mETH Related

Scope of this page includes: the ETH-Staking-Vault and subsystems, and the mETH token.

Addresses (Signers)

NameAddress

0x4e59e778a0fb77fBb305637435C62FaeD9aED40f

0x09734bB3980906Bb217305EA6Bd34256feEAB105

0x432ABcCb04DdD86Db9aA91FA3E03Fb566270c9ff

MAdminEOA [8eB8]

0x3Dc5FcB0Ad5835C6059112e51A75b57DBA668eB8

Service_Allocator [1447]

0xC62cE6fDff7B1374971A5F6f04f4aabc464e1447

Service_Initiator [2046]

0x0eC6a4ed8bEa13f939A9cB7BbE1871cEe2b12046

Service_Oracle

0x9314C425B6839a596D15a5A9e4EFA08Dc5A9EF94 0x84AEcd13C481885887e7974fE77A2f91B7179B17 0x6B4a2804248E7072Bc659bE5a84F52A776dFD602 0x7451399e9a3Fe3d64976072a06a9d17713D5FeF1 0x94EC704cF6184e7f389c11A5AD8f9c842d3328Cd 0x7258E54B9C8014719C7c2A2550f297A6109A5cBf

Service_Pauser

0x96fa4e22a56c4a7dbcb09eaacd0f2becd80e24ae Additional Guardians TBD

For upgradability, proxyadmin, and timelock related roles, see: Upgrade Related

L1 Contracts

ContractRole and DescriptionsCriticalityAssignment

Oracle [8192] ERC1967 upgradable

Critical

MLSPTimelockL1 [aCE2]

DEFAULT_ADMIN_ROLE

Critical

MSecCouncilL1 [D40f]

ORACLE_MANAGER_ROLE Modify settable properties (sanity bounds, quorum contract address).

High

MSecCouncilL1 [D40f]

ORACLE_MODIFIER_ROLE Modify existing Oracle records.

High

MSecCouncilL1 [D40f]

ORACLE_PENDING_UPDATE_RESOLVER_ROLE Resolve/replace pending Oracle updates. Likely requires Unpauser subsequent action.

High

MLSPEngL1 [c9ff]MAdminEOA [8eB8]

OracleQuorumMgr[0D90] ERC1967 upgradable

Critical

MLSPTimelockL1 [aCE2]

DEFAULT_ADMIN_ROLE

Critical

MSecCouncilL1 [D40f]

QUORUM_MANAGER_ROLE Update properties (window size, quorum thresholds).

High

MSecCouncilL1 [D40f]

REPORTER_MODIFIER_ROLE Change set of Service Oracle reporters.

High

MSecCouncilL1 [D40f]

SERVICE_ORACLE_REPORTER Role given to Oracle reporters to allow report submission. Also see report restrictions: Oracle Sanity Checks

Medium

Service_Oracle

Pauser [f1f8] ERC1967 upgradable

Critical

MLSPTimelockL1 [aCE2]

DEFAULT_ADMIN_ROLE

Critical

MSecCouncilL1 [D40f]

PAUSER_ROLE Pause all aspects of the protocol.

Medium

Service_Pauser

UNPAUSER_ROLE Unpause all aspects of the protocol.

High

MSecCouncilL1 [D40f]MAdminEOA [8eB8]

ReturnsAggregator [3b82] ERC1967 upgradable

Critical

MLSPTimelockL1 [aCE2]

DEFAULT_ADMIN_ROLE

Critical

MSecCouncilL1 [D40f]

AGGREGATOR_MANAGER_ROLE Set fees receiver and fees basis points.

Medium

MSecCouncilL1 [D40f]

ConsensusLayerRe [493f] ERC1967 upgradable

Critical

MLSPTimelockL1 [aCE2]

DEFAULT_ADMIN_ROLE

Critical

MSecCouncilL1 [D40f]

RECEIVER_MANAGER_ROLE Manages the Withdrawer Role.

High

MSecCouncilL1 [D40f]

WITHDRAWER_ROLE Should only be the ReturnsAggregator[3b82] contract. Configured as a Role incase we have future upgrade, migration or recovery requirements.

High

SmartContract

ExecutionLayerRe [9cEf] ERC1967 upgradable

Critical

MLSPTimelockL1 [aCE2]

DEFAULT_ADMIN_ROLE

Critical

MSecCouncilL1 [D40f]

RECEIVER_MANAGER_ROLE Manages the Withdrawer Role.

High

MSecCouncilL1 [D40f]

WITHDRAWER_ROLE Should only be the ReturnsAggregator[3b82] contract. Configured as a Role incase we have future upgrade, migration or recovery requirements.

High

SmartContract

Staking [9E8f] ERC1967 upgradable

Critical

MLSPTimelockL1 [aCE2]

DEFAULT_ADMIN_ROLE

Critical

MSecCouncilL1 [D40f]

STAKING_MANAGER_ROLE Trigger administrative tasks including: mETH limit, exchangeAdjustmentRate, minStake, etc.

Medium

MSecCouncilL1 [D40f]

ALLOCATOR_SERVICE_ROLE Allocate funds to unstake requests manager.

Low

Service_Allocator [1147]

INITIATOR_SERVICE_ROLE Initiate new validators.

Low

Service_Initiator [2046]

STAKING_ALLOWLIST_MANAGER_ROLE Manage Staking Allowlist.

Low

MLSPEngL1 [c9ff]

STAKING_ALLOWLIST_ROLE Stake ETH when allowlist is enabled.

Low

Users

TOP_UP_ROLE Top up unallocated ETH from insurance, boosting programs, other compensation, or donations.

Low

MLSPEngL1 [c9ff]MAdminEOA [8eB8]

UnstakeReqMgr [Dcf9] ERC1967 upgradable

Critical

MLSPTimelockL1 [aCE2]

DEFAULT_ADMIN_ROLE

Critical

MSecCouncilL1 [D40f]

MANAGER_ROLE Set properties (finalization delta blocks).

Medium

MSecCouncilL1 [D40f]

REQUEST_CANCELLER_ROLE Cancel unfinalized requests in emergency state.

Medium

MSecCouncilL1 [D40f]

mETH Token

L1 Contracts

ContractRole and DescriptionsCriticalityAssignment

mETH L1 Token [ADfa] ERC1967 upgradable

Critical

MLSPTimelockL1 [aCE2]

DEFAULT_ADMIN_ROLE

Critical

MSecCouncilL1 [D40f]

L2 Contracts

ContractRole and DescriptionsCriticalityAssignment

mETH L2 Token [0bb0] ERC1967 upgradable

Critical

MLSPTimelockL2 [65E5]

DEFAULT_ADMIN_ROLE

Critical

MSecCouncilL2 [B105]

Last updated