# Jovay

Markdown version of https://ethbeat.org/layer2s/projects/jovay

## Summary

**Warning:** This project is archived and no longer maintained.

**Warning:** There are impactful changes and part of the information might be outdated.

**Warning:** Why is the project listed in others? The proof system isn't fully functional. Consequence: projects without a proper proof system fully rely on single entities to safely update the state. A malicious proposer can finalize an invalid state, which can cause loss of funds. Learn more about the [recategorisation](https://medium.com/l2beat/framework-update-l2-projects-recategorisation-5d43b0d1fe50).

- Total Value Secured: $16.01 K (+3.44% compared to seven days ago; canonically bridged $16.01 K, natively minted $0.00, externally bridged $0.00; 0.00% with additional trust assumptions compared to the tokens involved and the Stage assigned to the project's canonical messaging bridge)
- TVS by asset: ETH & derivatives $16.01 K (100%)
- Past day UOPS: No data
- Gas token: ETH
- Type: Other
- Purposes: Universal, RWA
- Host chain: Ethereum
- Chain ID: 5734951

### Risks

- Sequencer failure: Enqueue via L1 (sentiment: warning)
- State validation: TEE attestations (sentiment: bad)
- Data availability: Onchain (sentiment: good)
- Exit window: None (sentiment: bad)
- Proposer failure: Cannot withdraw (sentiment: bad)

### About

Jovay, by Ant Digital Technologies, is an Ethereum Layer 2 blockchain built for real-world assets and users.

### Links

- Website: https://jovay.io/
- Bridge: https://bridge.jovay.io/
- Docs: https://docs.jovay.io/
- Explorer: https://explorer.jovay.io/l2
- Repository: https://github.com/jovaynetwork
- Social: https://x.com/JovayNetwork, https://discord.com/invite/8pYGeFAs44, https://t.me/Jovay_Network
- Contracts explorer (Disco): https://disco.ethbeat.org/ui/p/jovay

## Value Secured

The interactive TVS charts are shown on [the HTML page](https://ethbeat.org/layer2s/projects/jovay#tvs).

Token by token: [TVS breakdown](https://ethbeat.org/layer2s/projects/jovay/tvs-breakdown).

- [TVS chart (JSON)](https://ethbeat.org/api/scaling/tvs/jovay?range=max)
- [TVS breakdown by token (JSON)](https://ethbeat.org/api/scaling/tvs/jovay/breakdown)

## Activity

The interactive activity chart is shown on [the HTML page](https://ethbeat.org/layer2s/projects/jovay#activity).

- [Activity chart (JSON)](https://ethbeat.org/api/scaling/activity/jovay?range=max)

## Onchain costs

The section shows the operating costs that L2s pay to Ethereum.

The interactive costs chart is shown on [the HTML page](https://ethbeat.org/layer2s/projects/jovay#onchain-costs).

### Tracked transactions

#### Batch submissions

- functionCall: 2025-09-22 00:00 UTC - now; currently used; address: [0xe0a28B8918a62edB825055221a1dF12c7C81Bac1](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1); selector: 0x0b6ac513; signature: `function commitBatch(uint8 _version, uint256 _batchIndex, uint256 _totalL1MessagePopped)`

#### State updates

- functionCall: 2025-09-22 00:00 UTC - now; currently used; address: [0xe0a28B8918a62edB825055221a1dF12c7C81Bac1](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1); selector: 0x7256b753; signature: `function verifyBatch(uint8 _prove_type, bytes _batchHeader, bytes32 _postStateRoot, bytes32 _l2MsgRoot, bytes _proof)`

## Data posted

This section shows how much data the project publishes to Ethereum over time. It leaves out data posted to other data-availability (DA) layers. The project currently posts data to [Ethereum](https://ethbeat.org/projects/ethereum).

The interactive data posted chart is shown on [the HTML page](https://ethbeat.org/layer2s/projects/jovay#data-posted).

### Tracked transactions

#### Blob submissions

- DA layer Ethereum: from block 23405139 to now; currently used; inbox: [0xe0a28B8918a62edB825055221a1dF12c7C81Bac1](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1); sequencers: [0xA217ee134CB95B1ab56eF83a33956E5A979bf6e7](https://etherscan.io/address/0xA217ee134CB95B1ab56eF83a33956E5A979bf6e7), [0xAe13Ce4Cd416cb4598865aa5aC8d13532bd3Cd99](https://etherscan.io/address/0xAe13Ce4Cd416cb4598865aa5aC8d13532bd3Cd99)

## Liveness

This section shows how "live" the project's operators are by displaying how frequently they submit transactions of the selected type. It also highlights anomalies - significant deviations from their typical schedule.

The interactive liveness chart is shown on [the HTML page](https://ethbeat.org/layer2s/projects/jovay#liveness).

### Tracked transactions

#### Batch submissions

- functionCall: 2025-09-22 00:00 UTC - now; currently used; address: [0xe0a28B8918a62edB825055221a1dF12c7C81Bac1](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1); selector: 0x0b6ac513; signature: `function commitBatch(uint8 _version, uint256 _batchIndex, uint256 _totalL1MessagePopped)`

#### State updates

- functionCall: 2025-09-22 00:00 UTC - now; currently used; address: [0xe0a28B8918a62edB825055221a1dF12c7C81Bac1](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1); selector: 0x7256b753; signature: `function verifyBatch(uint8 _prove_type, bytes _batchHeader, bytes32 _postStateRoot, bytes32 _l2MsgRoot, bytes _proof)`

## Risk summary

**Warning:** 4 addresses have unverified source code (CRITICAL).

- TEEVerifierProxyOwner: 0x79241BbE3646d8405849Cbe8608e77b82c402892
- 0x4815b8773E6686d0b6Ee16191Aef1ae6c50d6B77
- 0x83088c8Dd196a83f43140ddBD7B4727bD1d43AD4
- 0xf2A2Bee383C2e4d75d9aE5953b3A6cFABb661a47

### Funds can be stolen if

1. a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL),
2. the source code of unverified contracts contains malicious code (CRITICAL).

### Users can be censored if

3. the operator is offline or refuses to process the queue.

### MEV can be extracted if

4. the operator exploits their centralized position and frontruns user transactions.

## Risk analysis

**Warning:** 4 addresses have unverified source code (CRITICAL).

- TEEVerifierProxyOwner: 0x79241BbE3646d8405849Cbe8608e77b82c402892
- 0x4815b8773E6686d0b6Ee16191Aef1ae6c50d6B77
- 0x83088c8Dd196a83f43140ddBD7B4727bD1d43AD4
- 0xf2A2Bee383C2e4d75d9aE5953b3A6cFABb661a47

### Sequencer failure

Enqueue via L1 (sentiment: warning)

Users can submit transactions to an L1 queue, but can't force them. The sequencers cannot selectively skip transactions but can stop processing the queue entirely. In other words, if the sequencers censor or are down, they are so for everyone.

### State validation

TEE attestations (sentiment: bad)

State roots are accepted when attested by a permissioned TEE through the TEEVerifierProxy. There is no challenge mechanism and no validity proofs can be submitted.

### Data availability

Onchain (sentiment: good)

All of the data needed for proof construction is published on Ethereum L1.

### Exit window

None (sentiment: bad)

There is no window for users to exit in case of an unwanted upgrade since contracts are instantly upgradable.

### Proposer failure

Cannot withdraw (sentiment: bad)

Only the whitelisted proposers can publish state roots on L1, so in the event of failure the withdrawals are frozen.

## Data availability

### All data required for proofs is published on chain

All the data that is used to construct the system state is published on chain in the form of cheap blobs or calldata. This ensures that it will be available for enough time.

**References**

- [Rollup.sol - commitBatch stores calldata hashes for each batch](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1#code)
- [L1Mailbox.sol - sendMsg enqueues transactions on Ethereum](https://etherscan.io/address/0x9869A90FDAc287519E48aff4cCE329907a995162#code)

Learn more about the DA layer here: [Ethereum](https://ethbeat.org/projects/ethereum)

## Upgrades & Governance

### Past upgrades

The metrics include upgrades on the currently used proxy contracts. Historical proxy contracts and changes of such are not included.

- Count of upgrades: 3
- Last upgrade: 1y 1mo ago
- Avg upgrade interval: 6mo 25d

- 2025-09-24 08:41 UTC, upgrade of [L1ETHBridge](https://etherscan.io/address/0x922248Db4A99bB542539ae7165FB9D7A546FB9F1#code): transaction [0xaff5b64efe3035f43b1aeb399bb86c1709bdd11b65ffabfe773a0ea4a1c90c03](https://etherscan.io/tx/0xaff5b64efe3035f43b1aeb399bb86c1709bdd11b65ffabfe773a0ea4a1c90c03), implementations: [0x376df788aFc6E801b24fC6C0fa6b53637A947ae7](https://etherscan.io/address/0x376df788aFc6E801b24fC6C0fa6b53637A947ae7#code) ([diff](https://disco.ethbeat.org/diff/eth:0x376df788aFc6E801b24fC6C0fa6b53637A947ae7/eth:0x376df788aFc6E801b24fC6C0fa6b53637A947ae7))
- 2025-09-23 14:50 UTC, upgrade of [L1Mailbox](https://etherscan.io/address/0x9869A90FDAc287519E48aff4cCE329907a995162#code): transaction [0x33cc67e6ab8aa7b06389b5cef8cb281cda3864b5042556e06556eb9c102efb82](https://etherscan.io/tx/0x33cc67e6ab8aa7b06389b5cef8cb281cda3864b5042556e06556eb9c102efb82), implementations: [0x8327820B007Ee6dc6fF24A8798096C9961A0aB80](https://etherscan.io/address/0x8327820B007Ee6dc6fF24A8798096C9961A0aB80#code) ([diff](https://disco.ethbeat.org/diff/eth:0x92E92B5060E3578AD4A27e2c9FB489556E434551/eth:0x8327820B007Ee6dc6fF24A8798096C9961A0aB80))
- 2025-09-23 14:49 UTC, upgrade of [Rollup](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1#code): transaction [0x11546aaf0ec3476cde945652f2d8612c6f096c0202b6ca1bb149ab05c60b1e16](https://etherscan.io/tx/0x11546aaf0ec3476cde945652f2d8612c6f096c0202b6ca1bb149ab05c60b1e16), implementations: [0xc8eEDE7229CcAd4a14f006845d05Fd51B28eE973](https://etherscan.io/address/0xc8eEDE7229CcAd4a14f006845d05Fd51B28eE973#code) ([diff](https://disco.ethbeat.org/diff/eth:0x5A65b0065A668b844250C04550ce16b1dF6296B6/eth:0xc8eEDE7229CcAd4a14f006845d05Fd51B28eE973))
- 2025-09-23 09:06 UTC, deployment of [TEEVerifierProxyOwner](https://etherscan.io/address/0x79241BbE3646d8405849Cbe8608e77b82c402892#code): transaction [0x4f7555de5b6e2a26078eed6b91511efaa934efd8e856fe3b336fa6599cc6f48f](https://etherscan.io/tx/0x4f7555de5b6e2a26078eed6b91511efaa934efd8e856fe3b336fa6599cc6f48f), implementations: [0x621Dd8d71526D7Df51Fa1AA8D098f5eAEc81C573](https://etherscan.io/address/0x621Dd8d71526D7Df51Fa1AA8D098f5eAEc81C573#code)
- 2025-09-20 14:08 UTC, deployment of [Rollup](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1#code): transaction [0x191e80563fda9d11b6b8f303de197c8c4eb2c108aea55d2dd5436afd5ada4a26](https://etherscan.io/tx/0x191e80563fda9d11b6b8f303de197c8c4eb2c108aea55d2dd5436afd5ada4a26), implementations: [0x5A65b0065A668b844250C04550ce16b1dF6296B6](https://etherscan.io/address/0x5A65b0065A668b844250C04550ce16b1dF6296B6#code)
- 2025-09-20 14:08 UTC, deployment of [L1ETHBridge](https://etherscan.io/address/0x922248Db4A99bB542539ae7165FB9D7A546FB9F1#code): transaction [0x27da4e3d9243ad68db7b84842815c2928e6c216e685644216f6d4efd76a4a2ca](https://etherscan.io/tx/0x27da4e3d9243ad68db7b84842815c2928e6c216e685644216f6d4efd76a4a2ca), implementations: [0x376df788aFc6E801b24fC6C0fa6b53637A947ae7](https://etherscan.io/address/0x376df788aFc6E801b24fC6C0fa6b53637A947ae7#code)
- 2025-09-20 14:07 UTC, deployment of [L1Mailbox](https://etherscan.io/address/0x9869A90FDAc287519E48aff4cCE329907a995162#code): transaction [0xc594f519ef3a048fb2733b38959f1736434a5e8d4dad8bb513c549da950f4287](https://etherscan.io/tx/0xc594f519ef3a048fb2733b38959f1736434a5e8d4dad8bb513c549da950f4287), implementations: [0x92E92B5060E3578AD4A27e2c9FB489556E434551](https://etherscan.io/address/0x92E92B5060E3578AD4A27e2c9FB489556E434551#code)

## Updates

Each date links the update on the HTML page, which also shows its contract diffs.

### [2025-11-06 15:42 UTC](https://ethbeat.org/layer2s/projects/jovay?update=7f3bda60) (11 changes)

Include deployer address

### [2025-10-31 10:51 UTC](https://ethbeat.org/layer2s/projects/jovay?update=ce959e86) (12 changes)

First discovery.

## Operator

### The system has a centralized operator

The operator is the only entity that can propose blocks. A live and trustworthy operator is vital to the health of the system.

**Risks**

- MEV can be extracted if the operator exploits their centralized position and frontruns user transactions.

**References**

- [Rollup.sol - addRelayer is restricted to the owner](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1#code)

### Users can enqueue transactions

Users can submit transactions to an L1 queue, but can't force them. The sequencer cannot selectively skip transactions but can stop processing the queue entirely. In other words, if the sequencer censors or is down, it is so for everyone.

**Risks**

- Users can be censored if the operator is offline or refuses to process the queue.

**References**

- [L1Mailbox.sol - sendMsg enqueues deposit transactions](https://etherscan.io/address/0x9869A90FDAc287519E48aff4cCE329907a995162#code)
- [Rollup.sol - commitBatch function passes the totalL1MessagePopped as input parameter](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1#code)

## Withdrawals

### Regular messaging

The user initiates L2->L1 messages by submitting a regular transaction on this chain. When the block containing that transaction is settled, the message becomes available for processing on L1.

**References**

- [L1ETHBridge.sol - finalizeWithdraw executes ETH withdrawals](https://etherscan.io/address/0x922248Db4A99bB542539ae7165FB9D7A546FB9F1#code)
- [L1Mailbox.sol - relayMsgWithProof verifies withdrawal proofs](https://etherscan.io/address/0x9869A90FDAc287519E48aff4cCE329907a995162#code)

## Permissions

Explore these contracts and permissions in Disco, ETHBEAT's contract explorer: https://disco.ethbeat.org/ui/p/jovay

### Ethereum

#### Actors

#####  (0x4815…6B77)

Addresses: [0x4815b8773E6686d0b6Ee16191Aef1ae6c50d6B77](https://etherscan.io/address/0x4815b8773E6686d0b6Ee16191Aef1ae6c50d6B77) (unverified)

- Can upgrade **with no delay**
  - L1ETHBridge [via: ProxyAdmin]
  - L1Mailbox [via: ProxyAdmin]
  - Rollup [via: ProxyAdmin]

#####  (0x8308…3AD4)

Addresses: [0x83088c8Dd196a83f43140ddBD7B4727bD1d43AD4](https://etherscan.io/address/0x83088c8Dd196a83f43140ddBD7B4727bD1d43AD4) (unverified)

- Can upgrade **with no delay**
  *

#####  (0xf2A2…1a47)

Addresses: [0xf2A2Bee383C2e4d75d9aE5953b3A6cFABb661a47](https://etherscan.io/address/0xf2A2Bee383C2e4d75d9aE5953b3A6cFABb661a47) (unverified)

- Can upgrade **with no delay**
  - TEEVerifierProxyOwner

##### 2 EOAs

Addresses: [0xA217ee134CB95B1ab56eF83a33956E5A979bf6e7](https://etherscan.io/address/0xA217ee134CB95B1ab56eF83a33956E5A979bf6e7) (EOA 1), [0xAe13Ce4Cd416cb4598865aa5aC8d13532bd3Cd99](https://etherscan.io/address/0xAe13Ce4Cd416cb4598865aa5aC8d13532bd3Cd99) (EOA 2)

- Can interact with Rollup
  - Allowed to commit transactions from the current layer to the host chain
  - Allowed to post new state roots of the current layer to the host chain

## Smart contracts

**Note:** Contracts presented in this section had their implementations updated since the last time our team looked at this project. The information presented may be inaccurate.

![A diagram of the smart contract architecture](https://ethbeat.org/static/images/architecture/jovay.108cef1f.png)

Explore these contracts and permissions in Disco, ETHBEAT's contract explorer: https://disco.ethbeat.org/ui/p/jovay

### Ethereum

#### DcapAttestationRouter

Addresses: [0x238f4DaFC22013a864f85a54E276aC99975566fA](https://etherscan.io/address/0x238f4DaFC22013a864f85a54E276aC99975566fA#code)

The DcapAttestationRouter contract is used for routing and verifying Intel SGX/TDX DCAP attestation proofs. The contract sends each quote to the corresponding verification path (cache verifier vs. Automata DCAP contract, and SGX vs. TDX measurement checks).

#### MeasurementDao

Addresses: [0x359437E2763e9622DD4324D7904BbF7516332D4F](https://etherscan.io/address/0x359437E2763e9622DD4324D7904BbF7516332D4F#code)

The MeasurementDao contract is an onchain registry that allowlists SGX MR_ENCLAVE<->MR_SIGNER pairs and TDX RTMR3/MRTD values, and verifies DCAP quotes by matching quote fields to the stored measurements.

#### TEEVerifierProxy

Addresses: [0x371a8bda9a34d641B546883D6B5895d0A44AD46A](https://etherscan.io/address/0x371a8bda9a34d641B546883D6B5895d0A44AD46A#code)

The TEEVerifierProxy contract is used to verify L2 batches using TEE attestations. It delegates proof verification to the dcapAttestationRouter contract.

#### DaimoP256Verifier

Addresses: [0x783377992FCA09009eaD952D4fBa6519e25726b4](https://etherscan.io/address/0x783377992FCA09009eaD952D4fBa6519e25726b4#code)

#### TEEVerifierProxyOwner

Addresses: [0x79241BbE3646d8405849Cbe8608e77b82c402892](https://etherscan.io/address/0x79241BbE3646d8405849Cbe8608e77b82c402892#code) (unverified), [0x621Dd8d71526D7Df51Fa1AA8D098f5eAEc81C573](https://etherscan.io/address/0x621Dd8d71526D7Df51Fa1AA8D098f5eAEc81C573#code) (Implementation (Upgradable), unverified), [0xf2A2Bee383C2e4d75d9aE5953b3A6cFABb661a47](https://etherscan.io/address/0xf2A2Bee383C2e4d75d9aE5953b3A6cFABb661a47#code) (Admin, unverified)

**Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A)

- 2025-09-23 09:06 UTC, deployment of [TEEVerifierProxyOwner](https://etherscan.io/address/0x79241BbE3646d8405849Cbe8608e77b82c402892#code): transaction [0x4f7555de5b6e2a26078eed6b91511efaa934efd8e856fe3b336fa6599cc6f48f](https://etherscan.io/tx/0x4f7555de5b6e2a26078eed6b91511efaa934efd8e856fe3b336fa6599cc6f48f), implementations: [0x621Dd8d71526D7Df51Fa1AA8D098f5eAEc81C573](https://etherscan.io/address/0x621Dd8d71526D7Df51Fa1AA8D098f5eAEc81C573#code)

- Roles:
  - **admin**: The source code of this contract is not verified on Etherscan.

Can be upgraded by:  with no delay

#### TEECacheVerifier

Addresses: [0x9734CcA9304A4c7a5a27bCFac9eDa23e09cBAaF2](https://etherscan.io/address/0x9734CcA9304A4c7a5a27bCFac9eDa23e09cBAaF2#code)

A cache-enabled P-256 ECDSA verifier for Intel SGX/TDX DCAP quotes (v3/v4/v5) that authenticates local attestation data, extracts the 32-byte commitment, and lets the owner/authorized callers initialize, manage, and reuse cached attestation keys to skip repeat verifications.

#### AutomataDcapAttestationFee

Addresses: [0xb3a96165caf30F8F7cE9BCfdaaAe99BA93C1A6F9](https://etherscan.io/address/0xb3a96165caf30F8F7cE9BCfdaaAe99BA93C1A6F9#code)

Contract used to charge a configurable basis-point fee to verify Intel DCAP quotes. Currently set to 0 basis points.

#### ProxyAdmin

Addresses: [0xe2f33Bd70B301F53f61CB7b22D852bC8e3D95E2b](https://etherscan.io/address/0xe2f33Bd70B301F53f61CB7b22D852bC8e3D95E2b#code)

- Roles:
  - **owner**:

**Warning:** There are impactful changes to the following contracts, and part of the information might be outdated.

#### L1Mailbox (impactful change)

Addresses: [0x9869A90FDAc287519E48aff4cCE329907a995162](https://etherscan.io/address/0x9869A90FDAc287519E48aff4cCE329907a995162#code), [0x8327820B007Ee6dc6fF24A8798096C9961A0aB80](https://etherscan.io/address/0x8327820B007Ee6dc6fF24A8798096C9961A0aB80#code) (Implementation (Upgradable)), [0xe2f33Bd70B301F53f61CB7b22D852bC8e3D95E2b](https://etherscan.io/address/0xe2f33Bd70B301F53f61CB7b22D852bC8e3D95E2b#code) (Admin)

**Past upgrades** (Count of upgrades: 1, Last upgrade: 1y 1mo ago, Avg upgrade interval: 6mo 25d)

- 2025-09-23 14:50 UTC, upgrade of [L1Mailbox](https://etherscan.io/address/0x9869A90FDAc287519E48aff4cCE329907a995162#code): transaction [0x33cc67e6ab8aa7b06389b5cef8cb281cda3864b5042556e06556eb9c102efb82](https://etherscan.io/tx/0x33cc67e6ab8aa7b06389b5cef8cb281cda3864b5042556e06556eb9c102efb82), implementations: [0x8327820B007Ee6dc6fF24A8798096C9961A0aB80](https://etherscan.io/address/0x8327820B007Ee6dc6fF24A8798096C9961A0aB80#code) ([diff](https://disco.ethbeat.org/diff/eth:0x92E92B5060E3578AD4A27e2c9FB489556E434551/eth:0x8327820B007Ee6dc6fF24A8798096C9961A0aB80))
- 2025-09-20 14:07 UTC, deployment of [L1Mailbox](https://etherscan.io/address/0x9869A90FDAc287519E48aff4cCE329907a995162#code): transaction [0xc594f519ef3a048fb2733b38959f1736434a5e8d4dad8bb513c549da950f4287](https://etherscan.io/tx/0xc594f519ef3a048fb2733b38959f1736434a5e8d4dad8bb513c549da950f4287), implementations: [0x92E92B5060E3578AD4A27e2c9FB489556E434551](https://etherscan.io/address/0x92E92B5060E3578AD4A27e2c9FB489556E434551#code)

The L1Mailbox contract is used to send messages to the L2.
- Roles:
  - **admin**: ProxyAdmin

Can be upgraded by:  with no delay

#### Rollup (impactful change)

Addresses: [0xe0a28B8918a62edB825055221a1dF12c7C81Bac1](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1#code), [0xc8eEDE7229CcAd4a14f006845d05Fd51B28eE973](https://etherscan.io/address/0xc8eEDE7229CcAd4a14f006845d05Fd51B28eE973#code) (Implementation (Upgradable)), [0xe2f33Bd70B301F53f61CB7b22D852bC8e3D95E2b](https://etherscan.io/address/0xe2f33Bd70B301F53f61CB7b22D852bC8e3D95E2b#code) (Admin)

**Past upgrades** (Count of upgrades: 1, Last upgrade: 1y 1mo ago, Avg upgrade interval: 6mo 25d)

- 2025-09-23 14:49 UTC, upgrade of [Rollup](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1#code): transaction [0x11546aaf0ec3476cde945652f2d8612c6f096c0202b6ca1bb149ab05c60b1e16](https://etherscan.io/tx/0x11546aaf0ec3476cde945652f2d8612c6f096c0202b6ca1bb149ab05c60b1e16), implementations: [0xc8eEDE7229CcAd4a14f006845d05Fd51B28eE973](https://etherscan.io/address/0xc8eEDE7229CcAd4a14f006845d05Fd51B28eE973#code) ([diff](https://disco.ethbeat.org/diff/eth:0x5A65b0065A668b844250C04550ce16b1dF6296B6/eth:0xc8eEDE7229CcAd4a14f006845d05Fd51B28eE973))
- 2025-09-20 14:08 UTC, deployment of [Rollup](https://etherscan.io/address/0xe0a28B8918a62edB825055221a1dF12c7C81Bac1#code): transaction [0x191e80563fda9d11b6b8f303de197c8c4eb2c108aea55d2dd5436afd5ada4a26](https://etherscan.io/tx/0x191e80563fda9d11b6b8f303de197c8c4eb2c108aea55d2dd5436afd5ada4a26), implementations: [0x5A65b0065A668b844250C04550ce16b1dF6296B6](https://etherscan.io/address/0x5A65b0065A668b844250C04550ce16b1dF6296B6#code)

The Rollup contract is used to submit and verify L2 batches.
- Roles:
  - **admin**: ProxyAdmin
  - **relayer**: EOA 1, EOA 2

Can be upgraded by:  with no delay

#### L1ETHBridge (impactful change)

Addresses: [0x922248Db4A99bB542539ae7165FB9D7A546FB9F1](https://etherscan.io/address/0x922248Db4A99bB542539ae7165FB9D7A546FB9F1#code), [0x376df788aFc6E801b24fC6C0fa6b53637A947ae7](https://etherscan.io/address/0x376df788aFc6E801b24fC6C0fa6b53637A947ae7#code) (Implementation (Upgradable)), [0xe2f33Bd70B301F53f61CB7b22D852bC8e3D95E2b](https://etherscan.io/address/0xe2f33Bd70B301F53f61CB7b22D852bC8e3D95E2b#code) (Admin)

**Past upgrades** (Count of upgrades: 1, Last upgrade: 1y 1mo ago, Avg upgrade interval: 6mo 25d)

- 2025-09-24 08:41 UTC, upgrade of [L1ETHBridge](https://etherscan.io/address/0x922248Db4A99bB542539ae7165FB9D7A546FB9F1#code): transaction [0xaff5b64efe3035f43b1aeb399bb86c1709bdd11b65ffabfe773a0ea4a1c90c03](https://etherscan.io/tx/0xaff5b64efe3035f43b1aeb399bb86c1709bdd11b65ffabfe773a0ea4a1c90c03), implementations: [0x376df788aFc6E801b24fC6C0fa6b53637A947ae7](https://etherscan.io/address/0x376df788aFc6E801b24fC6C0fa6b53637A947ae7#code) ([diff](https://disco.ethbeat.org/diff/eth:0x376df788aFc6E801b24fC6C0fa6b53637A947ae7/eth:0x376df788aFc6E801b24fC6C0fa6b53637A947ae7))
- 2025-09-20 14:08 UTC, deployment of [L1ETHBridge](https://etherscan.io/address/0x922248Db4A99bB542539ae7165FB9D7A546FB9F1#code): transaction [0x27da4e3d9243ad68db7b84842815c2928e6c216e685644216f6d4efd76a4a2ca](https://etherscan.io/tx/0x27da4e3d9243ad68db7b84842815c2928e6c216e685644216f6d4efd76a4a2ca), implementations: [0x376df788aFc6E801b24fC6C0fa6b53637A947ae7](https://etherscan.io/address/0x376df788aFc6E801b24fC6C0fa6b53637A947ae7#code)

The L1ETHBridge contract is used to bridge ETH between the L1 and L2.
- Roles:
  - **admin**: ProxyAdmin

Can be upgraded by:  with no delay

The current deployment carries some associated risks:

- Funds can be stolen if a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL).
- Funds can be stolen if the source code of unverified contracts contains malicious code (CRITICAL).