Roles

Background

Mantle LSP Smart Contracts.

Mapping

L1 Contracts

Contract	Role and Descriptions	Criticality	Assignment
All Contracts	DEFAULT_ADMIN_ROLE Responsible for granting and revoke roles on contracts.	Critical	MantleSecCouncil [D40f]
ProxyAdminTimelock [aCE2]	VARIOUS Responsible for upgradability of all contracts. Link: AccessControlExplorer	Critical	MantleSecCouncil [D40f]
Oracle [8192]	ORACLE_MANAGER_ROLE Modify settable properties (sanity bounds, quorum contract address).	High	MantleSecCouncil [D40f]
	ORACLE_MODIFIER_ROLE Modify existing Oracle records.	High	MantleSecCouncil [D40f]
	ORACLE_PENDING_UPDATE_RESOLVER_ROLE Resolve/replace pending Oracle updates. Likely requires Unpauser subsequent action.	High	MantleLSPEng [c9ff]MantleAdmin [8eB8]
OracleQuorumManager [0D90]	QUORUM_MANAGER_ROLE Update properties (window size, quorum thresholds).	High	MantleSecCouncil [D40f]
	REPORTER_MODIFIER_ROLE Change set of Service Oracle reporters.	High	MantleSecCouncil [D40f]
	SERVICE_ORACLE_REPORTER Role given to Oracle reporters to allow report submission	Low	MultipleServices
Pauser [f1f8]	PAUSER_ROLE Pause all aspects of the protocol.	Medium	MultipleServices
	UNPAUSER_ROLE Unpause all aspects of the protocol.	High	MantleSecCouncil [D40f]MantleAdmin [8eB8]
ReturnsAggregator [3b82]	AGGREGATOR_MANAGER_ROLE Set fees receiver and fees basis points.	Medium	MantleSecCouncil [D40f]
ConsensusLayerReceiver [493f]	RECEIVER_MANAGER_ROLE Manages the Withdrawer Role.	High	MantleSecCouncil [D40f]
	WITHDRAWER_ROLE Should only be the ReturnsAggregator[3b82] contract. Configured as a Role incase we have future upgrade, migration or recovery requirements.	High	SmartContract
ExecutionLayerReceiver [9cEf]	RECEIVER_MANAGER_ROLE Manages the Withdrawer Role.	High	MantleSecCouncil [D40f]
	WITHDRAWER_ROLE Should only be the ReturnsAggregator[3b82] contract. Configured as a Role incase we have future upgrade, migration or recovery requirements.	High	SmartContract
Staking [9E8f]	STAKING_MANAGER_ROLE Trigger administrative tasks including: mETH limit, exchangeAdjustmentRate, minStake, etc.	Medium	MantleSecCouncil [D40f]
	ALLOCATOR_SERVICE_ROLE Allocate funds to unstake requests manager.	Low	InternalService [1447]
	INITIATOR_SERVICE_ROLE Initiate new validators.	Low	InternalService [2046]
	STAKING_ALLOWLIST_MANAGER_ROLE Manage Staking Allowlist.	Low	MantleLSPEng [c9ff]
	STAKING_ALLOWLIST_ROLE Stake ETH when allowlist is enabled.	Low	Users
	TOP_UP_ROLE Top up unallocated ETH from insurance, boosting programs, other compensation, or donations.	Low	MantleLSPEng [c9ff]MantleAdmin [8eB8]
UnstakeRequestManager [Dcf9]	MANAGER_ROLE Set properties (finalization delta blocks).	Medium	MantleSecCouncil [D40f]
	REQUEST_CANCELLER_ROLE Cancel unfinalized requests in emergency state.	Medium	MantleSecCouncil [D40f]
mETH L1 Token [ADfa]	See DEFAULT_ADMIN_ROLE above

L2 Contracts

Contract	Role and Descriptions	Criticality	Assignment
All Contracts	DEFAULT_ADMIN_ROLE Responsible for granting and revoke roles on contracts.	Critical	MantleSecCouncilL2 [B105]
ProxyTimeLock [65E5]	VARIOUS Responsible for upgradability of all contracts.	Critical	MantleSecCouncilL2 [B105]
mETH L2 Token [0bb0]	See DEFAULT_ADMIN_ROLE above

Addresses

Signers will remain anonymous for security reasons.

Mantle Security Council

• L1: 0x4e59e778a0fb77fBb305637435C62FaeD9aED40f

• L2: 0x09734bB3980906Bb217305EA6Bd34256feEAB105

• SAFE Multisig

• Same security council as Mantle Network

• Generally used for contract upgrades and super permissions

• Likely transfer to DAO controller in the future as the protocol matures

Mantle LSP Engineering

• 0x432ABcCb04DdD86Db9aA91FA3E03Fb566270c9ff

• SAFE Multisig

• Generally used for manual approvals, or low criticality parameter updates.

Mantle Administrator

• 0x3Dc5FcB0Ad5835C6059112e51A75b57DBA668eB8

• Hardware EOA

• One of the signers of Mantle Security Council, used for fast response and in case there are issues with the Multisig Solutions.

Internal Services

• Allocator: 0xC62cE6fDff7B1374971A5F6f04f4aabc464e1447

• Initiator: 0x0eC6a4ed8bEa13f939A9cB7BbE1871cEe2b12046

• These services need to have their private key online (Hot Wallet) for the required system performance. The private key is protected by industry standard setups such as cloudHSM and secure enclaves.

• These services are provided by the Mantle LSP Core Engineering team.

Multiple Services

Pausers (Guardians):

• 0x96fa4e22a56c4a7dbcb09eaacd0f2becd80e24ae

• Additional Guardians TBD

Service_Oracle_Reporter:

• 0x9314C425B6839a596D15a5A9e4EFA08Dc5A9EF94

• 0x84AEcd13C481885887e7974fE77A2f91B7179B17

• 0x3cd026cBff7f9394c981A3Ab96e2385532E09dd7

• 0x6B4a2804248E7072Bc659bE5a84F52A776dFD602

• 0x7451399e9a3Fe3d64976072a06a9d17713D5FeF1

• 0x94EC704cF6184e7f389c11A5AD8f9c842d3328Cd

Note:

• These services need to have their private key online (Hot Wallet) for the required system performance. The private key is protected by industry standard setups such as cloudHSM and secure enclaves.

• These services are provided by a combination of the Mantle LSP Core Engineering team, and selected Third Parties.

Definitions

Criticality

Critical

• The most important role.

• Can change other role permissions (super admin).

• Can change the protocols logic (upgrade).

High

• Cannot directly access funds or modify core protocol logic.

• Can collude with multiple other roles to indirectly drain funds through adjustment of risk parameters and other economic exploits.

Medium

• Cannot directly or indirectly access a material amount of funds.

• Can cause temporary service disruptions (until they are replaced by the administrators).

Low

• Cannot directly or indirectly access any funds.

• Have minimal effect on the system and bad changes can be easily fixed.