# Kroma Markdown version of https://ethbeat.org/layer2s/projects/kroma ## Summary **Warning:** This project is archived and no longer maintained. **Warning:** Kroma shut down on June 30, 2025. After this date, funds retrieval is not guaranteed. See [announcement](https://x.com/kroma_network/status/1936692354603520198) for details. **Warning:** Why is the project listed in others? The proof system isn't fully functional. Consequence: projects without a proper proof system fully rely on single entities to safely update the state. A malicious proposer can finalize an invalid state, which can cause loss of funds. Learn more about the [recategorisation](https://medium.com/l2beat/framework-update-l2-projects-recategorisation-5d43b0d1fe50). - Total Value Secured: No data - Past day UOPS: No data - Type: Other - Purpose: Universal - Host chain: Ethereum - Chain ID: 255 ### Risks - Sequencer failure: Self sequence (sentiment: good) - State validation: Fraud proofs (INT, ZK) (7d challenge period; sentiment: bad) - Data availability: Onchain (sentiment: good) - Exit window: None (sentiment: bad) - Proposer failure: Self propose (sentiment: good) ### About Kroma aims to develop a universal ZK Rollup based on the Optimism Bedrock architecture. Currently, Kroma operates as an Optimistic Rollup with ZK fault proofs, utilizing a zkEVM based on Scroll and a zkVM based on SP1. ### Links - Website: https://kroma.network/ - Bridge: https://kroma.network/bridge/ - Docs: https://docs.kroma.network/, https://specs.kroma.network/ - Explorer: https://kromascan.com/, https://blockscout.kroma.network/ - Repository: https://github.com/kroma-network/ - Social: https://discord.com/invite/kroma-network, https://twitter.com/kroma_network, https://medium.com/@kroma-network - Contracts explorer (Disco): https://disco.ethbeat.org/ui/p/kroma ### Badges - EVM: This project uses the Ethereum Virtual Machine to run its smart contracts and supports the Solidity programming language - Ethereum with blobs: This project is posting its data to Ethereum as blobs - Built on OP Stack: The project is built on the OP Stack - Part of the Superchain: The project is part of the Superchain, meaning it's included in the Superchain registry or uses the Superchain config ## Activity The interactive activity chart is shown on [the HTML page](https://ethbeat.org/layer2s/projects/kroma#activity). - [Activity chart (JSON)](https://ethbeat.org/api/scaling/activity/kroma?range=max) ## Onchain costs The section shows the operating costs that L2s pay to Ethereum. The interactive costs chart is shown on [the HTML page](https://ethbeat.org/layer2s/projects/kroma#onchain-costs). ### Tracked transactions #### Batch submissions - transfer: 2023-09-05 03:14 UTC - now; currently used; from: [0x41b8cD6791De4D8f9E0eaF7861aC506822AdcE12](https://etherscan.io/address/0x41b8cD6791De4D8f9E0eaF7861aC506822AdcE12); to: [0xfF00000000000000000000000000000000000255](https://etherscan.io/address/0xfF00000000000000000000000000000000000255) #### State updates - functionCall: 2023-09-05 02:22 UTC - now; currently used; address: [0x180c77aE51a9c505a43A2C7D81f8CE70cacb93A6](https://etherscan.io/address/0x180c77aE51a9c505a43A2C7D81f8CE70cacb93A6); selector: 0x5a045f78; signature: `function submitL2Output(bytes32 _outputRoot,uint256 _l2BlockNumber,bytes32 _l1BlockHash,uint256 _l1BlockNumber)` ## Data posted This section shows how much data the project publishes to Ethereum over time. It leaves out data posted to other data-availability (DA) layers. The project currently posts data to [Ethereum](https://ethbeat.org/projects/ethereum). The interactive data posted chart is shown on [the HTML page](https://ethbeat.org/layer2s/projects/kroma#data-posted). ### Tracked transactions #### Blob submissions - DA layer Ethereum: from block 0 to now; currently used; inbox: [0xfF00000000000000000000000000000000000255](https://etherscan.io/address/0xfF00000000000000000000000000000000000255); sequencers: [0x41b8cD6791De4D8f9E0eaF7861aC506822AdcE12](https://etherscan.io/address/0x41b8cD6791De4D8f9E0eaF7861aC506822AdcE12) ## Liveness This section shows how "live" the project's operators are by displaying how frequently they submit transactions of the selected type. It also highlights anomalies - significant deviations from their typical schedule. The interactive liveness chart is shown on [the HTML page](https://ethbeat.org/layer2s/projects/kroma#liveness). ### Tracked transactions #### Batch submissions - transfer: 2023-09-05 03:14 UTC - now; currently used; from: [0x41b8cD6791De4D8f9E0eaF7861aC506822AdcE12](https://etherscan.io/address/0x41b8cD6791De4D8f9E0eaF7861aC506822AdcE12); to: [0xfF00000000000000000000000000000000000255](https://etherscan.io/address/0xfF00000000000000000000000000000000000255) #### State updates - functionCall: 2023-09-05 02:22 UTC - now; currently used; address: [0x180c77aE51a9c505a43A2C7D81f8CE70cacb93A6](https://etherscan.io/address/0x180c77aE51a9c505a43A2C7D81f8CE70cacb93A6); selector: 0x5a045f78; signature: `function submitL2Output(bytes32 _outputRoot,uint256 _l2BlockNumber,bytes32 _l1BlockHash,uint256 _l1BlockNumber)` ## Milestones & Incidents - 2025-06-20 (incident): [Kroma shutdown announcement](https://x.com/kroma_network/status/1936692354603520198). Kroma announces its shutdown on June 30, 2025. Users must withdraw their funds before that date. - 2025-06-04 (incident): [Plonky3 vulnerability patch](https://x.com/SuccinctLabs/status/1929773028034204121). SP1 verifier is patched to fix critical vulnerability in Plonky3 proof system (SP1 dependency). - 2025-02-11: [SP1 fault proofs upgrade](https://blog.kroma.network/kromas-transition-to-zkvm-fault-proof-b8c8d2dc39c6). Kroma adds an option to prove faults using the SP1 zk virtual machine. - 2024-04-25: [Ecotone upgrade](https://twitter.com/kroma_network/status/1783410075346063564). Introduces EIP-4844 data blobs for L1 data availability and more L2 opcodes. - 2024-04-05 (incident): [Chain fork #2 - Output root replaced](https://x.com/kroma_network/status/1774683208753590506). The chain forked and an L2 output on Ethereum has to be replaced by the Security Council. - 2024-03-18 (incident): [Chain fork - Output root replaced](https://x.com/kroma_network/status/1767478100819153009). The chain forked and an L2 output on Ethereum has to be replaced by the Security Council. - 2023-09-06: [Mainnet Launch](https://twitter.com/kroma_network/status/1699267271968055305?s=20). Kroma is live on mainnet. ## Risk summary ### Funds can be stolen if 1. a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL). ### Funds can be lost if 2. the cryptography is broken or implemented incorrectly. ### MEV can be extracted if 3. the operator exploits their centralized position and frontruns user transactions. ## Risk analysis **Warning:** Kroma shut down on June 30, 2025. After this date, funds retrieval is not guaranteed. See [announcement](https://x.com/kroma_network/status/1936692354603520198) for details. ### Sequencer failure Self sequence (sentiment: good) In the event of a sequencer failure, users can force transactions to be included in the project's chain by sending them to L1. There can be up to a 12h delay on this operation. ### State validation Fraud proofs (INT, ZK) (7d challenge period; sentiment: bad) Fraud proofs allow actors watching the chain to prove that the state is incorrect. Interactive proofs (INT) require multiple transactions over time to resolve. ZK proofs are used to adjudicate the correctness of the last step. The challenge protocol can fail under certain conditions. The current system doesn't use posted L2 txs batches on L1 as inputs to prove a fault (for the zkEVM prover path), meaning that DA is not always enforced. ### Data availability Onchain (sentiment: good) All of the data needed for proof construction is published on Ethereum L1. ### Exit window None (sentiment: bad) There is no window for users to exit in case of an unwanted upgrade since contracts are instantly upgradable. ### Proposer failure Self propose (sentiment: good) Anyone can be a Proposer and propose new roots to the L1 bridge. ## Stage Kroma is not even a Stage 0 project. **The project does not pass the walkaway test**: users are not able to exit in the presence of malicious operators if the Security Council disappears. ### Stage 0 1 issue needs fixing. - Met: There are at least 5 external actors who can submit fraud proofs. - Met: The project calls itself a rollup. - Met: State roots are posted to Ethereum L1. - Met: Inputs for the state transition function are posted to Ethereum L1. - Met: A source-available node exists that can recreate the state from Ethereum L1 data. Please note that the ETHBEAT team has not verified the validity of the node source code. [View code](https://github.com/kroma-network/kroma) - Issue: The proof system is still under development. ### Stage 1 2 issues need fixing. **Principle** - Issue: Compromising ≥75% of the Security Council should be the only way (other than bugs) for a rollup to indefinitely block an L2→L1 message (e.g. a withdrawal) or push an invalid L2→L1 message (e.g. an invalid withdrawal) with a <7d exit window. **Guidelines** - Met: Users are able to exit without the help of the permissioned operators. - Met: The Security Council is properly set up. - Issue: Upgrades executed by actors with more centralized control than a Security Council provide less than 7d for users to exit if the permissioned operator is down or censoring. ### Stage 2 2 issues need fixing. - Met: Fraud proof submission is open to everyone. - Issue: Upgrades unrelated to onchain provable bugs provide less than 30d to exit. - Issue: The Security Council's actions are not confined to onchain provable bugs. [Learn more about Stages](https://ethbeat.org/stages). Please keep in mind that these stages do not reflect project security, this is an opinionated assessment of project maturity based on subjective criteria, created with a goal of incentivizing projects to push toward better decentralization. Each team may have taken different paths to achieve this goal. ## Data availability ### All transaction data is recorded on chain All executed transactions are submitted to an on chain smart contract. The execution of the rollup is based entirely on the submitted transactions, so anyone monitoring the contract can know the correct state of the rollup chain. **References** - [Derivation: Batch Submission - Kroma specs](https://specs.kroma.network/glossary.html#batch-submission) - [BatchInbox - Etherscan address](https://etherscan.io/address/0xff00000000000000000000000000000000000255) - [KromaPortal.sol - Etherscan source code, depositTransaction() function](https://etherscan.io/address/0x5C8eE8323a33ebBF3ea3c6c3b84DACFca44A9316#code#F1#L455) Learn more about the DA layer here: [Ethereum](https://ethbeat.org/projects/ethereum) ## State derivation ### Node software Kroma nodes source code, including full node, proposer and validator, can be found [here](https://github.com/kroma-network/kroma). Also, the geth server, source maintained [here](https://github.com/kroma-network/go-ethereum), is a fork of go-ethereum. For more details on how they are different from the Optimism implementation, see [here](https://github.com/kroma-network/kroma-specs/blob/main/specs/protocol/differences-from-optimism.md). The instructions to run the proposer (called validator) and the ZK prover, are documented [here](https://docs.kroma.network/developers/running-nodes-on-kroma). ### Compression scheme Data batches are compressed using the [zlib](https://github.com/madler/zlib) algorithm with best compression level. ### Genesis state The genesis file can be found [here](https://github.com/kroma-network/kroma-up/blob/main/config/mainnet/genesis.json). ### Data format L2 blocks derivation from L1 data plus the format and architecture of batch submission is documented [here](https://specs.kroma.network/protocol/rollup-node.html#derivation). ## State validation ### Fraud proofs Kroma uses an interactive fraud proof system to find a single block of disagreement, which is then ZK proven. Once the single block of disagreement is found, the challenger is required to present a ZK proof of the fraud. This can be either a proof verified in a zkEVM verifier base on Scroll, or in a zkVM verifier built by Succinct SP1. If the proof is validated, the incorrect state output is deleted. The Security Council can always override the result of the challenge, it can also delete any L2 state root at any time. The protocol can fail under certain conditions. **Risks** - Funds can be lost if the cryptography is broken or implemented incorrectly. **References** - [Colosseum.sol#L300 - Etherscan source code, createChallenge() function](https://etherscan.io/address/0xBFcA810D1c26a3aC6F81a32Ab5C023F24bE93dAC#code#F1#L374) - [Colosseum.sol#L378 - Etherscan source code, bisect() function](https://etherscan.io/address/0xBFcA810D1c26a3aC6F81a32Ab5C023F24bE93dAC#code#F1#L452) - [Colosseum.sol#L434 - Etherscan source code, proveFaultWithZkEvm() function](https://etherscan.io/address/0xBFcA810D1c26a3aC6F81a32Ab5C023F24bE93dAC#code#F1#L505) - [KROMA-020: lack of validation segments and proofs in Colosseum.sol - ChainLight security audit](https://drive.google.com/file/d/13TUxZ9KPyvUXNZGddALcJLin-xmp_Fkj/view) ## Upgrades & Governance ### Past upgrades The metrics include upgrades on the currently used proxy contracts. Historical proxy contracts and changes of such are not included. - Count of upgrades: 15 - Last upgrade: 1y 8mo ago - Avg upgrade interval: 1y 1mo - 2025-02-10 04:48 UTC, deployment of [ZKProofVerifier](https://etherscan.io/address/0x005DDC466C804c79adB079c120347dDE48132105#code): transaction [0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74](https://etherscan.io/tx/0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74), implementations: [0x9f2Ec7196596581806218D3D183581b00e5a444E](https://etherscan.io/address/0x9f2Ec7196596581806218D3D183581b00e5a444E#code) - 2025-02-10 04:48 UTC, upgrade of [ValidatorManager](https://etherscan.io/address/0x232277d9672eEdd53c4B26C0F386C2Eb88DC7363#code): transaction [0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74](https://etherscan.io/tx/0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74), implementations: [0x8687b9ecD75ea00997a999B9DdE54C735DE9DEE1](https://etherscan.io/address/0x8687b9ecD75ea00997a999B9DdE54C735DE9DEE1#code) ([diff](https://disco.ethbeat.org/diff/eth:0x0Ed7bb332F7307F5c97E566E74A4A73ab6671082/eth:0x8687b9ecD75ea00997a999B9DdE54C735DE9DEE1)) - 2025-02-10 04:48 UTC, upgrade of [KromaPortal](https://etherscan.io/address/0x31F648572b67e60Ec6eb8E197E1848CC5F5558de#code): transaction [0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74](https://etherscan.io/tx/0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74), implementations: [0x5C8eE8323a33ebBF3ea3c6c3b84DACFca44A9316](https://etherscan.io/address/0x5C8eE8323a33ebBF3ea3c6c3b84DACFca44A9316#code) ([diff](https://disco.ethbeat.org/diff/eth:0x381F53695230BAF83a39D1a08304D233A35730Fa/eth:0x5C8eE8323a33ebBF3ea3c6c3b84DACFca44A9316)) - 2025-02-10 04:48 UTC, upgrade of [Colosseum](https://etherscan.io/address/0x713C2BEd44eB45D490afB8D4d1aA6F12290B829a#code): transaction [0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74](https://etherscan.io/tx/0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74), implementations: [0xBFcA810D1c26a3aC6F81a32Ab5C023F24bE93dAC](https://etherscan.io/address/0xBFcA810D1c26a3aC6F81a32Ab5C023F24bE93dAC#code) ([diff](https://disco.ethbeat.org/diff/eth:0xAB54b3e775f645cf4486039bfA4dA539E70c9f99/eth:0xBFcA810D1c26a3aC6F81a32Ab5C023F24bE93dAC)) - 2024-10-24 04:28 UTC, deployment of [ValidatorManager](https://etherscan.io/address/0x232277d9672eEdd53c4B26C0F386C2Eb88DC7363#code): transaction [0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e](https://etherscan.io/tx/0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e), implementations: [0x0Ed7bb332F7307F5c97E566E74A4A73ab6671082](https://etherscan.io/address/0x0Ed7bb332F7307F5c97E566E74A4A73ab6671082#code) - 2024-10-24 04:28 UTC, upgrade of [Colosseum](https://etherscan.io/address/0x713C2BEd44eB45D490afB8D4d1aA6F12290B829a#code): transaction [0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e](https://etherscan.io/tx/0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e), implementations: [0xAB54b3e775f645cf4486039bfA4dA539E70c9f99](https://etherscan.io/address/0xAB54b3e775f645cf4486039bfA4dA539E70c9f99#code) ([diff](https://disco.ethbeat.org/diff/eth:0xb87eaB624EE684C1799f1E8b24936A1c90759eEc/eth:0xAB54b3e775f645cf4486039bfA4dA539E70c9f99)) - 2024-10-24 04:28 UTC, upgrade of [L2OutputOracle](https://etherscan.io/address/0x180c77aE51a9c505a43A2C7D81f8CE70cacb93A6#code): transaction [0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e](https://etherscan.io/tx/0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e), implementations: [0x4B68F22d96a04F6d80e284C20A648f8Da2fD569b](https://etherscan.io/address/0x4B68F22d96a04F6d80e284C20A648f8Da2fD569b#code) ([diff](https://disco.ethbeat.org/diff/eth:0x14126FFa3889a026A79F0f99FaE80B3dc9E38095/eth:0x4B68F22d96a04F6d80e284C20A648f8Da2fD569b)) - 2024-10-24 04:28 UTC, deployment of [AssetManager](https://etherscan.io/address/0xa295310DE52b86F236A815AFb2f518F3C0F5A6D3#code): transaction [0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e](https://etherscan.io/tx/0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e), implementations: [0xf34fa8D3ac4AAcAD8307da8C8E51bDddCDa60Ede](https://etherscan.io/address/0xf34fa8D3ac4AAcAD8307da8C8E51bDddCDa60Ede#code) - 2024-10-24 04:28 UTC, upgrade of [ValidatorPool](https://etherscan.io/address/0xFdFF462845953D90719A78Fd12a2d103541d2103#code): transaction [0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e](https://etherscan.io/tx/0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e), implementations: [0xE36776FFA20a9206dcD742C981402a3f3d81938d](https://etherscan.io/address/0xE36776FFA20a9206dcD742C981402a3f3d81938d#code) ([diff](https://disco.ethbeat.org/diff/eth:0x8EDc4cCa2aF96f5D5141d55333043a65c3f59Ec4/eth:0xE36776FFA20a9206dcD742C981402a3f3d81938d)) - 2024-06-21 06:13 UTC, upgrade of [ZkVerifier](https://etherscan.io/address/0x6deb6a630D7b486c1C08d4016AEe3835a2F52Fa7#code): transaction [0xe56ba658fc810d727438e3bb124aa2e8ef1c25e5c21cbfe9715983ba5ce65a63](https://etherscan.io/tx/0xe56ba658fc810d727438e3bb124aa2e8ef1c25e5c21cbfe9715983ba5ce65a63), implementations: [0x4cd05aB629055a449617a28E3466660403eA7126](https://etherscan.io/address/0x4cd05aB629055a449617a28E3466660403eA7126#code) ([diff](https://disco.ethbeat.org/diff/eth:0x7E79726560B140fd6e089547bD049509F5423BFf/eth:0x4cd05aB629055a449617a28E3466660403eA7126)) - 2024-04-25 08:09 UTC, upgrade of [Colosseum](https://etherscan.io/address/0x713C2BEd44eB45D490afB8D4d1aA6F12290B829a#code): transaction [0x0fb2eca6483b1d042af562bf0e8e804c1356df56d7b8094e9d6edd4b63edf715](https://etherscan.io/tx/0x0fb2eca6483b1d042af562bf0e8e804c1356df56d7b8094e9d6edd4b63edf715), implementations: [0xb87eaB624EE684C1799f1E8b24936A1c90759eEc](https://etherscan.io/address/0xb87eaB624EE684C1799f1E8b24936A1c90759eEc#code) ([diff](https://disco.ethbeat.org/diff/eth:0x311b4A33b6dC4e080eE0d98caAaf8dF86C833066/eth:0xb87eaB624EE684C1799f1E8b24936A1c90759eEc)) - 2024-04-05 08:14 UTC, upgrade of [Colosseum](https://etherscan.io/address/0x713C2BEd44eB45D490afB8D4d1aA6F12290B829a#code): transaction [0xd420f3a8af8254ca1095409b3c4c2a3a1faa26fbe50c0477663e1bcb39727dfc](https://etherscan.io/tx/0xd420f3a8af8254ca1095409b3c4c2a3a1faa26fbe50c0477663e1bcb39727dfc), implementations: [0x311b4A33b6dC4e080eE0d98caAaf8dF86C833066](https://etherscan.io/address/0x311b4A33b6dC4e080eE0d98caAaf8dF86C833066#code) ([diff](https://disco.ethbeat.org/diff/eth:0x7526F997ea040B3949415c3a44e708273863AA2b/eth:0x311b4A33b6dC4e080eE0d98caAaf8dF86C833066)) - 2024-04-05 08:14 UTC, upgrade of [ValidatorPool](https://etherscan.io/address/0xFdFF462845953D90719A78Fd12a2d103541d2103#code): transaction [0xd420f3a8af8254ca1095409b3c4c2a3a1faa26fbe50c0477663e1bcb39727dfc](https://etherscan.io/tx/0xd420f3a8af8254ca1095409b3c4c2a3a1faa26fbe50c0477663e1bcb39727dfc), implementations: [0x8EDc4cCa2aF96f5D5141d55333043a65c3f59Ec4](https://etherscan.io/address/0x8EDc4cCa2aF96f5D5141d55333043a65c3f59Ec4#code) ([diff](https://disco.ethbeat.org/diff/eth:0x3eb033BAc5c449bDcb6D082c4f728eDAfC8D75fa/eth:0x8EDc4cCa2aF96f5D5141d55333043a65c3f59Ec4)) - 2023-11-22 07:31 UTC, upgrade of [ValidatorPool](https://etherscan.io/address/0xFdFF462845953D90719A78Fd12a2d103541d2103#code): transaction [0xf4e23f51e23f9549e6bed354f5330524c65d5796b765bd38fdacdb6758e7f8ff](https://etherscan.io/tx/0xf4e23f51e23f9549e6bed354f5330524c65d5796b765bd38fdacdb6758e7f8ff), implementations: [0x3eb033BAc5c449bDcb6D082c4f728eDAfC8D75fa](https://etherscan.io/address/0x3eb033BAc5c449bDcb6D082c4f728eDAfC8D75fa#code) ([diff](https://disco.ethbeat.org/diff/eth:0x6e1781678ffE6CDc109fd3bC0833c47BD0F23de1/eth:0x3eb033BAc5c449bDcb6D082c4f728eDAfC8D75fa)) - 2023-11-22 07:31 UTC, upgrade of [Timelock](https://etherscan.io/address/0x22605A12cB77Fe420B0cC1263cEb58a77352FDc1#code): transaction [0xf4e23f51e23f9549e6bed354f5330524c65d5796b765bd38fdacdb6758e7f8ff](https://etherscan.io/tx/0xf4e23f51e23f9549e6bed354f5330524c65d5796b765bd38fdacdb6758e7f8ff), implementations: [0xe44da6e9fA92E3FD897Da84d38fa6B9322Dd22c3](https://etherscan.io/address/0xe44da6e9fA92E3FD897Da84d38fa6B9322Dd22c3#code) ([diff](https://disco.ethbeat.org/diff/eth:0x595E1b330892Fcbf18b2BF099DE501Ad4d6A07C4/eth:0xe44da6e9fA92E3FD897Da84d38fa6B9322Dd22c3)) - 2023-11-22 07:31 UTC, upgrade of [UpgradeGovernor](https://etherscan.io/address/0xb3c415c2Aad428D5570208e1772cb68e7D06a537#code): transaction [0xf4e23f51e23f9549e6bed354f5330524c65d5796b765bd38fdacdb6758e7f8ff](https://etherscan.io/tx/0xf4e23f51e23f9549e6bed354f5330524c65d5796b765bd38fdacdb6758e7f8ff), implementations: [0x64F8F4EB207D51F74caf6db644Bf710Ad86989b3](https://etherscan.io/address/0x64F8F4EB207D51F74caf6db644Bf710Ad86989b3#code) ([diff](https://disco.ethbeat.org/diff/eth:0x2a51e099CC7AF922CcDe7F3db909DC7b71B8D030/eth:0x64F8F4EB207D51F74caf6db644Bf710Ad86989b3)) - 2023-11-16 08:17 UTC, deployment of [USDCBridge](https://etherscan.io/address/0x7e1Bdb9ee75B6ef1BCAAE3B1De1c616C7B11ef6e#code): transaction [0x04a7ec0dad1a7a0ebf4cb2bd1f983b19d43e57972e91c4e73aabf2bff3530014](https://etherscan.io/tx/0x04a7ec0dad1a7a0ebf4cb2bd1f983b19d43e57972e91c4e73aabf2bff3530014), implementations: [0xE4e9F3AD8A6F224c4b39854D3550AD258441AfE3](https://etherscan.io/address/0xE4e9F3AD8A6F224c4b39854D3550AD258441AfE3#code) - 2023-09-05 02:30 UTC, deployment of [UpgradeGovernor](https://etherscan.io/address/0xb3c415c2Aad428D5570208e1772cb68e7D06a537#code): transaction [0x1474ff104cbd078775403ee9b33a18394d045e5e00e03e94586e73a3596cbde0](https://etherscan.io/tx/0x1474ff104cbd078775403ee9b33a18394d045e5e00e03e94586e73a3596cbde0), implementations: [0x2a51e099CC7AF922CcDe7F3db909DC7b71B8D030](https://etherscan.io/address/0x2a51e099CC7AF922CcDe7F3db909DC7b71B8D030#code) - 2023-09-05 02:30 UTC, deployment of [Timelock](https://etherscan.io/address/0x22605A12cB77Fe420B0cC1263cEb58a77352FDc1#code): transaction [0xc92251d7f8a454b533f0e272ba324cb7572ca4142aabf17cd29821e1d8ebfe1b](https://etherscan.io/tx/0xc92251d7f8a454b533f0e272ba324cb7572ca4142aabf17cd29821e1d8ebfe1b), implementations: [0x595E1b330892Fcbf18b2BF099DE501Ad4d6A07C4](https://etherscan.io/address/0x595E1b330892Fcbf18b2BF099DE501Ad4d6A07C4#code) - 2023-09-05 02:28 UTC, deployment of [SystemConfig](https://etherscan.io/address/0x3971EB866AA9b2b8aFEa8a7C816F3b7e8b195a35#code): transaction [0x3dcaff162fff51f2f6ba6264967bb5a3e6e9aefeb290b159109038ae38455e10](https://etherscan.io/tx/0x3dcaff162fff51f2f6ba6264967bb5a3e6e9aefeb290b159109038ae38455e10), implementations: [0x2af8a383C395EBa6551E674EeD02344936fE36f5](https://etherscan.io/address/0x2af8a383C395EBa6551E674EeD02344936fE36f5#code) - 2023-09-05 02:27 UTC, deployment of [KromaPortal](https://etherscan.io/address/0x31F648572b67e60Ec6eb8E197E1848CC5F5558de#code): transaction [0x3166f6173eb630e96f74c5c9d6765cd93e39566dc592a423fddae11eb09f8d17](https://etherscan.io/tx/0x3166f6173eb630e96f74c5c9d6765cd93e39566dc592a423fddae11eb09f8d17), implementations: [0x381F53695230BAF83a39D1a08304D233A35730Fa](https://etherscan.io/address/0x381F53695230BAF83a39D1a08304D233A35730Fa#code) - 2023-09-05 02:27 UTC, deployment of [Colosseum](https://etherscan.io/address/0x713C2BEd44eB45D490afB8D4d1aA6F12290B829a#code): transaction [0x70494d42df3a5668be6ac9bd1a46cdcfebe8980cae31dddcb7ec86c97200d60f](https://etherscan.io/tx/0x70494d42df3a5668be6ac9bd1a46cdcfebe8980cae31dddcb7ec86c97200d60f), implementations: [0x7526F997ea040B3949415c3a44e708273863AA2b](https://etherscan.io/address/0x7526F997ea040B3949415c3a44e708273863AA2b#code) - 2023-09-05 02:26 UTC, deployment of [L2OutputOracle](https://etherscan.io/address/0x180c77aE51a9c505a43A2C7D81f8CE70cacb93A6#code): transaction [0xf1ce5facb5ac6b858552c8af4867797e1c69ad89629f1c836b7f489770683783](https://etherscan.io/tx/0xf1ce5facb5ac6b858552c8af4867797e1c69ad89629f1c836b7f489770683783), implementations: [0x14126FFa3889a026A79F0f99FaE80B3dc9E38095](https://etherscan.io/address/0x14126FFa3889a026A79F0f99FaE80B3dc9E38095#code) - 2023-09-05 02:26 UTC, deployment of [ValidatorPool](https://etherscan.io/address/0xFdFF462845953D90719A78Fd12a2d103541d2103#code): transaction [0x31c5282eb4cc1bcf3b3a3fbbbb0116c0ee335b4ccabd497f02b2761b0bc65dbd](https://etherscan.io/tx/0x31c5282eb4cc1bcf3b3a3fbbbb0116c0ee335b4ccabd497f02b2761b0bc65dbd), implementations: [0x6e1781678ffE6CDc109fd3bC0833c47BD0F23de1](https://etherscan.io/address/0x6e1781678ffE6CDc109fd3bC0833c47BD0F23de1#code) - 2023-09-05 02:25 UTC, upgrade of [L1ERC721Bridge](https://etherscan.io/address/0x46d07221dfC313afe1BF104F4bB1f185301D65B9#code): transaction [0x2aaca06bcfebdfe7511fe20033c1af5dd9c4cae053340995621ce10da29392ec](https://etherscan.io/tx/0x2aaca06bcfebdfe7511fe20033c1af5dd9c4cae053340995621ce10da29392ec), implementations: [0xbB1cDB5Cc35B1c9801DA8772aCBcDbd323A912D9](https://etherscan.io/address/0xbB1cDB5Cc35B1c9801DA8772aCBcDbd323A912D9#code) ([diff](https://disco.ethbeat.org/diff/eth:0x0257e4d92C00C9EfcCa1d641b224d7d09cfa4522/eth:0xbB1cDB5Cc35B1c9801DA8772aCBcDbd323A912D9)) - 2023-09-05 02:25 UTC, deployment of [L1StandardBridge](https://etherscan.io/address/0x827962404D7104202C5aaa6b929115C8211d9596#code): transaction [0xe67e8f042d304b70f1fd718343378219e0be9c49ed4a8242f8f96ea9ced2c0fd](https://etherscan.io/tx/0xe67e8f042d304b70f1fd718343378219e0be9c49ed4a8242f8f96ea9ced2c0fd), implementations: [0x404133EdF24F56b7dD9c6d89Fb56bb35244461B4](https://etherscan.io/address/0x404133EdF24F56b7dD9c6d89Fb56bb35244461B4#code) - 2023-09-05 02:24 UTC, deployment of [L1CrossDomainMessenger](https://etherscan.io/address/0x46B8bB4C5dd27bB42807Db477af4d1a7C8A5B746#code): transaction [0xc077167cfc27b631ad397c64fd72bcaf2c8fcc7c9f08498eb247abc0094354a5](https://etherscan.io/tx/0xc077167cfc27b631ad397c64fd72bcaf2c8fcc7c9f08498eb247abc0094354a5), implementations: [0x675924D68200F2C967Ba12349d5d510676C7214c](https://etherscan.io/address/0x675924D68200F2C967Ba12349d5d510676C7214c#code) - 2023-09-01 03:41 UTC, upgrade of [ZkVerifier](https://etherscan.io/address/0x6deb6a630D7b486c1C08d4016AEe3835a2F52Fa7#code): transaction [0x66fecb7dffc867d91d6f840e65fc28f81ad1301204cfca38b3bbb22146ffa361](https://etherscan.io/tx/0x66fecb7dffc867d91d6f840e65fc28f81ad1301204cfca38b3bbb22146ffa361), implementations: [0x7E79726560B140fd6e089547bD049509F5423BFf](https://etherscan.io/address/0x7E79726560B140fd6e089547bD049509F5423BFf#code) ([diff](https://disco.ethbeat.org/diff/eth:0xD3b1D396330EA8dd79615f12433B856160d7D8B4/eth:0x7E79726560B140fd6e089547bD049509F5423BFf)) - 2023-08-29 05:49 UTC, deployment of [ZkVerifier](https://etherscan.io/address/0x6deb6a630D7b486c1C08d4016AEe3835a2F52Fa7#code): transaction [0x6ab34004b7846a1d1406bc53825ee386d905f8499c72ab9bfe07f4721d773ae9](https://etherscan.io/tx/0x6ab34004b7846a1d1406bc53825ee386d905f8499c72ab9bfe07f4721d773ae9), implementations: [0xD3b1D396330EA8dd79615f12433B856160d7D8B4](https://etherscan.io/address/0xD3b1D396330EA8dd79615f12433B856160d7D8B4#code) - 2023-08-29 05:48 UTC, deployment of [L1ERC721Bridge](https://etherscan.io/address/0x46d07221dfC313afe1BF104F4bB1f185301D65B9#code): transaction [0xb5f090dda7636b95e017de8e0619fc4d6f706b7b4a2a9bbd07996bd85ef70bad](https://etherscan.io/tx/0xb5f090dda7636b95e017de8e0619fc4d6f706b7b4a2a9bbd07996bd85ef70bad), implementations: [0x0257e4d92C00C9EfcCa1d641b224d7d09cfa4522](https://etherscan.io/address/0x0257e4d92C00C9EfcCa1d641b224d7d09cfa4522#code) ## Updates Each date links the update on the HTML page, which also shows its contract diffs. ### [2025-07-14 12:45 UTC](https://ethbeat.org/layer2s/projects/kroma?update=c7204377) (20 changes) Discovery rerun on the same block number with only config-related changes. ### [2025-06-25 07:42 UTC](https://ethbeat.org/layer2s/projects/kroma?update=73d74f25) (2 changes) selector 0x1b34fe11 and respective verifier frozen. ### [2025-06-06 07:24 UTC](https://ethbeat.org/layer2s/projects/kroma?update=90640389) (1 change) config: make sp1 gateway template more dynamic. ### [2025-06-04 14:01 UTC](https://ethbeat.org/layer2s/projects/kroma?update=028d6f28) (2 changes) SP1 verifier upgrade to v5 (plonky3 vuln related). ### [2025-05-16 11:51 UTC](https://ethbeat.org/layer2s/projects/kroma?update=34e4d03c) (1 change) Changed argument in a handler to discover SP1Verifier contract. ### [2025-03-31 10:20 UTC](https://ethbeat.org/layer2s/projects/kroma?update=44cdb628) (3 changes) sc signer rotated. ### [2025-03-21 10:19 UTC](https://ethbeat.org/layer2s/projects/kroma?update=5faf0aad) (23 changes) SC signer change. ### [2025-02-14 14:19 UTC](https://ethbeat.org/layer2s/projects/kroma?update=d5affb4c) (high severity, 67 changes) [Kroma proof system upgrade](https://blog.kroma.network/kromas-transition-to-zkvm-fault-proof-b8c8d2dc39c6): Kroma moves to optional SP1 for zk proofs of the last step in a fault proof (The old zkEVM verifier can still be used). ### [2025-01-10 15:24 UTC](https://ethbeat.org/layer2s/projects/kroma?update=9ed5d070) (3 changes) Discovery rerun on the same block number with only config-related changes. ### [2024-11-08 08:00 UTC](https://ethbeat.org/layer2s/projects/kroma?update=5360b758) (5 changes) Sets to 0. The current validator reward is calculated in the ValidatorManager (`_calculateReward()`) and does not reference this value in the SystemConfig, so it is unclear what consequence this change has. One SC member address is rotated. ### [2024-11-01 14:16 UTC](https://ethbeat.org/layer2s/projects/kroma?update=04cf95fc) (5 changes) New validator, increased security council quorum. ### [2024-10-25 09:44 UTC](https://ethbeat.org/layer2s/projects/kroma?update=1c4516e6) (high severity, 35 changes) This [upgrade to the L2OutpuOracle and related contracts](https://github.com/kroma-network/kroma/releases/tag/v2.0.0) introduces a TERMINATE_OUTPUT_INDEX to the ValidatorPool, after which all validator management will be switched over to a new ValidatorManager contract. This new contract allows for bonds in KRO (Kroma token) and delegation. The switch is expected to occur from output index 10107 or after Wed Oct 30 2024 05:20:00 UTC. ### [2024-10-07 09:02 UTC](https://ethbeat.org/layer2s/projects/kroma?update=859f61db) (4 changes) One SC signer swapped its EOA (Xangle): https://www.tally.xyz/gov/kroma-security-council-l1/proposal/14618493072102478268804770651956339471812434732135801604235762335024802800380. ### [2024-07-04 09:46 UTC](https://ethbeat.org/layer2s/projects/kroma?update=f4ecde29) (10 changes) One SecurityCouncil signer is removed and the threshold / quorum is lowered to 7/9. ### [2024-06-21 10:36 UTC](https://ethbeat.org/layer2s/projects/kroma?update=c0d5ac63) (high severity, 3 changes) Small ZKVerifier upgrade: - libraries Strings, SignedMath and Math are dropped. - formatting - change of constants ### [2024-05-17 14:01 UTC](https://ethbeat.org/layer2s/projects/kroma?update=23e18688) (6 changes) Kroma added a custom escrow and gateway for a new token (spETH, Spectrum staked ETH) which is canonically bridged. The gateway and the escrow are upgradeable by an EOA. spETH is 1:1 convertible to weETH, which is held in the escrow. ### [2024-04-25 10:15 UTC](https://ethbeat.org/layer2s/projects/kroma?update=81c6147c) (high severity, 5 changes) #### Blobs Kroma is posting blobs. ([First blob tx](https://etherscan.io/tx/0x1e504f673dcf1d1a9b1a332b02c62ab6f7b4cc73bd9cb8162b3c748e29c86b08)) #### Colosseum Only one change: `_validatePublicInput()` now computes the blockhash for either Cancun or Shanghai blocks with their respective functions (ternary operator). The Shanghai update on L2 changed the structure of the block header and the last implementation addressed this, but there was probably an oversight. ### [2024-04-20 08:12 UTC](https://ethbeat.org/layer2s/projects/kroma?update=959e1467) (high severity, 1 change) A transaction is executed to send ~2.5 ETH from the ValidatorPool contract to the trusted validator and member of SC `0x3aa00bb915a8e78b0523e4c365e3e70a19d329e6`. This was enabled by the `withdrawTo()` function that was added in the previous upgrade. (see below) The source of funds is from the balance of the SecurityCouncil inside the ValidatorPool contract, leaving the SC with 0.12 ETH of balance in the ValidatorPool. The SC's balance inside the ValidatorPool comes from taxes in the `increaseBond()` function. Context: The previous reimbursement in this [tweet by Kroma](https://twitter.com/kroma_network/status/1775801214552375417). ### [2024-04-09 08:50 UTC](https://ethbeat.org/layer2s/projects/kroma?update=03060b6e) (high severity, 5 changes) This upgrade brings small changes with huge diffs in the non-flat sources because new (but unused!) .sol files were pushed to etherscan among the actually upgraded implementations. This happens because for example the SecurityCouncil.sol that is shown on the Collosseum implementation's address on etherscan is now a newer version than the actual SecurityCouncil.sol that sits at the SECURITY_COUNCIL address (currently `0x3de211088dF516da72efe68D386b561BEE256Ec4`) The newer version is used only as an interface while the old version at the defined address is imported and used. Our flat source files mostly ignore this. #### Main changes 1. Change from Semver to ISemver in the two upgraded implementations (ValidatorPool and Colosseum) with no functional changes 2. Support of Post-Shanghai (on the L2) block headers on the L1 Colosseum 3. Ability to withdraw to a specified address from the ValidatorPool original description from the onchain upgrade proposal in tx# `0x80b280058f4eab3d9b250be874a5e7e816beaf68553f3ba61ec5c76340cfec5d`: [Smart Contract upgrades for v1.3.4] #### 1. Addition of withdrawTo in ValidatorPool Previously, validators could only withdraw funds to themselves. Now, with the withdrawTo function, they can withdraw directly to a specified address. Implementation contract address: `0x8EDc4cCa2aF96f5D5141d55333043a65c3f59Ec4` #### 2. Change in block header hash function for Colosseum With the Shanghai upgrade on the Kroma mainnet, a withdrawalsRoot field has been added to the block header. Accordingly, the hash function for obtaining the block header in Colosseum has been modified. Implementation contract address: `0x311b4A33b6dC4e080eE0d98caAaf8dF86C833066` #### Current Context Kroma also had two fork incidents on their mainnet L2: - March 12: https://twitter.com/kroma_network/status/1775801201197531144 - Apr 1: https://twitter.com/kroma_network/status/1774683208753590506 Right after the upgrade that is described above, an L2 output root was deleted after having been fault proven: - output root # 5017 from Apr 1 at L2 block number 9028800 in eth mainnet tx# 0x74e2739982fde96145d822151d93e093ab915e357cdd7167dd925ce4026e0841 Earlier Challenges for the same output were not successfully proven and i assume that the difference in block header construction after the upgrade was a fix for that. ### [2024-04-02 08:48 UTC](https://ethbeat.org/layer2s/projects/kroma?update=0ef43fac) (1 change) A root is challenged. Context: Kroma had issues on Apr 1. Sequencer was stopped and is now operational again. Around this incident there were multiple challenges created, so far no challenge was successful. ### [2024-03-20 07:28 UTC](https://ethbeat.org/layer2s/projects/kroma?update=0f9a8ee1) (1 change) Added escrow for USDC. ### [2024-03-19 08:14 UTC](https://ethbeat.org/layer2s/projects/kroma?update=c9b90eb4) (high severity, 1 change) A new proposal for an L2 output root deletion was submitted and is executed. The deleted root metadata is: "submitter":"0xfa3a4f7e5e1238d188e6d2dc6d1a9c5fa94c3c17", "outputRoot":"0x9b5606d9c8fdc6517211cd2e7255c1dee0475d25515889b1d78789c346170191", "timestamp":"1710224711","l2BlockNumber":"8172000" ### [2024-03-12 10:43 UTC](https://ethbeat.org/layer2s/projects/kroma?update=28b463cf) (1 change) A root is challenged. ### [2024-03-07 12:54 UTC](https://ethbeat.org/layer2s/projects/kroma?update=9b300a74) (5 changes) One SC member is added and the threshold has been updated accordingly to be above 75%. The delay has been removed so the risk has been updated. ### [2024-02-27 09:26 UTC](https://ethbeat.org/layer2s/projects/kroma?update=05dd96bd) (1 change) A Kroma validator has created a challenge (challenging a state root) for the first time. ### [2024-01-05 10:21 UTC](https://ethbeat.org/layer2s/projects/kroma?update=5050b429) (2 changes) The Security Council is now a 7/9 multisig, satisfying the requirements to be considered a Security Council. ### [2023-11-23 10:41 UTC](https://ethbeat.org/layer2s/projects/kroma?update=e88dc69f) (8 changes) Not sure what's going on here. Look at the description below this one. ### [2023-11-22 09:43 UTC](https://ethbeat.org/layer2s/projects/kroma?update=badfc752) (high severity, 22 changes) #### Timelock ![image](https://github.com/l2beat/l2beat/assets/30298476/ead78084-4fb9-4567-b8b1-3e8ba8928205) Removed the possibility to bypass the timelock delay. Also, the delay has been reduced from 30 days to 7 days. #### SystemConfig Updated the reward scalar, doesn't affect security. #### SecurityCouncil The Security Council now inherits from `TokenMultisigWallet` instead of `MultiSigWallet`. There is no particular change, the contract is much cleaner now and when a deletion is requested it gets also auto-confirmed by the sender. The role of this contrc #### UpgradeGovernor Removed the function that allowed to bypass the timelock delay since it's not possible anymore. The UpgradeGovernor logic is based on the SecurityCouncilToken ownership. #### SecurityCouncilToken Added self-delegation by default. #### ValidatorPool Slightly tweaked the logic to select the next proposer, related to some small changes in the unbound mechanism. ### [2023-11-03 09:59 UTC](https://ethbeat.org/layer2s/projects/kroma?update=4a2de090) (10 changes) - Additional 8 EOAs added to the SecurityCouncil (making it a 1/9 multisig). - Owner of the SecurityCouncilToken changed from EOA to a Timelock contract (0x2260...FDc1). ### [2023-09-29 07:58 UTC](https://ethbeat.org/layer2s/projects/kroma?update=34f1ca49) (1 change) ## Operator ### The system has a centralized sequencer While forcing transaction is open to anyone the system employs a privileged sequencer that has priority for submitting transaction batches and ordering transactions. **Risks** - MEV can be extracted if the operator exploits their centralized position and frontruns user transactions. **References** - [SystemConfig - batcher address](https://etherscan.io/address/0x3971EB866AA9b2b8aFEa8a7C816F3b7e8b195a35#readProxyContract#F3) ### Users can force any transaction Because the state of the system is based on transactions submitted on the underlying host chain and anyone can submit their transactions there it allows the users to circumvent censorship by interacting with the smart contract on the host chain directly. **References** - [Sequencing Window - Kroma specs](https://specs.kroma.network/glossary.html#sequencing-window) - [KromaPortal.sol - Etherscan source code, depositTransaction function](https://etherscan.io/address/0x5C8eE8323a33ebBF3ea3c6c3b84DACFca44A9316#code#F1#L455) ## Withdrawals ### Regular messaging The user initiates L2->L1 messages by submitting a regular transaction on this chain. When the block containing that transaction is settled, the message becomes available for processing on L1. The process of block finalization takes a challenge period of 7d to complete. **References** - [KromaPortal.sol - Etherscan source code, proveWithdrawalTransaction function](https://etherscan.io/address/0x5C8eE8323a33ebBF3ea3c6c3b84DACFca44A9316#code#F1#L253) - [KromaPortal.sol - Etherscan source code, finalizeWithdrawalTransaction function](https://etherscan.io/address/0x5C8eE8323a33ebBF3ea3c6c3b84DACFca44A9316#code#F1#L350) ### Autonomous exit Users can (eventually) exit the system by pushing the transaction on L1 and providing the corresponding state root. The only way to prevent such withdrawal is via an upgrade. ## Other considerations ### EVM compatible smart contracts are supported OP stack chains are pursuing the EVM Equivalence model. No changes to smart contracts are required regardless of the language they are written in, i.e. anything deployed on L1 can be deployed on L2. **References** - [Introducing EVM Equivalence](https://medium.com/ethereum-optimism/introducing-evm-equivalence-5c2021deb306) ## Permissions Explore these contracts and permissions in Disco, ETHBEAT's contract explorer: https://disco.ethbeat.org/ui/p/kroma ### Ethereum #### Actors ##### SecurityCouncilTokenOwners Addresses: [0xe4D08346609055c091D3DEECdAAd3Bf83119B08c](https://etherscan.io/address/0xe4D08346609055c091D3DEECdAAd3Bf83119B08c) A soulbound token implementation to identify participants of the KromaSecurityCouncil. Owners of the token are members of the council. There are currently 10 members. - Can upgrade **with no delay** - ZKProofVerifier [via: UpgradeGovernor → Timelock → ProxyAdmin] - L2OutputOracle [via: UpgradeGovernor → Timelock → ProxyAdmin] - Timelock [via: UpgradeGovernor → Timelock → ProxyAdmin] - ValidatorManager [via: UpgradeGovernor → Timelock → ProxyAdmin] - KromaPortal [via: UpgradeGovernor → Timelock → ProxyAdmin] - SystemConfig [via: UpgradeGovernor → Timelock → ProxyAdmin] - KromaSecurityCouncil [via: UpgradeGovernor → Timelock → ProxyAdmin] - L1CrossDomainMessenger [via: UpgradeGovernor → Timelock → ProxyAdmin] - L1ERC721Bridge [via: UpgradeGovernor → Timelock → ProxyAdmin] - ZkVerifier [via: UpgradeGovernor → Timelock → ProxyAdmin] - Colosseum [via: UpgradeGovernor → Timelock → ProxyAdmin] - USDCBridge [via: UpgradeGovernor → Timelock] - L1StandardBridge [via: UpgradeGovernor → Timelock → ProxyAdmin] - AssetManager [via: UpgradeGovernor → Timelock → ProxyAdmin] - UpgradeGovernor [via: UpgradeGovernor → Timelock → ProxyAdmin] - SecurityCouncilTokenOwners [via: UpgradeGovernor → Timelock → ProxyAdmin] - ValidatorPool [via: UpgradeGovernor → Timelock → ProxyAdmin] - Can interact with Timelock - cancel queued transactions [via: UpgradeGovernor] - execute transactions that are ready [via: UpgradeGovernor] - manage all access control roles and change the minimum delay [via: UpgradeGovernor → Timelock - or UpgradeGovernor] - propose transactions [via: UpgradeGovernor] - Can interact with SystemConfig - it can update the preconfer address, the batch submitter (Sequencer) address and the gas configuration of the system [via: UpgradeGovernor → Timelock] ##### KromaSecurityCouncil Addresses: [0x3de211088dF516da72efe68D386b561BEE256Ec4](https://etherscan.io/address/0x3de211088dF516da72efe68D386b561BEE256Ec4) Custom Multisig contract in which each signer is identified by a token. The threshold is 8 and the token contract is called SecurityCouncilToken. - Can interact with KromaPortal - Allowed to pause withdrawals. In op stack systems with a proof system, the Guardian can also blacklist dispute games and set the respected game type (permissioned / permissionless) - Can interact with Colosseum - dismiss ongoing challenges and override state roots (`forceDeleteOutput()`) - Can interact with ValidatorPool - become a validator without posting a bond **References** - [Security Council members - Announcing Kroma Security Council](https://blog.kroma.network/announcing-kroma-security-council-435b540d2ab4) ##### SP1VerifierGatewayMultisig Addresses: [0xCafEf00d348Adbd57c37d1B77e0619C6244C6878](https://etherscan.io/address/0xCafEf00d348Adbd57c37d1B77e0619C6244C6878) A Multisig with 2/3 threshold. - Can interact with SP1VerifierGateway - affect the liveness and safety of the gateway - can transfer ownership, add and freeze verifier routes Participants (3): [0xBaB2c2aF5b91695e65955DA60d63aD1b2aE81126](https://etherscan.io/address/0xBaB2c2aF5b91695e65955DA60d63aD1b2aE81126), [0x72Ff26D9517324eEFA89A48B75c5df41132c4f54](https://etherscan.io/address/0x72Ff26D9517324eEFA89A48B75c5df41132c4f54), [0x9395e83720bf2D8ac6435f9c520b48E289Cb8885](https://etherscan.io/address/0x9395e83720bf2D8ac6435f9c520b48E289Cb8885) Used in: [Celo](https://ethbeat.org/layer2s/projects/celo#SP1VerifierGatewayMultisig), [Fluent](https://ethbeat.org/layer2s/projects/fluent#SP1VerifierGatewayMultisig), [Lens](https://ethbeat.org/layer2s/projects/lens#SP1VerifierGatewayMultisig), [Mantle](https://ethbeat.org/layer2s/projects/mantle#SP1VerifierGatewayMultisig), [RISE](https://ethbeat.org/layer2s/projects/rise#SP1VerifierGatewayMultisig), [Sophon](https://ethbeat.org/layer2s/projects/sophon#SP1VerifierGatewayMultisig), [Taiko Alethia](https://ethbeat.org/layer2s/projects/taiko#SP1VerifierGatewayMultisig), [X Layer](https://ethbeat.org/layer2s/projects/xlayer#SP1VerifierGatewayMultisig) ##### Kroma Multisig Addresses: [0xe57E217d8ed498992452791622711B866403E950](https://etherscan.io/address/0xe57E217d8ed498992452791622711B866403E950) A Multisig with 3/5 threshold. Escrows a pool of KRO used as validator rewards by the AssetManager. Participants (5): [0x547fc089E9f2971d27b9780214ED891F6d154faa](https://etherscan.io/address/0x547fc089E9f2971d27b9780214ED891F6d154faa), [0x138AAFab6Dc4Fd30957da1Bbded441ABF9Ccb848](https://etherscan.io/address/0x138AAFab6Dc4Fd30957da1Bbded441ABF9Ccb848), [0xc0ab283E81aE99197Cfe1C8BEE9C593CD4FF7FB3](https://etherscan.io/address/0xc0ab283E81aE99197Cfe1C8BEE9C593CD4FF7FB3), [0xF5624B7E74C4Ed876C9793C7895184747a8D2310](https://etherscan.io/address/0xF5624B7E74C4Ed876C9793C7895184747a8D2310), [0xEEE06120a1861102D69Aa69535091a8FE72D9e43](https://etherscan.io/address/0xEEE06120a1861102D69Aa69535091a8FE72D9e43) ##### EOA 1 Addresses: [0x41b8cD6791De4D8f9E0eaF7861aC506822AdcE12](https://etherscan.io/address/0x41b8cD6791De4D8f9E0eaF7861aC506822AdcE12) - Can interact with SystemConfig - Allowed to commit transactions from the current layer to the host chain ##### 10 EOAs Addresses: [0x16876e5c608cec36968517A9Eb345269D308D94a](https://etherscan.io/address/0x16876e5c608cec36968517A9Eb345269D308D94a) (EOA 2), [0x27EFE61C5266e461995141f57b4D13F13c83f786](https://etherscan.io/address/0x27EFE61C5266e461995141f57b4D13F13c83f786) (EOA 3), [0x3a4F65D1ACFb2A3F5AD93ef7b240bfa1079052e0](https://etherscan.io/address/0x3a4F65D1ACFb2A3F5AD93ef7b240bfa1079052e0) (EOA 4), [0x3aa00bb915A8e78b0523E4c365e3E70A19d329e6](https://etherscan.io/address/0x3aa00bb915A8e78b0523E4c365e3E70A19d329e6) (KromaOperator), [0x42a4f1958A5d99A62C50eb24a80d1D8b142ea3A1](https://etherscan.io/address/0x42a4f1958A5d99A62C50eb24a80d1D8b142ea3A1) (EOA 5), [0x5ddcf494A8b6EeE4904934E829109cCF584EAF80](https://etherscan.io/address/0x5ddcf494A8b6EeE4904934E829109cCF584EAF80) (EOA 6), [0x66FA82F4AEA284d1d208437F179dFE13d8118f3A](https://etherscan.io/address/0x66FA82F4AEA284d1d208437F179dFE13d8118f3A) (EOA 7), [0x77Fe100758c5320cdfBb4f4a0Bed57885c97158A](https://etherscan.io/address/0x77Fe100758c5320cdfBb4f4a0Bed57885c97158A) (EOA 8), [0x8ECF028Cd647379E580DaA6701A11154750fcd3c](https://etherscan.io/address/0x8ECF028Cd647379E580DaA6701A11154750fcd3c) (EOA 9), [0xD417Ff17bf3cFD7260a4De20C6864090aA0503cC](https://etherscan.io/address/0xD417Ff17bf3cFD7260a4De20C6864090aA0503cC) (EOA 10) - Can interact with SecurityCouncilTokenOwners - one of the signers of the KromaSecurityCouncil ## Smart contracts ![A diagram of the smart contract architecture](https://ethbeat.org/static/images/architecture/kroma.04bd8c51.png) Explore these contracts and permissions in Disco, ETHBEAT's contract explorer: https://disco.ethbeat.org/ui/p/kroma ### Ethereum #### SystemConfig Addresses: [0x3971EB866AA9b2b8aFEa8a7C816F3b7e8b195a35](https://etherscan.io/address/0x3971EB866AA9b2b8aFEa8a7C816F3b7e8b195a35#code), [0x2af8a383C395EBa6551E674EeD02344936fE36f5](https://etherscan.io/address/0x2af8a383C395EBa6551E674EeD02344936fE36f5#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2023-09-05 02:28 UTC, deployment of [SystemConfig](https://etherscan.io/address/0x3971EB866AA9b2b8aFEa8a7C816F3b7e8b195a35#code): transaction [0x3dcaff162fff51f2f6ba6264967bb5a3e6e9aefeb290b159109038ae38455e10](https://etherscan.io/tx/0x3dcaff162fff51f2f6ba6264967bb5a3e6e9aefeb290b159109038ae38455e10), implementations: [0x2af8a383C395EBa6551E674EeD02344936fE36f5](https://etherscan.io/address/0x2af8a383C395EBa6551E674EeD02344936fE36f5#code) Contains configuration parameters such as the Sequencer address, gas limit on this chain and the unsafe block signer address. - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners - **batcherHash**: EOA 1 - **owner**: Timelock; ultimately SecurityCouncilTokenOwners Can be upgraded by: SecurityCouncilTokenOwners with no delay #### L1CrossDomainMessenger Addresses: [0x46B8bB4C5dd27bB42807Db477af4d1a7C8A5B746](https://etherscan.io/address/0x46B8bB4C5dd27bB42807Db477af4d1a7C8A5B746#code), [0x675924D68200F2C967Ba12349d5d510676C7214c](https://etherscan.io/address/0x675924D68200F2C967Ba12349d5d510676C7214c#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2023-09-05 02:24 UTC, deployment of [L1CrossDomainMessenger](https://etherscan.io/address/0x46B8bB4C5dd27bB42807Db477af4d1a7C8A5B746#code): transaction [0xc077167cfc27b631ad397c64fd72bcaf2c8fcc7c9f08498eb247abc0094354a5](https://etherscan.io/tx/0xc077167cfc27b631ad397c64fd72bcaf2c8fcc7c9f08498eb247abc0094354a5), implementations: [0x675924D68200F2C967Ba12349d5d510676C7214c](https://etherscan.io/address/0x675924D68200F2C967Ba12349d5d510676C7214c#code) Sends messages from host chain to this chain, and relays messages back onto host chain. In the event that a message sent from host chain to this chain is rejected for exceeding this chain's epoch gas limit, it can be resubmitted via this contract's replay function. - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners Can be upgraded by: SecurityCouncilTokenOwners with no delay #### L1ERC721Bridge Addresses: [0x46d07221dfC313afe1BF104F4bB1f185301D65B9](https://etherscan.io/address/0x46d07221dfC313afe1BF104F4bB1f185301D65B9#code), [0xbB1cDB5Cc35B1c9801DA8772aCBcDbd323A912D9](https://etherscan.io/address/0xbB1cDB5Cc35B1c9801DA8772aCBcDbd323A912D9#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: 1, Last upgrade: 3y 2mo ago, Avg upgrade interval: 1y 7mo) - 2023-09-05 02:25 UTC, upgrade of [L1ERC721Bridge](https://etherscan.io/address/0x46d07221dfC313afe1BF104F4bB1f185301D65B9#code): transaction [0x2aaca06bcfebdfe7511fe20033c1af5dd9c4cae053340995621ce10da29392ec](https://etherscan.io/tx/0x2aaca06bcfebdfe7511fe20033c1af5dd9c4cae053340995621ce10da29392ec), implementations: [0xbB1cDB5Cc35B1c9801DA8772aCBcDbd323A912D9](https://etherscan.io/address/0xbB1cDB5Cc35B1c9801DA8772aCBcDbd323A912D9#code) ([diff](https://disco.ethbeat.org/diff/eth:0x0257e4d92C00C9EfcCa1d641b224d7d09cfa4522/eth:0xbB1cDB5Cc35B1c9801DA8772aCBcDbd323A912D9)) - 2023-08-29 05:48 UTC, deployment of [L1ERC721Bridge](https://etherscan.io/address/0x46d07221dfC313afe1BF104F4bB1f185301D65B9#code): transaction [0xb5f090dda7636b95e017de8e0619fc4d6f706b7b4a2a9bbd07996bd85ef70bad](https://etherscan.io/tx/0xb5f090dda7636b95e017de8e0619fc4d6f706b7b4a2a9bbd07996bd85ef70bad), implementations: [0x0257e4d92C00C9EfcCa1d641b224d7d09cfa4522](https://etherscan.io/address/0x0257e4d92C00C9EfcCa1d641b224d7d09cfa4522#code) Used to bridge ERC-721 tokens from host chain to this chain. - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners Can be upgraded by: SecurityCouncilTokenOwners with no delay #### L1StandardBridge (escrow) Addresses: [0x827962404D7104202C5aaa6b929115C8211d9596](https://etherscan.io/address/0x827962404D7104202C5aaa6b929115C8211d9596#code), [0x404133EdF24F56b7dD9c6d89Fb56bb35244461B4](https://etherscan.io/address/0x404133EdF24F56b7dD9c6d89Fb56bb35244461B4#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2023-09-05 02:25 UTC, deployment of [L1StandardBridge](https://etherscan.io/address/0x827962404D7104202C5aaa6b929115C8211d9596#code): transaction [0xe67e8f042d304b70f1fd718343378219e0be9c49ed4a8242f8f96ea9ced2c0fd](https://etherscan.io/tx/0xe67e8f042d304b70f1fd718343378219e0be9c49ed4a8242f8f96ea9ced2c0fd), implementations: [0x404133EdF24F56b7dD9c6d89Fb56bb35244461B4](https://etherscan.io/address/0x404133EdF24F56b7dD9c6d89Fb56bb35244461B4#code) The main entry point to deposit ERC20 tokens from host chain to this chain. - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners All supported tokens in this escrow are included in the value secured calculation. Can be upgraded by: SecurityCouncilTokenOwners with no delay #### ZKProofVerifier Addresses: [0x005DDC466C804c79adB079c120347dDE48132105](https://etherscan.io/address/0x005DDC466C804c79adB079c120347dDE48132105#code), [0x9f2Ec7196596581806218D3D183581b00e5a444E](https://etherscan.io/address/0x9f2Ec7196596581806218D3D183581b00e5a444E#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2025-02-10 04:48 UTC, deployment of [ZKProofVerifier](https://etherscan.io/address/0x005DDC466C804c79adB079c120347dDE48132105#code): transaction [0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74](https://etherscan.io/tx/0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74), implementations: [0x9f2Ec7196596581806218D3D183581b00e5a444E](https://etherscan.io/address/0x9f2Ec7196596581806218D3D183581b00e5a444E#code) - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners Can be upgraded by: SecurityCouncilTokenOwners with no delay #### L2OutputOracle Addresses: [0x180c77aE51a9c505a43A2C7D81f8CE70cacb93A6](https://etherscan.io/address/0x180c77aE51a9c505a43A2C7D81f8CE70cacb93A6#code), [0x4B68F22d96a04F6d80e284C20A648f8Da2fD569b](https://etherscan.io/address/0x4B68F22d96a04F6d80e284C20A648f8Da2fD569b#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: 1, Last upgrade: 2y ago, Avg upgrade interval: 1y 7mo) - 2024-10-24 04:28 UTC, upgrade of [L2OutputOracle](https://etherscan.io/address/0x180c77aE51a9c505a43A2C7D81f8CE70cacb93A6#code): transaction [0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e](https://etherscan.io/tx/0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e), implementations: [0x4B68F22d96a04F6d80e284C20A648f8Da2fD569b](https://etherscan.io/address/0x4B68F22d96a04F6d80e284C20A648f8Da2fD569b#code) ([diff](https://disco.ethbeat.org/diff/eth:0x14126FFa3889a026A79F0f99FaE80B3dc9E38095/eth:0x4B68F22d96a04F6d80e284C20A648f8Da2fD569b)) - 2023-09-05 02:26 UTC, deployment of [L2OutputOracle](https://etherscan.io/address/0x180c77aE51a9c505a43A2C7D81f8CE70cacb93A6#code): transaction [0xf1ce5facb5ac6b858552c8af4867797e1c69ad89629f1c836b7f489770683783](https://etherscan.io/tx/0xf1ce5facb5ac6b858552c8af4867797e1c69ad89629f1c836b7f489770683783), implementations: [0x14126FFa3889a026A79F0f99FaE80B3dc9E38095](https://etherscan.io/address/0x14126FFa3889a026A79F0f99FaE80B3dc9E38095#code) The L2OutputOracle contract contains a list of proposed state roots which Proposers assert to be a result of block execution. Anyone can participate as a Proposer by depositing in the ValidatorPool. A root can be proposed every 1800 blocks (2s block time). - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners Can be upgraded by: SecurityCouncilTokenOwners with no delay #### Timelock Addresses: [0x22605A12cB77Fe420B0cC1263cEb58a77352FDc1](https://etherscan.io/address/0x22605A12cB77Fe420B0cC1263cEb58a77352FDc1#code), [0xe44da6e9fA92E3FD897Da84d38fa6B9322Dd22c3](https://etherscan.io/address/0xe44da6e9fA92E3FD897Da84d38fa6B9322Dd22c3#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: 1, Last upgrade: 2y 11mo ago, Avg upgrade interval: 1y 7mo) - 2023-11-22 07:31 UTC, upgrade of [Timelock](https://etherscan.io/address/0x22605A12cB77Fe420B0cC1263cEb58a77352FDc1#code): transaction [0xf4e23f51e23f9549e6bed354f5330524c65d5796b765bd38fdacdb6758e7f8ff](https://etherscan.io/tx/0xf4e23f51e23f9549e6bed354f5330524c65d5796b765bd38fdacdb6758e7f8ff), implementations: [0xe44da6e9fA92E3FD897Da84d38fa6B9322Dd22c3](https://etherscan.io/address/0xe44da6e9fA92E3FD897Da84d38fa6B9322Dd22c3#code) ([diff](https://disco.ethbeat.org/diff/eth:0x595E1b330892Fcbf18b2BF099DE501Ad4d6A07C4/eth:0xe44da6e9fA92E3FD897Da84d38fa6B9322Dd22c3)) - 2023-09-05 02:30 UTC, deployment of [Timelock](https://etherscan.io/address/0x22605A12cB77Fe420B0cC1263cEb58a77352FDc1#code): transaction [0xc92251d7f8a454b533f0e272ba324cb7572ca4142aabf17cd29821e1d8ebfe1b](https://etherscan.io/tx/0xc92251d7f8a454b533f0e272ba324cb7572ca4142aabf17cd29821e1d8ebfe1b), implementations: [0x595E1b330892Fcbf18b2BF099DE501Ad4d6A07C4](https://etherscan.io/address/0x595E1b330892Fcbf18b2BF099DE501Ad4d6A07C4#code) A standard timelock with access control. The current minimum delay is 0s. - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners - **canceller**: UpgradeGovernor; ultimately SecurityCouncilTokenOwners - **executor**: UpgradeGovernor; ultimately SecurityCouncilTokenOwners - **proposer**: UpgradeGovernor; ultimately SecurityCouncilTokenOwners - **timelockAdmin**: Timelock, UpgradeGovernor; ultimately SecurityCouncilTokenOwners Can be upgraded by: SecurityCouncilTokenOwners with no delay #### ValidatorManager Addresses: [0x232277d9672eEdd53c4B26C0F386C2Eb88DC7363](https://etherscan.io/address/0x232277d9672eEdd53c4B26C0F386C2Eb88DC7363#code), [0x8687b9ecD75ea00997a999B9DdE54C735DE9DEE1](https://etherscan.io/address/0x8687b9ecD75ea00997a999B9DdE54C735DE9DEE1#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: 1, Last upgrade: 1y 8mo ago, Avg upgrade interval: 1y) - 2025-02-10 04:48 UTC, upgrade of [ValidatorManager](https://etherscan.io/address/0x232277d9672eEdd53c4B26C0F386C2Eb88DC7363#code): transaction [0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74](https://etherscan.io/tx/0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74), implementations: [0x8687b9ecD75ea00997a999B9DdE54C735DE9DEE1](https://etherscan.io/address/0x8687b9ecD75ea00997a999B9DdE54C735DE9DEE1#code) ([diff](https://disco.ethbeat.org/diff/eth:0x0Ed7bb332F7307F5c97E566E74A4A73ab6671082/eth:0x8687b9ecD75ea00997a999B9DdE54C735DE9DEE1)) - 2024-10-24 04:28 UTC, deployment of [ValidatorManager](https://etherscan.io/address/0x232277d9672eEdd53c4B26C0F386C2Eb88DC7363#code): transaction [0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e](https://etherscan.io/tx/0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e), implementations: [0x0Ed7bb332F7307F5c97E566E74A4A73ab6671082](https://etherscan.io/address/0x0Ed7bb332F7307F5c97E566E74A4A73ab6671082#code) Manages the set of Proposers (Validators in Kroma) and selects the next proposer with the window to submit the output root within 30m, after which anyone can propose for them. It is also the entry point for other contracts, such as the L2OutputOracle and the Colosseum, which distribute output rewards and slash challenge losers. It makes successive calls to the AssetManager to apply changes to the proposers' assets. - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners Can be upgraded by: SecurityCouncilTokenOwners with no delay #### KromaPortal (escrow) Addresses: [0x31F648572b67e60Ec6eb8E197E1848CC5F5558de](https://etherscan.io/address/0x31F648572b67e60Ec6eb8E197E1848CC5F5558de#code), [0x5C8eE8323a33ebBF3ea3c6c3b84DACFca44A9316](https://etherscan.io/address/0x5C8eE8323a33ebBF3ea3c6c3b84DACFca44A9316#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: 1, Last upgrade: 1y 8mo ago, Avg upgrade interval: 1y 7mo) - 2025-02-10 04:48 UTC, upgrade of [KromaPortal](https://etherscan.io/address/0x31F648572b67e60Ec6eb8E197E1848CC5F5558de#code): transaction [0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74](https://etherscan.io/tx/0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74), implementations: [0x5C8eE8323a33ebBF3ea3c6c3b84DACFca44A9316](https://etherscan.io/address/0x5C8eE8323a33ebBF3ea3c6c3b84DACFca44A9316#code) ([diff](https://disco.ethbeat.org/diff/eth:0x381F53695230BAF83a39D1a08304D233A35730Fa/eth:0x5C8eE8323a33ebBF3ea3c6c3b84DACFca44A9316)) - 2023-09-05 02:27 UTC, deployment of [KromaPortal](https://etherscan.io/address/0x31F648572b67e60Ec6eb8E197E1848CC5F5558de#code): transaction [0x3166f6173eb630e96f74c5c9d6765cd93e39566dc592a423fddae11eb09f8d17](https://etherscan.io/tx/0x3166f6173eb630e96f74c5c9d6765cd93e39566dc592a423fddae11eb09f8d17), implementations: [0x381F53695230BAF83a39D1a08304D233A35730Fa](https://etherscan.io/address/0x381F53695230BAF83a39D1a08304D233A35730Fa#code) This is a fork of the standard OP stack OptimismPortal contract, the main entry point to deposit funds from L1 to L2. It also allows to prove and finalize withdrawals. - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners - **guardian**: KromaSecurityCouncil The following tokens are included in the value secured calculation: ETH Can be upgraded by: SecurityCouncilTokenOwners with no delay #### ZKMerkleTrie Addresses: [0x339208824010425cBE73201ceD4372308ACD610B](https://etherscan.io/address/0x339208824010425cBE73201ceD4372308ACD610B#code) Merkle Trie contract used to prove withdrawals that were initiated in the legacy system, deprecated for new withdrawals and succeeded by a merkle tree library in the KromaPortal. #### ProxyAdmin Addresses: [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) - Roles: - **owner**: Timelock #### ZkVerifier Addresses: [0x6deb6a630D7b486c1C08d4016AEe3835a2F52Fa7](https://etherscan.io/address/0x6deb6a630D7b486c1C08d4016AEe3835a2F52Fa7#code), [0x4cd05aB629055a449617a28E3466660403eA7126](https://etherscan.io/address/0x4cd05aB629055a449617a28E3466660403eA7126#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: 2, Last upgrade: 2y 4mo ago, Avg upgrade interval: 1y) - 2024-06-21 06:13 UTC, upgrade of [ZkVerifier](https://etherscan.io/address/0x6deb6a630D7b486c1C08d4016AEe3835a2F52Fa7#code): transaction [0xe56ba658fc810d727438e3bb124aa2e8ef1c25e5c21cbfe9715983ba5ce65a63](https://etherscan.io/tx/0xe56ba658fc810d727438e3bb124aa2e8ef1c25e5c21cbfe9715983ba5ce65a63), implementations: [0x4cd05aB629055a449617a28E3466660403eA7126](https://etherscan.io/address/0x4cd05aB629055a449617a28E3466660403eA7126#code) ([diff](https://disco.ethbeat.org/diff/eth:0x7E79726560B140fd6e089547bD049509F5423BFf/eth:0x4cd05aB629055a449617a28E3466660403eA7126)) - 2023-09-01 03:41 UTC, upgrade of [ZkVerifier](https://etherscan.io/address/0x6deb6a630D7b486c1C08d4016AEe3835a2F52Fa7#code): transaction [0x66fecb7dffc867d91d6f840e65fc28f81ad1301204cfca38b3bbb22146ffa361](https://etherscan.io/tx/0x66fecb7dffc867d91d6f840e65fc28f81ad1301204cfca38b3bbb22146ffa361), implementations: [0x7E79726560B140fd6e089547bD049509F5423BFf](https://etherscan.io/address/0x7E79726560B140fd6e089547bD049509F5423BFf#code) ([diff](https://disco.ethbeat.org/diff/eth:0xD3b1D396330EA8dd79615f12433B856160d7D8B4/eth:0x7E79726560B140fd6e089547bD049509F5423BFf)) - 2023-08-29 05:49 UTC, deployment of [ZkVerifier](https://etherscan.io/address/0x6deb6a630D7b486c1C08d4016AEe3835a2F52Fa7#code): transaction [0x6ab34004b7846a1d1406bc53825ee386d905f8499c72ab9bfe07f4721d773ae9](https://etherscan.io/tx/0x6ab34004b7846a1d1406bc53825ee386d905f8499c72ab9bfe07f4721d773ae9), implementations: [0xD3b1D396330EA8dd79615f12433B856160d7D8B4](https://etherscan.io/address/0xD3b1D396330EA8dd79615f12433B856160d7D8B4#code) ZK verifier used to verify the last step of a legacy zkEVM proof, which corresponds to a block. - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners Can be upgraded by: SecurityCouncilTokenOwners with no delay #### Colosseum Addresses: [0x713C2BEd44eB45D490afB8D4d1aA6F12290B829a](https://etherscan.io/address/0x713C2BEd44eB45D490afB8D4d1aA6F12290B829a#code), [0xBFcA810D1c26a3aC6F81a32Ab5C023F24bE93dAC](https://etherscan.io/address/0xBFcA810D1c26a3aC6F81a32Ab5C023F24bE93dAC#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: 4, Last upgrade: 1y 8mo ago, Avg upgrade interval: 7mo 21d) - 2025-02-10 04:48 UTC, upgrade of [Colosseum](https://etherscan.io/address/0x713C2BEd44eB45D490afB8D4d1aA6F12290B829a#code): transaction [0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74](https://etherscan.io/tx/0x78625237350cb2047aa1ec6392d2402dabf1a5d44d54e0142ae27d19546c8c74), implementations: [0xBFcA810D1c26a3aC6F81a32Ab5C023F24bE93dAC](https://etherscan.io/address/0xBFcA810D1c26a3aC6F81a32Ab5C023F24bE93dAC#code) ([diff](https://disco.ethbeat.org/diff/eth:0xAB54b3e775f645cf4486039bfA4dA539E70c9f99/eth:0xBFcA810D1c26a3aC6F81a32Ab5C023F24bE93dAC)) - 2024-10-24 04:28 UTC, upgrade of [Colosseum](https://etherscan.io/address/0x713C2BEd44eB45D490afB8D4d1aA6F12290B829a#code): transaction [0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e](https://etherscan.io/tx/0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e), implementations: [0xAB54b3e775f645cf4486039bfA4dA539E70c9f99](https://etherscan.io/address/0xAB54b3e775f645cf4486039bfA4dA539E70c9f99#code) ([diff](https://disco.ethbeat.org/diff/eth:0xb87eaB624EE684C1799f1E8b24936A1c90759eEc/eth:0xAB54b3e775f645cf4486039bfA4dA539E70c9f99)) - 2024-04-25 08:09 UTC, upgrade of [Colosseum](https://etherscan.io/address/0x713C2BEd44eB45D490afB8D4d1aA6F12290B829a#code): transaction [0x0fb2eca6483b1d042af562bf0e8e804c1356df56d7b8094e9d6edd4b63edf715](https://etherscan.io/tx/0x0fb2eca6483b1d042af562bf0e8e804c1356df56d7b8094e9d6edd4b63edf715), implementations: [0xb87eaB624EE684C1799f1E8b24936A1c90759eEc](https://etherscan.io/address/0xb87eaB624EE684C1799f1E8b24936A1c90759eEc#code) ([diff](https://disco.ethbeat.org/diff/eth:0x311b4A33b6dC4e080eE0d98caAaf8dF86C833066/eth:0xb87eaB624EE684C1799f1E8b24936A1c90759eEc)) - 2024-04-05 08:14 UTC, upgrade of [Colosseum](https://etherscan.io/address/0x713C2BEd44eB45D490afB8D4d1aA6F12290B829a#code): transaction [0xd420f3a8af8254ca1095409b3c4c2a3a1faa26fbe50c0477663e1bcb39727dfc](https://etherscan.io/tx/0xd420f3a8af8254ca1095409b3c4c2a3a1faa26fbe50c0477663e1bcb39727dfc), implementations: [0x311b4A33b6dC4e080eE0d98caAaf8dF86C833066](https://etherscan.io/address/0x311b4A33b6dC4e080eE0d98caAaf8dF86C833066#code) ([diff](https://disco.ethbeat.org/diff/eth:0x7526F997ea040B3949415c3a44e708273863AA2b/eth:0x311b4A33b6dC4e080eE0d98caAaf8dF86C833066)) - 2023-09-05 02:27 UTC, deployment of [Colosseum](https://etherscan.io/address/0x713C2BEd44eB45D490afB8D4d1aA6F12290B829a#code): transaction [0x70494d42df3a5668be6ac9bd1a46cdcfebe8980cae31dddcb7ec86c97200d60f](https://etherscan.io/tx/0x70494d42df3a5668be6ac9bd1a46cdcfebe8980cae31dddcb7ec86c97200d60f), implementations: [0x7526F997ea040B3949415c3a44e708273863AA2b](https://etherscan.io/address/0x7526F997ea040B3949415c3a44e708273863AA2b#code) Contract used to challenge state roots and prove fraud. If successful, the wrong state root in the L2OutputOracle is replaced. - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners - **security_council**: KromaSecurityCouncil Can be upgraded by: SecurityCouncilTokenOwners with no delay #### USDCBridge (escrow) Addresses: [0x7e1Bdb9ee75B6ef1BCAAE3B1De1c616C7B11ef6e](https://etherscan.io/address/0x7e1Bdb9ee75B6ef1BCAAE3B1De1c616C7B11ef6e#code), [0xE4e9F3AD8A6F224c4b39854D3550AD258441AfE3](https://etherscan.io/address/0xE4e9F3AD8A6F224c4b39854D3550AD258441AfE3#code) (Implementation (Upgradable)), [0x22605A12cB77Fe420B0cC1263cEb58a77352FDc1](https://etherscan.io/address/0x22605A12cB77Fe420B0cC1263cEb58a77352FDc1#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2023-11-16 08:17 UTC, deployment of [USDCBridge](https://etherscan.io/address/0x7e1Bdb9ee75B6ef1BCAAE3B1De1c616C7B11ef6e#code): transaction [0x04a7ec0dad1a7a0ebf4cb2bd1f983b19d43e57972e91c4e73aabf2bff3530014](https://etherscan.io/tx/0x04a7ec0dad1a7a0ebf4cb2bd1f983b19d43e57972e91c4e73aabf2bff3530014), implementations: [0xE4e9F3AD8A6F224c4b39854D3550AD258441AfE3](https://etherscan.io/address/0xE4e9F3AD8A6F224c4b39854D3550AD258441AfE3#code) - Roles: - **admin**: Timelock; ultimately SecurityCouncilTokenOwners The following tokens are included in the value secured calculation: USDC Can be upgraded by: SecurityCouncilTokenOwners with no delay #### AssetManager Addresses: [0xa295310DE52b86F236A815AFb2f518F3C0F5A6D3](https://etherscan.io/address/0xa295310DE52b86F236A815AFb2f518F3C0F5A6D3#code), [0xf34fa8D3ac4AAcAD8307da8C8E51bDddCDa60Ede](https://etherscan.io/address/0xf34fa8D3ac4AAcAD8307da8C8E51bDddCDa60Ede#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2024-10-24 04:28 UTC, deployment of [AssetManager](https://etherscan.io/address/0xa295310DE52b86F236A815AFb2f518F3C0F5A6D3#code): transaction [0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e](https://etherscan.io/tx/0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e), implementations: [0xf34fa8D3ac4AAcAD8307da8C8E51bDddCDa60Ede](https://etherscan.io/address/0xf34fa8D3ac4AAcAD8307da8C8E51bDddCDa60Ede#code) Manages the delegation and undelegation of KRO tokens and Kroma Guardian House (KGH) NFTs for Proposers (Kroma Validators) and distributes rewards. - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners Can be upgraded by: SecurityCouncilTokenOwners with no delay #### UpgradeGovernor Addresses: [0xb3c415c2Aad428D5570208e1772cb68e7D06a537](https://etherscan.io/address/0xb3c415c2Aad428D5570208e1772cb68e7D06a537#code), [0x64F8F4EB207D51F74caf6db644Bf710Ad86989b3](https://etherscan.io/address/0x64F8F4EB207D51F74caf6db644Bf710Ad86989b3#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: 1, Last upgrade: 2y 11mo ago, Avg upgrade interval: 1y 7mo) - 2023-11-22 07:31 UTC, upgrade of [UpgradeGovernor](https://etherscan.io/address/0xb3c415c2Aad428D5570208e1772cb68e7D06a537#code): transaction [0xf4e23f51e23f9549e6bed354f5330524c65d5796b765bd38fdacdb6758e7f8ff](https://etherscan.io/tx/0xf4e23f51e23f9549e6bed354f5330524c65d5796b765bd38fdacdb6758e7f8ff), implementations: [0x64F8F4EB207D51F74caf6db644Bf710Ad86989b3](https://etherscan.io/address/0x64F8F4EB207D51F74caf6db644Bf710Ad86989b3#code) ([diff](https://disco.ethbeat.org/diff/eth:0x2a51e099CC7AF922CcDe7F3db909DC7b71B8D030/eth:0x64F8F4EB207D51F74caf6db644Bf710Ad86989b3)) - 2023-09-05 02:30 UTC, deployment of [UpgradeGovernor](https://etherscan.io/address/0xb3c415c2Aad428D5570208e1772cb68e7D06a537#code): transaction [0x1474ff104cbd078775403ee9b33a18394d045e5e00e03e94586e73a3596cbde0](https://etherscan.io/tx/0x1474ff104cbd078775403ee9b33a18394d045e5e00e03e94586e73a3596cbde0), implementations: [0x2a51e099CC7AF922CcDe7F3db909DC7b71B8D030](https://etherscan.io/address/0x2a51e099CC7AF922CcDe7F3db909DC7b71B8D030#code) A governance proxy contract using token voting with SecurityCouncilTokenOwners as identification of actors allowed to vote/sign a proposal which is passed to the Timelock afterwards. - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners - **token**: SecurityCouncilTokenOwners Can be upgraded by: SecurityCouncilTokenOwners with no delay #### ValidatorPool Addresses: [0xFdFF462845953D90719A78Fd12a2d103541d2103](https://etherscan.io/address/0xFdFF462845953D90719A78Fd12a2d103541d2103#code), [0xE36776FFA20a9206dcD742C981402a3f3d81938d](https://etherscan.io/address/0xE36776FFA20a9206dcD742C981402a3f3d81938d#code) (Implementation (Upgradable)), [0x665c23A5722B6A237fa6Be2B49c0A94504db1edd](https://etherscan.io/address/0x665c23A5722B6A237fa6Be2B49c0A94504db1edd#code) (Admin) **Past upgrades** (Count of upgrades: 3, Last upgrade: 2y ago, Avg upgrade interval: 9mo 19d) - 2024-10-24 04:28 UTC, upgrade of [ValidatorPool](https://etherscan.io/address/0xFdFF462845953D90719A78Fd12a2d103541d2103#code): transaction [0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e](https://etherscan.io/tx/0xb2a500d332d7b3348b8ffa91aba9b8a5a3bc018b44225a1b6e99605c56c6564e), implementations: [0xE36776FFA20a9206dcD742C981402a3f3d81938d](https://etherscan.io/address/0xE36776FFA20a9206dcD742C981402a3f3d81938d#code) ([diff](https://disco.ethbeat.org/diff/eth:0x8EDc4cCa2aF96f5D5141d55333043a65c3f59Ec4/eth:0xE36776FFA20a9206dcD742C981402a3f3d81938d)) - 2024-04-05 08:14 UTC, upgrade of [ValidatorPool](https://etherscan.io/address/0xFdFF462845953D90719A78Fd12a2d103541d2103#code): transaction [0xd420f3a8af8254ca1095409b3c4c2a3a1faa26fbe50c0477663e1bcb39727dfc](https://etherscan.io/tx/0xd420f3a8af8254ca1095409b3c4c2a3a1faa26fbe50c0477663e1bcb39727dfc), implementations: [0x8EDc4cCa2aF96f5D5141d55333043a65c3f59Ec4](https://etherscan.io/address/0x8EDc4cCa2aF96f5D5141d55333043a65c3f59Ec4#code) ([diff](https://disco.ethbeat.org/diff/eth:0x3eb033BAc5c449bDcb6D082c4f728eDAfC8D75fa/eth:0x8EDc4cCa2aF96f5D5141d55333043a65c3f59Ec4)) - 2023-11-22 07:31 UTC, upgrade of [ValidatorPool](https://etherscan.io/address/0xFdFF462845953D90719A78Fd12a2d103541d2103#code): transaction [0xf4e23f51e23f9549e6bed354f5330524c65d5796b765bd38fdacdb6758e7f8ff](https://etherscan.io/tx/0xf4e23f51e23f9549e6bed354f5330524c65d5796b765bd38fdacdb6758e7f8ff), implementations: [0x3eb033BAc5c449bDcb6D082c4f728eDAfC8D75fa](https://etherscan.io/address/0x3eb033BAc5c449bDcb6D082c4f728eDAfC8D75fa#code) ([diff](https://disco.ethbeat.org/diff/eth:0x6e1781678ffE6CDc109fd3bC0833c47BD0F23de1/eth:0x3eb033BAc5c449bDcb6D082c4f728eDAfC8D75fa)) - 2023-09-05 02:26 UTC, deployment of [ValidatorPool](https://etherscan.io/address/0xFdFF462845953D90719A78Fd12a2d103541d2103#code): transaction [0x31c5282eb4cc1bcf3b3a3fbbbb0116c0ee335b4ccabd497f02b2761b0bc65dbd](https://etherscan.io/tx/0x31c5282eb4cc1bcf3b3a3fbbbb0116c0ee335b4ccabd497f02b2761b0bc65dbd), implementations: [0x6e1781678ffE6CDc109fd3bC0833c47BD0F23de1](https://etherscan.io/address/0x6e1781678ffE6CDc109fd3bC0833c47BD0F23de1#code) Contract used to manage the Proposers. Anyone can submit a deposit and bond to a state root, or create a challenge. It also manages the Proposer rotation for each submittable block using a random selection. If the selected proposer fails to publish a root within 30m then the submission becomes open to everyone. - Roles: - **admin**: ProxyAdmin; ultimately SecurityCouncilTokenOwners - **security_council**: KromaSecurityCouncil Can be upgraded by: SecurityCouncilTokenOwners with no delay #### SP1VerifierGateway Addresses: [0x3B6041173B80E77f038f3F2C0f9744f04837185e](https://etherscan.io/address/0x3B6041173B80E77f038f3F2C0f9744f04837185e#code) This contract is the router for zk proof verification. It stores the mapping between identifiers and the address of onchain verifier contracts, routing each identifier to the corresponding verifier contract. - Roles: - **owner**: SP1VerifierGatewayMultisig Implementation used in: [Celo](https://ethbeat.org/layer2s/projects/celo#SP1VerifierGateway), [Lens](https://ethbeat.org/layer2s/projects/lens#SP1VerifierGateway), [Mantle](https://ethbeat.org/layer2s/projects/mantle#SP1VerifierGateway), [RISE](https://ethbeat.org/layer2s/projects/rise#SP1VerifierGateway), [Sophon](https://ethbeat.org/layer2s/projects/sophon#SP1VerifierGateway), [Taiko Alethia](https://ethbeat.org/layer2s/projects/taiko#SP1VerifierGateway) #### SP1Verifier Addresses: [0xc3c6dDDAc8829b233Dc6536Ec024775a57b0AF2A](https://etherscan.io/address/0xc3c6dDDAc8829b233Dc6536Ec024775a57b0AF2A#code) Verifier contract for SP1 proofs (v6.1.0). Implementation used in: [Base Chain](https://ethbeat.org/layer2s/projects/base#SP1Verifier), [Mantle](https://ethbeat.org/layer2s/projects/mantle#SP1Verifier), [Celo](https://ethbeat.org/layer2s/projects/celo#SP1Verifier), [X Layer](https://ethbeat.org/layer2s/projects/xlayer#SP1Verifier), [Katana](https://ethbeat.org/layer2s/projects/katana#SP1Verifier), [RISE](https://ethbeat.org/layer2s/projects/rise#SP1Verifier), [Lumia Prism](https://ethbeat.org/layer2s/projects/lumia#SP1Verifier), [Taiko Alethia](https://ethbeat.org/layer2s/projects/taiko#SP1Verifier), [Haust Network](https://ethbeat.org/layer2s/projects/haust#SP1Verifier), [Silicon](https://ethbeat.org/layer2s/projects/silicon#SP1Verifier), [Polygon zkEVM](https://ethbeat.org/layer2s/projects/polygonzkevm#SP1Verifier), [Sophon](https://ethbeat.org/layer2s/projects/sophon#SP1Verifier), [Pentagon Chain](https://ethbeat.org/layer2s/projects/penchain#SP1Verifier), [Lens](https://ethbeat.org/layer2s/projects/lens#SP1Verifier) The current deployment carries some associated risks: - Funds can be stolen if a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL).