks**

- Users can be censored if the operator refuses to include their transactions. However, there exists a mechanism to independently exit the system.

**References**

- [Censorship Prevention - StarkEx documentation](https://docs.starkware.co/starkex/architecture/solution-architecture.html#8-censorship-prevention)

## Withdrawals

### Regular exit

The user initiates the withdrawal by submitting a regular transaction on this chain. When the block containing that transaction is settled the funds become available for withdrawal on L1. ZK proofs are required to settle blocks. Finally the user submits an L1 transaction to claim the funds. When withdrawing NFTs they are minted on L1.

**References**

- [Withdrawal - StarkEx documentation](https://docs.starkware.co/starkex/spot/withdrawal.html)

### Forced exit

If the user experiences censorship from the operator with regular exit they can submit their withdrawal requests directly on L1. The system is then obliged to service this request. Once the force operation is submitted and if the request is serviced, the operation follows the flow of a regular exit.

**References**

- [Forced Operations - StarkEx documentation](https://docs.starkware.co/starkex/spot/shared/README-forced-operations.html)
- [Full Withdrawal - StarkEx documentation](https://docs.starkware.co/starkex/spot/spot-trading-full-withdrawals.html)

### Emergency exit

If the enough time deadline passes and the forced exit is still ignored the user can put the system into a frozen state, disallowing further state updates. In that case everybody can withdraw by submitting a merkle proof of their funds with their L1 transaction.

**References**

- [Forced Operations - StarkEx documentation](https://docs.starkware.co/starkex/spot/shared/README-forced-operations.html)
- [Full Withdrawal - StarkEx documentation](https://docs.starkware.co/starkex/spot/spot-trading-full-withdrawals.html)

## Permissions

Explore these contracts and permissions in Disco, ETHBEAT's contract explorer: https://disco.ethbeat.org/ui/p/immutablex

### Ethereum

#### Actors

##### IMXAdminMultisig

Addresses: [0xD2C37fC6fD89563187f3679304975655e448D192](https://etherscan.io/address/0xD2C37fC6fD89563187f3679304975655e448D192)

A Multisig with 4/6 threshold.
- Can upgrade **with no delay**
  - RootAxelarBridgeAdaptor [via: ProxyAdmin]
  - StarkExchange
  - RootERC20BridgeFlowRate [via: ProxyAdmin]

Participants (6): [0x37AC4a9Bf184aa1130016525631f3Daec11f7b26](https://etherscan.io/address/0x37AC4a9Bf184aa1130016525631f3Daec11f7b26), [0x3d395f623D8954d71132F5caC10778CA275806e0](https://etherscan.io/address/0x3d395f623D8954d71132F5caC10778CA275806e0), [0xdb6c271060571A96A62E3947E373395C89f765Ba](https://etherscan.io/address/0xdb6c271060571A96A62E3947E373395C89f765Ba), [0xA28A84676E3Cec39e6F1D06CD0EEF6cAAa2F7f7b](https://etherscan.io/address/0xA28A84676E3Cec39e6F1D06CD0EEF6cAAa2F7f7b), [0x296A19A4e87F5824DBE8DEd53415A4704538bB30](https://etherscan.io/address/0x296A19A4e87F5824DBE8DEd53415A4704538bB30), [0x94e97260182B9537822687Dd3c301225c6f87a5e](https://etherscan.io/address/0x94e97260182B9537822687Dd3c301225c6f87a5e)

Used in: [Immutable zkEVM](https://ethbeat.org/layer2s/projects/immutablezkevm#OwnerMultisig)

##### EOA 1

Addresses: [0x72164D4448fe6cfA472946feDC71e83b4628B1aF](https://etherscan.io/address/0x72164D4448fe6cfA472946feDC71e83b4628B1aF)

- Can upgrade **with no delay**
  - AxelarGasService

## Smart contracts

![A diagram of the smart contract architecture](https://ethbeat.org/static/images/architecture/starkex.5c6a7500.png)

Explore these contracts and permissions in Disco, ETHBEAT's contract explorer: https://disco.ethbeat.org/ui/p/immutablex

### Ethereum

#### AxelarGasService

Addresses: [0x2d5d7d31F671F86C782533cc367F14109a082712](https://etherscan.io/address/0x2d5d7d31F671F86C782533cc367F14109a082712#code), [0xcb5C784DCf8FF342625DbC53B356ed0Cbb0EBB9b](https://etherscan.io/address/0xcb5C784DCf8FF342625DbC53B356ed0Cbb0EBB9b#code) (Implementation (Upgradable)), [0x72164D4448fe6cfA472946feDC71e83b4628B1aF](https://etherscan.io/address/0x72164D4448fe6cfA472946feDC71e83b4628B1aF#code) (Admin)

**Past upgrades** (Count of upgrades: 1, Last upgrade: 2y 5mo ago, Avg upgrade interval: 1y 5mo)

- 2024-06-04 04:22 UTC, upgrade of [AxelarGasService](https://etherscan.io/address/0x2d5d7d31F671F86C782533cc367F14109a082712#code): transaction [0x89d167023ab2edd2f46e1c80f09118d7ab37362d845b2a9a781ec97eaa5c6563](https://etherscan.io/tx/0x89d167023ab2edd2f46e1c80f09118d7ab37362d845b2a9a781ec97eaa5c6563), implementations: [0xcb5C784DCf8FF342625DbC53B356ed0Cbb0EBB9b](https://etherscan.io/address/0xcb5C784DCf8FF342625DbC53B356ed0Cbb0EBB9b#code) ([diff](https://disco.ethbeat.org/diff/eth:0x4Fe2d119873790cc9e15F6cC53cae1C2eb2039dC/eth:0xcb5C784DCf8FF342625DbC53B356ed0Cbb0EBB9b))
- 2023-12-14 07:19 UTC, deployment of [AxelarGasService](https://etherscan.io/address/0x2d5d7d31F671F86C782533cc367F14109a082712#code): transaction [0xfc2554f725e599e45041529be0d88fd97508a5d3fb043cd26fc93a0bb45bf887](https://etherscan.io/tx/0xfc2554f725e599e45041529be0d88fd97508a5d3fb043cd26fc93a0bb45bf887), implementations: [0x4Fe2d119873790cc9e15F6cC53cae1C2eb2039dC](https://etherscan.io/address/0x4Fe2d119873790cc9e15F6cC53cae1C2eb2039dC#code)

- Roles:
  - **admin**: EOA 1

Can be upgraded by: EOA 1 with no delay

#### AxelarGatewayProxyMultisig

Addresses: [0x4F4495243837681061C4743b74B3eEdf548D56A5](https://etherscan.io/address/0x4F4495243837681061C4743b74B3eEdf548D56A5#code)

#### RootAxelarBridgeAdaptor

Addresses: [0x4f49B53928A71E553bB1B0F66a5BcB54Fd4E8932](https://etherscan.io/address/0x4f49B53928A71E553bB1B0F66a5BcB54Fd4E8932#code), [0xE2E91C1Ae2873720C3b975a8034e887A35323345](https://etherscan.io/address/0xE2E91C1Ae2873720C3b975a8034e887A35323345#code) (Implementation (Upgradable)), [0xdE2BCd3F0297d29c25e83228E5A33C0b43b51Ec8](https://etherscan.io/address/0xdE2BCd3F0297d29c25e83228E5A33C0b43b51Ec8#code) (Admin)

**Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A)

- 2023-12-19 05:10 UTC, deployment of [RootAxelarBridgeAdaptor](https://etherscan.io/address/0x4f49B53928A71E553bB1B0F66a5BcB54Fd4E8932#code): transaction [0x39c068494cbb3daa564a918bda53218f86d781976e6a8235c1c89a03dc9ec182](https://etherscan.io/tx/0x39c068494cbb3daa564a918bda53218f86d781976e6a8235c1c89a03dc9ec182), implementations: [0xE2E91C1Ae2873720C3b975a8034e887A35323345](https://etherscan.io/address/0xE2E91C1Ae2873720C3b975a8034e887A35323345#code)

- Roles:
  - **admin**: ProxyAdmin; ultimately IMXAdminMultisig

Can be upgraded by: IMXAdminMultisig with no delay

Proxy used in: [Immutable zkEVM](https://ethbeat.org/layer2s/projects/immutablezkevm#RootAxelarBridgeAdaptor)

#### StarkExchangeMigration

Addresses: [0x58b5484F489f7858DC83a5a677338074b57de806](https://etherscan.io/address/0x58b5484F489f7858DC83a5a677338074b57de806#code)

#### StarkExchange (escrow)

Addresses: [0x5FDCCA53617f4d2b9134B29090C87D01058e27e9](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code), [0x273b65a7231321D4ee47a4c47408Ef43517455Ec](https://etherscan.io/address/0x273b65a7231321D4ee47a4c47408Ef43517455Ec#code) (Implementation (Upgradable)), [0xD2C37fC6fD89563187f3679304975655e448D192](https://etherscan.io/address/0xD2C37fC6fD89563187f3679304975655e448D192#code) (Admin)

**Past upgrades** (Count of upgrades: 9, Last upgrade: 5mo 17d ago, Avg upgrade interval: 6mo 26d)

- 2026-05-20 23:38 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x9af235b6b0759b9fa2b301c7bc7bf04e05e5bd15000abe74b405466e09fca332](https://etherscan.io/tx/0x9af235b6b0759b9fa2b301c7bc7bf04e05e5bd15000abe74b405466e09fca332), implementations: [0x273b65a7231321D4ee47a4c47408Ef43517455Ec](https://etherscan.io/address/0x273b65a7231321D4ee47a4c47408Ef43517455Ec#code) ([diff](https://disco.ethbeat.org/diff/eth:0x58b5484F489f7858DC83a5a677338074b57de806/eth:0x273b65a7231321D4ee47a4c47408Ef43517455Ec))
- 2026-03-05 01:07 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x07ac699d0dc30804af73843cc1cba5f50780135e25932cf78be69a3e6c11b194](https://etherscan.io/tx/0x07ac699d0dc30804af73843cc1cba5f50780135e25932cf78be69a3e6c11b194), implementations: [0x58b5484F489f7858DC83a5a677338074b57de806](https://etherscan.io/address/0x58b5484F489f7858DC83a5a677338074b57de806#code) ([diff](https://disco.ethbeat.org/diff/eth:0x4EDD62189732e9fF476ABa880b48c29432A7AC9B/eth:0x58b5484F489f7858DC83a5a677338074b57de806))
- 2024-05-20 06:39 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x3425fd24435e4aefdb08f3970e61e446eb5d21a1e0c916d1ba9331b060b72192](https://etherscan.io/tx/0x3425fd24435e4aefdb08f3970e61e446eb5d21a1e0c916d1ba9331b060b72192), implementations: [0x4EDD62189732e9fF476ABa880b48c29432A7AC9B](https://etherscan.io/address/0x4EDD62189732e9fF476ABa880b48c29432A7AC9B#code) ([diff](https://disco.ethbeat.org/diff/eth:0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC/eth:0x4EDD62189732e9fF476ABa880b48c29432A7AC9B))
- 2022-01-13 08:08 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x658a93571ca9733ba346bd746790a6d07821d86c89fd90809e85bf7f2f8d9797](https://etherscan.io/tx/0x658a93571ca9733ba346bd746790a6d07821d86c89fd90809e85bf7f2f8d9797), implementations: [0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC](https://etherscan.io/address/0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC#code) ([diff](https://disco.ethbeat.org/diff/eth:0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC/eth:0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC))
- 2021-09-09 16:30 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0xeaa0efb3937eee43c1083cc776d5033b131e6ef12ba0d0646db1b34e600847cd](https://etherscan.io/tx/0xeaa0efb3937eee43c1083cc776d5033b131e6ef12ba0d0646db1b34e600847cd), implementations: [0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC](https://etherscan.io/address/0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC#code) ([diff](https://disco.ethbeat.org/diff/eth:0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC/eth:0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC))
- 2021-08-31 08:15 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x26fb60bb6b5ff3ef22cd959d007588f7410586499870411cfddc2759b97d44d6](https://etherscan.io/tx/0x26fb60bb6b5ff3ef22cd959d007588f7410586499870411cfddc2759b97d44d6), implementations: [0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC](https://etherscan.io/address/0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC#code) ([diff](https://disco.ethbeat.org/diff/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378/eth:0xB8563AD5aF1F79dd04937BE8B572318c8e6f43AC))
- 2021-03-26 08:01 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x9e8cc538b40a70723a287ece3ecb4e6aafbbde0e04f621124df6e4c2d7995dc7](https://etherscan.io/tx/0x9e8cc538b40a70723a287ece3ecb4e6aafbbde0e04f621124df6e4c2d7995dc7), implementations: [0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378](https://etherscan.io/address/0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378#code) ([diff](https://disco.ethbeat.org/diff/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378))
- 2021-03-25 11:24 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x79f72bef0984e3ae76ab638c078f92f1a0d4ad2a289b8a91e072d81f77d505ce](https://etherscan.io/tx/0x79f72bef0984e3ae76ab638c078f92f1a0d4ad2a289b8a91e072d81f77d505ce), implementations: [0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378](https://etherscan.io/address/0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378#code) ([diff](https://disco.ethbeat.org/diff/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378))
- 2021-03-16 18:04 UTC, upgrade of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0xf42d8fc579401fc76769bf63ba72f7277aac976aeb2a4cd3eca899ca08de7c20](https://etherscan.io/tx/0xf42d8fc579401fc76769bf63ba72f7277aac976aeb2a4cd3eca899ca08de7c20), implementations: [0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378](https://etherscan.io/address/0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378#code) ([diff](https://disco.ethbeat.org/diff/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378/eth:0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378))
- 2021-03-10 15:13 UTC, deployment of [StarkExchange](https://etherscan.io/address/0x5FDCCA53617f4d2b9134B29090C87D01058e27e9#code): transaction [0x9b57c19aa91cc17c9487085b68532cd65d1e4c263b5928f14c03a9d36c9097df](https://etherscan.io/tx/0x9b57c19aa91cc17c9487085b68532cd65d1e4c263b5928f14c03a9d36c9097df), implementations: [0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378](https://etherscan.io/address/0x49401Ddc4E0A858B5B4cf3D6De38393B7fAC7378#code)

- Roles:
  - **admin**: IMXAdminMultisig

The following tokens are included in the value secured calculation: ETH, IMX, USDC, OMI

Can be upgraded by: IMXAdminMultisig with no delay

#### Operators

Addresses: [0x7DdB2d76b80B0AA19bDEa48EB1301182F4CeefbC](https://etherscan.io/address/0x7DdB2d76b80B0AA19bDEa48EB1301182F4CeefbC#code)

#### ChildERC20

Addresses: [0x8804A8aA1F18f23aE8A456dD73806FdA3219FaD1](https://etherscan.io/address/0x8804A8aA1F18f23aE8A456dD73806FdA3219FaD1#code)

#### VaultRootSenderAdapter

Addresses: [0x9Fabd9Cc71f15b9Cfd717E117FBb9cfD9fC7cd32](https://etherscan.io/address/0x9Fabd9Cc71f15b9Cfd717E117FBb9cfD9fC7cd32#code)

#### RootERC20BridgeFlowRate

Addresses: [0xBa5E35E26Ae59c7aea6F029B68c6460De2d13eB6](https://etherscan.io/address/0xBa5E35E26Ae59c7aea6F029B68c6460De2d13eB6#code), [0x177EaFe0f1F3359375B1728dae0530a75C83E154](https://etherscan.io/address/0x177EaFe0f1F3359375B1728dae0530a75C83E154#code) (Implementation (Upgradable)), [0xdE2BCd3F0297d29c25e83228E5A33C0b43b51Ec8](https://etherscan.io/address/0xdE2BCd3F0297d29c25e83228E5A33C0b43b51Ec8#code) (Admin)

**Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A)

- 2023-12-19 05:09 UTC, deployment of [RootERC20BridgeFlowRate](https://etherscan.io/address/0xBa5E35E26Ae59c7aea6F029B68c6460De2d13eB6#code): transaction [0x2e14d2e7f495b17f93c4c839315cfedfd5ee28df540e6433ccc6abb0206b0775](https://etherscan.io/tx/0x2e14d2e7f495b17f93c4c839315cfedfd5ee28df540e6433ccc6abb0206b0775), implementations: [0x177EaFe0f1F3359375B1728dae0530a75C83E154](https://etherscan.io/address/0x177EaFe0f1F3359375B1728dae0530a75C83E154#code)

- Roles:
  - **admin**: ProxyAdmin; ultimately IMXAdminMultisig

Can be upgraded by: IMXAdminMultisig with no delay

Proxy used in: [Immutable zkEVM](https://ethbeat.org/layer2s/projects/immutablezkevm#Bridge)

#### ProxyAdmin

Addresses: [0xdE2BCd3F0297d29c25e83228E5A33C0b43b51Ec8](https://etherscan.io/address/0xdE2BCd3F0297d29c25e83228E5A33C0b43b51Ec8#code)

- Roles:
  - **owner**: IMXAdminMultisig

Used in: [Immutable zkEVM](https://ethbeat.org/layer2s/projects/immutablezkevm#ProxyAdmin)

The current deployment carries some associated risks:

- Funds can be stolen if a contract receives a malicious code upgrade. There is a 14d delay on code upgrades.