# deBridge DLN

Markdown version of https://l2beat.com/interop/protocols/debridge-dln

## Summary

- Last 24h volume: $9.85 M
- Last 24h transfer count: 2.51 K
- Last 24h top path: Ethereum ↔ Arbitrum One ($2.30 M)
- Last 24h avg. transfer time: 26s
- Last 24h avg. transfer value: $4.48 K
- Last 24h tokens by volume: [USDC](https://l2beat.com/interop/tokens/9HN5PN/circle/usdc) ($8.66 M), [USDG](https://l2beat.com/interop/tokens/ibIzBF/usdg) ($661.88 K), [USDT](https://l2beat.com/interop/tokens/xxeNQv/tether/usdt) ($555.79 K), and 161 more
- Last 24h top token: [USDC](https://l2beat.com/interop/tokens/9HN5PN/circle/usdc) ($8.66 M volume, 1.35 K transfers)
- Last 24h transfer size: Under $100: 1.00 K transfers, $100-$1K: 763 transfers, $1K-$10K: 343 transfers, $10K-$100K: 76 transfers, Over $100K: 17 transfers (min $0.02, average $4.48 K, max $1.74 M)
- Last 24h transfer type distribution: Non-minting: $9.85 M

### About

Intent framework built on top of the deBridge messaging protocol. Maker funds are escrowed in the DlnSource contract on the source chain and released to takers on unlock messages attested by the deBridge validator set.

## Volume and flows

### Top chains by volume (last 24h)

A transfer counts toward the volume of both its source and its destination chain, so the chain volumes add up to more than the total volume.

- Ethereum: $5.60 M (859 transfers)
- Arbitrum One: $4.50 M (309 transfers)
- Solana: $3.92 M (1.71 K transfers)
- and 10 more

### Top routes by volume (last 24h)

- Ethereum → Arbitrum One: $1.80 M
- Ethereum → Tron: $1.13 M
- Solana → Arbitrum One: $1.10 M
- BNB Smart Chain → Solana: $938.77 K
- Ethereum → Solana: $553.29 K
- Ethereum → Base: $544.78 K
- Arbitrum One → Ethereum: $492.13 K
- Solana → Ethereum: $399.92 K
- Arbitrum One → Solana: $344.04 K
- Tron → Arbitrum One: $234.01 K

The flows between chains are an interactive graph on [the HTML page](https://l2beat.com/interop/protocols/debridge-dln#interop-volume).

## Description

Intent framework built on top of the deBridge messaging protocol. Maker funds are escrowed in the DlnSource contract on the source chain and released to takers on unlock messages attested by the deBridge validator set.

### Architecture

The deBridge Liquidity Network (DLN) is an intent protocol built on top of the deBridge messaging protocol, sharing its validation layer and governance. Users (*makers*) create cross-chain orders by locking their *give* funds directly in the `DlnSource` contract on the source chain. On the destination chain, *takers* fulfill orders through the `DlnDestination` contract by paying the *take* amount, which is forwarded to the recipient within the same transaction, so `DlnDestination` holds no user funds. A protocol fee (currently 0.001 ETH flat plus 4 bps on Ethereum, refunded on cancellation) is deducted from the give amount at order creation.

### Order lifecycle

Fulfillment is permissionless — anyone can fill any order unless the maker restricted it — and the filler names an *unlock authority* for the order. Only that unlock authority can later trigger the unlock, which sends a message back to the source chain's `DlnSource` through the `DeBridgeGate`. Once the deBridge validators attest the message, the escrowed give funds are released to the taker's chosen beneficiary.

### Crosschain validation

`DlnSource` releases escrowed funds only to calls from the deBridge `CallProxy` whose authenticated original sender is the `DlnDestination` address configured for the order's destination chain (an admin-set, event-tracked map currently routing to 21 chains). The authenticity of that claim rests entirely on the deBridge validator set: a quorum of validator signatures (currently 8 of 12 on Ethereum) attests each unlock or cancellation message. A compromised validator quorum, or an admin change of the per-chain routing addresses, allows draining all order funds escrowed in `DlnSource`.

### User recovery

Unfilled orders can be cancelled from the destination chain by the maker-designated order authority, refunding the full escrow to the maker on the source chain. A `GOVERNANCE_DELEGATED_ORDER_CANCEL_ROLE` can force-cancel unfulfilled orders on behalf of makers, but refunds can only go to a maker-designated address, making it a liveness rather than a theft power. Fulfilled orders cannot be cancelled.

### External calls

Orders can carry calldata to be executed on the destination chain after fulfillment. In that case the taker's funds are routed to an `ExternalCallAdapter` escrow, which releases them when the registered executor contract runs the calldata or refunds the order authority on cancellation. The adapter is admin-replaceable in `DlnDestination`, so a malicious adapter could steal the funds of every order carrying calldata.

### Intents

A newer intent-manager stack automates order creation: users sign an EIP-712 *intent* offchain — the signature covers only an opaque 32-byte intent hash, so wallets cannot display the actual constraints — and permissionless fillers turn intents into DLN orders through the `DeBridgeIntentManager`. There is no signature nonce; an intent is multi-fill until its budget is exhausted, expired, cancelled or nullified. Input tokens are pulled through the `DeBridgeAllowanceHolder`, the single immutable contract holding all user approvals of the intent system: its transfer functions carry no intent-level checks, so any holder of its `ALLOWED_SPENDER_ROLE` can move any approved token from any approver to any recipient. All user protection lives in the constraints of the signed intent itself (price bounds, allowed senders, receivers, budgets); the fill fee is *not* part of the signed intent and is set by the intent manager admin.

### Upgradeability and governance

`DlnSource` (which escrows all in-flight maker funds), `DlnDestination` and the `ExternalCallAdapter` are upgradeable by the same 5/8 deBridge multisig that governs the messaging protocol, with no timelock or exit window. The multisig also holds the `DEFAULT_ADMIN_ROLE` on both DLN contracts, controlling the trusted cross-chain routing addresses, fees, the external call adapter, and unpausing. The intent-manager stack has a weaker setup: on Ethereum, a single EOA is simultaneously the admin of `DeBridgeIntentManager` and `DeBridgeAllowanceHolder` and the owner of the ProxyAdmin that can upgrade the intent manager — an upgrade there could abuse the allowance holder's spender role to drain all outstanding user approvals. Several satellite contracts have unverified source code.

### Monitoring

Order creation, fulfillment, unlock and cancellation all emit events, and the per-chain routing configuration is event-tracked. deBridge provides an [explorer](https://app.debridge.finance/explorer) (DLN trades are labeled as such) for tracking order flow.

## Top tokens by volume

The interactive tokens table is shown on [the HTML page](https://l2beat.com/interop/protocols/debridge-dln#interop-tokens).

## Transfers

The interactive transfers table is shown on [the HTML page](https://l2beat.com/interop/protocols/debridge-dln#interop-transfers).

## Permissions

### Ethereum

#### Actors

##### Admin Multisig

Addresses: [0x6bec1faF33183e1Bc316984202eCc09d46AC92D5](https://etherscan.io/address/0x6bec1faF33183e1Bc316984202eCc09d46AC92D5)

A Multisig with 5/8 threshold.
- Can upgrade **with no delay**
  - DeBridgeGate [via: ProxyAdmin]
  - ExternalCallAdapter [via: ProxyAdmin]
  - DeBridgeRouter [via: ProxyAdmin]
  - DeBridgeTokenDeployer [via: ProxyAdmin]
  - CallProxy [via: ProxyAdmin]
  - SignatureVerifier [via: ProxyAdmin]
  - SimpleFeeProxy [via: ProxyAdmin]
  - DlnDestination [via: ProxyAdmin]
  - DlnSource [via: ProxyAdmin]
- Can interact with DeBridgeGate
  - pause the DeBridgeGate, stopping all sends, claims and deToken deployments on this chain (only the admin can unpause)
  - replace the SignatureVerifier (and with it the entire validation layer of the deBridge messaging protocol), the CallProxy and the deToken deployer, censor individual submissions (blockSubmission), toggle supported chains, set all fees and per-address fee discounts, designate the fee withdrawal contract, unpause the gate, and grant/revoke all roles. Most of these setters emit no events
- Can interact with ExternalCallAdapter
  - replace the executor contract that handles external calldata of DLN orders and pause the adapter
- Can interact with DeBridgeRouter
  - manage the whitelist of swap routers and forwarding targets this contract may call with arbitrary calldata (and grant infinite token approvals to), set the service fee and fee treasury, and sweep any funds held by the router
- Can interact with DeBridgeTokenDeployer
  - administer all deployed deTokens: pause their transfers and grant/revoke minter rights, including the ability to grant itself the right to mint unbacked deTokens
  - replace the implementation of all deTokens at once (this contract acts as their beacon), change the admin assigned to newly deployed deTokens, and override deToken names/symbols. None of these setters emit events
- Can interact with CallProxy
  - grant and revoke the DEBRIDGE_GATE_ROLE that authorizes contracts to execute arbitrary external calls through the CallProxy
- Can interact with SignatureVerifier
  - add and remove deBridge validators (oracles), change all signature thresholds (quorum must remain a majority of the oracle set), and re-point the gate contract allowed to request verification. Threshold changes emit no events
- Can interact with SimpleFeeProxy
  - grant/revoke the FEE_COLLECTOR_ROLE that receives all deBridge protocol fees, pause fee withdrawals, and change the referenced gate contract
- Can interact with DlnDestination
  - set the trusted DlnSource address (message receiver) for each supported chain, replace the external call adapter that custodies funds of orders with attached calldata, unpause the contract, and grant/revoke all roles
- Can interact with DlnSource
  - set the trusted DlnDestination address for each supported chain (a malicious address there can drain all escrowed order funds via forged unlock messages), change DLN fees without upper bound, unpause the contract, and grant/revoke all roles

Participants (8): [0xbA7cE717928A6C51ab530aD9AdB69bA6E76D09B5](https://etherscan.io/address/0xbA7cE717928A6C51ab530aD9AdB69bA6E76D09B5), [0xC351f905d810Cb33c54fE771e1bE4ec5A5048c2D](https://etherscan.io/address/0xC351f905d810Cb33c54fE771e1bE4ec5A5048c2D), [0xD4Aa80C7a35B2C996Ef3F83baf91D5721c86dA2C](https://etherscan.io/address/0xD4Aa80C7a35B2C996Ef3F83baf91D5721c86dA2C), [0x874B1d14bF4FE455C9eCAcDf66b629e10664c6E1](https://etherscan.io/address/0x874B1d14bF4FE455C9eCAcDf66b629e10664c6E1), [0xE9666D80e5617bA1470E2cA09F2D9B0C8CCd56B7](https://etherscan.io/address/0xE9666D80e5617bA1470E2cA09F2D9B0C8CCd56B7), [0x6f572a24c5C009fC8C844Fab5352edf79F132FBD](https://etherscan.io/address/0x6f572a24c5C009fC8C844Fab5352edf79F132FBD), [0xd725E456D5beD8275E297C4Dd11135e3C5cDe544](https://etherscan.io/address/0xd725E456D5beD8275E297C4Dd11135e3C5cDe544), [0x24C0E1C19c8eC997b781dF4B4A0f812aE9667c96](https://etherscan.io/address/0x24C0E1C19c8eC997b781dF4B4A0f812aE9667c96)

##### DeBridgeIntentManager_v0_8_0

Addresses: [0xd2a4cA9DA7B84c16B888df340d96a5a92aA44F07](https://etherscan.io/address/0xd2a4cA9DA7B84c16B888df340d96a5a92aA44F07)

Fills signed user intents through DLN orders or same-chain swaps. It pulls approved tokens through its configurable allowance holder. Fees, the DLN source and the fee recipient are configurable independently of user signatures.
- Can interact with DeBridgeAllowanceHolder_v0_1_4
  - transfer approved tokens from any user to any recipient through direct allowances or Permit2

##### DeBridgeIntentManager

Addresses: [0xDDDDDDDdeB2E68Ee19832e356FCB5537124A9708](https://etherscan.io/address/0xDDDDDDDdeB2E68Ee19832e356FCB5537124A9708)

Fills user-signed intents by creating DLN orders on their behalf: it pulls input tokens from users through the DeBridgeAllowanceHolder and forwards them into DlnSource in the same transaction, charging a variable fee that is not part of the user-signed intent.
- Can interact with DeBridgeAllowanceHolder
  - unconditionally transfer any amount of any token from any user who approved the DeBridgeAllowanceHolder (directly or via Permit2) to any recipient, and make arbitrary calls from its address

##### EOA 1

Addresses: [0x0746e7e4d15F30885616B4ac3D274393354E80c0](https://etherscan.io/address/0x0746e7e4d15F30885616B4ac3D274393354E80c0)

- Can interact with DlnDestination
  - force-cancel any not-yet-fulfilled order that has a cancel beneficiary set by its maker (refunds can only go to that maker-designated address)

##### 12 EOAs

Addresses: [0x1c0720B124e7251e881a0fbCfe259d085C59f205](https://etherscan.io/address/0x1c0720B124e7251e881a0fbCfe259d085C59f205) (EOA 2), [0x4bC16662A2cE381E7bb54Dc577c05619C5E67526](https://etherscan.io/address/0x4bC16662A2cE381E7bb54Dc577c05619C5E67526) (EOA 4), [0x4CA2191cDE585d65EB6AFC09D23D60b8A0AB677D](https://etherscan.io/address/0x4CA2191cDE585d65EB6AFC09D23D60b8A0AB677D) (EOA 5), [0x573F5E2940789B378BA09cf7d3fD010C422a9ff5](https://etherscan.io/address/0x573F5E2940789B378BA09cf7d3fD010C422a9ff5) (EOA 6), [0x59CE95b8955F0E7Be128d5Af77161B36f6084214](https://etherscan.io/address/0x59CE95b8955F0E7Be128d5Af77161B36f6084214) (EOA 7), [0x6436BBcA322b8cD0c56d8b9aD7837b13960dA426](https://etherscan.io/address/0x6436BBcA322b8cD0c56d8b9aD7837b13960dA426) (EOA 8), [0x83f81E7f9E284AAFFEDED797008663595f7342bF](https://etherscan.io/address/0x83f81E7f9E284AAFFEDED797008663595f7342bF) (EOA 9), [0x874f46124C1DAaD4749B94f82eD142754826240E](https://etherscan.io/address/0x874f46124C1DAaD4749B94f82eD142754826240E) (EOA 10), [0xbCF516826eD7F3b0E487C7ca6A87b3b4EccDD4DC](https://etherscan.io/address/0xbCF516826eD7F3b0E487C7ca6A87b3b4EccDD4DC) (EOA 11), [0xDD523FD4DebcF0dB6f0B2c2D30D075CaaeE023e0](https://etherscan.io/address/0xDD523FD4DebcF0dB6f0B2c2D30D075CaaeE023e0) (EOA 12), [0xebec9bc53f9C65f69DB8591B9f240BbCDb563c54](https://etherscan.io/address/0xebec9bc53f9C65f69DB8591B9f240BbCDb563c54) (EOA 13), [0xf27Af436A6F2d9C64B4CA40a483eC46acDc33fe8](https://etherscan.io/address/0xf27Af436A6F2d9C64B4CA40a483eC46acDc33fe8) (EOA 14)

- Can interact with SignatureVerifier
  - sign cross-chain submissions as a deBridge validator. A quorum of these signers can authorize arbitrary messages, mint deTokens and unlock collateral from the deBridge gate on this chain

##### EOA 3

Addresses: [0x391276932b5105C2DB8eE928dfd8872564d6d246](https://etherscan.io/address/0x391276932b5105C2DB8eE928dfd8872564d6d246)

- Can interact with SimpleFeeProxy
  - withdraw all protocol fees accrued in the DeBridgeGate to itself
- Can interact with DlnSource
  - withdraw accumulated DLN protocol fees (not user principal) to itself

##### EOA 15

Addresses: [0x6681b27BEC88Ba8c6F0E4B42dD6E3e5c1a797021](https://etherscan.io/address/0x6681b27BEC88Ba8c6F0E4B42dD6E3e5c1a797021)

- Can interact with DeBridgeAllowanceHolder_v0_1_4
  - authorize spenders of all user approvals, replace Permit2 and rescue held funds
- Can interact with DeBridgeIntentManager_v0_8_0
  - change the allowance holder, DLN source, fee recipient and intent fees, rescue held funds, and grant or revoke roles

##### EOA 16

Addresses: [0x844e5bd15b32B9F2245205AE59C9c6f5Fc696444](https://etherscan.io/address/0x844e5bd15b32B9F2245205AE59C9c6f5Fc696444)

- Can upgrade **with no delay**
  - FeeTreasury [via: ProxyAdmin]
  - DeBridgeIntentManager [via: ProxyAdmin]
- Can interact with FeeTreasury
  - grant and revoke fee withdrawal permissions
- Can interact with DeBridgeAllowanceHolder
  - grant and revoke the ALLOWED_SPENDER_ROLE, i.e. authorize any address (including itself) to spend all outstanding user approvals of the deBridge intent system
- Can interact with DeBridgeIntentManager
  - set intent fill fees up to 100% with immediate effect (fees are not part of the user-signed intent), manage the trusted solver set, sweep funds held by the contract, and grant/revoke all roles

##### EOA 17

Addresses: [0xbda458dfc28021dEbD72060671Fc350fA5CB39e5](https://etherscan.io/address/0xbda458dfc28021dEbD72060671Fc350fA5CB39e5)

- Can interact with IntentManagerValidator
  - grant and revoke the INTENT_MANAGER_ROLE that allows creating DLN orders with custom or zero protocol fees

##### EOA 18

Addresses: [0xd6dF82F60a2FE1e61aEc29679bc4954F33D8C1EC](https://etherscan.io/address/0xd6dF82F60a2FE1e61aEc29679bc4954F33D8C1EC)

- Can upgrade **with no delay**
  - DeBridgeAllowanceHolder_v0_1_4 [via: ProxyAdmin]
  - DeBridgeIntentManager_v0_8_0 [via: ProxyAdmin]

## Smart contracts

### Ethereum

#### DeBridgeGate

Addresses: [0x43dE2d77BF8027e25dBD179B491e8d64f38398aA](https://etherscan.io/address/0x43dE2d77BF8027e25dBD179B491e8d64f38398aA#code), [0x797161BCC625155D2302251404ccB93c2632658e](https://etherscan.io/address/0x797161BCC625155D2302251404ccB93c2632658e#code) (Implementation (Upgradable)), [0xE4427af3555CD9303D728C491364FAdFDD7494Fe](https://etherscan.io/address/0xE4427af3555CD9303D728C491364FAdFDD7494Fe#code) (Admin)

**Past upgrades** (Count of upgrades: 5, Last upgrade: 3y 10mo ago, Avg upgrade interval: 9mo 28d)

- 2022-12-15 10:58 UTC, upgrade of [DeBridgeGate](https://etherscan.io/address/0x43dE2d77BF8027e25dBD179B491e8d64f38398aA#code): transaction [0x4c0887fede83ae4bb405125f1f08a3e6604ca712ae7c135de79e4595a9b408dd](https://etherscan.io/tx/0x4c0887fede83ae4bb405125f1f08a3e6604ca712ae7c135de79e4595a9b408dd), implementations: [0x797161BCC625155D2302251404ccB93c2632658e](https://etherscan.io/address/0x797161BCC625155D2302251404ccB93c2632658e#code) ([diff](https://disco.l2beat.com/diff/eth:0x24455aa55DED7728783c9474bE8eA2f5C935f8EB/eth:0x797161BCC625155D2302251404ccB93c2632658e))
- 2022-03-15 12:17 UTC, upgrade of [DeBridgeGate](https://etherscan.io/address/0x43dE2d77BF8027e25dBD179B491e8d64f38398aA#code): transaction [0xd71afcf98347af3e96dc8ba6a61c4c9cdbb213e82893639945a1b8d4ab51d9e2](https://etherscan.io/tx/0xd71afcf98347af3e96dc8ba6a61c4c9cdbb213e82893639945a1b8d4ab51d9e2), implementations: [0x24455aa55DED7728783c9474bE8eA2f5C935f8EB](https://etherscan.io/address/0x24455aa55DED7728783c9474bE8eA2f5C935f8EB#code) ([diff](https://disco.l2beat.com/diff/eth:0xc8550d85759BAbE6851235212563Fa2Ff04961BF/eth:0x24455aa55DED7728783c9474bE8eA2f5C935f8EB))
- 2022-02-16 13:27 UTC, upgrade of [DeBridgeGate](https://etherscan.io/address/0x43dE2d77BF8027e25dBD179B491e8d64f38398aA#code): transaction [0x361b7193ffb8462e6ccb8a6237cbbf67f3367a08a9e8f781ac245f8b72c5783c](https://etherscan.io/tx/0x361b7193ffb8462e6ccb8a6237cbbf67f3367a08a9e8f781ac245f8b72c5783c), implementations: [0xc8550d85759BAbE6851235212563Fa2Ff04961BF](https://etherscan.io/address/0xc8550d85759BAbE6851235212563Fa2Ff04961BF#code) ([diff](https://disco.l2beat.com/diff/eth:0x51bFD427D06B2a5FC3588f9d023994A9f70e0Ce0/eth:0xc8550d85759BAbE6851235212563Fa2Ff04961BF))
- 2022-01-18 09:29 UTC, upgrade of [DeBridgeGate](https://etherscan.io/address/0x43dE2d77BF8027e25dBD179B491e8d64f38398aA#code): transaction [0x7a4bc7d90aada3516e4fc057714f46e5b25dcaf4c2524e49148f5c317a04b149](https://etherscan.io/tx/0x7a4bc7d90aada3516e4fc057714f46e5b25dcaf4c2524e49148f5c317a04b149), implementations: [0x51bFD427D06B2a5FC3588f9d023994A9f70e0Ce0](https://etherscan.io/address/0x51bFD427D06B2a5FC3588f9d023994A9f70e0Ce0#code) ([diff](https://disco.l2beat.com/diff/eth:0xFCe0502293dCacbFc2d663f7814b2771dEcfd576/eth:0x51bFD427D06B2a5FC3588f9d023994A9f70e0Ce0))
- 2021-12-16 14:53 UTC, upgrade of [DeBridgeGate](https://etherscan.io/address/0x43dE2d77BF8027e25dBD179B491e8d64f38398aA#code): transaction [0x0cd2756ab739a46f966c013e709225d6e5e8a10f30bc0842b207205f6aa32670](https://etherscan.io/tx/0x0cd2756ab739a46f966c013e709225d6e5e8a10f30bc0842b207205f6aa32670), implementations: [0xFCe0502293dCacbFc2d663f7814b2771dEcfd576](https://etherscan.io/address/0xFCe0502293dCacbFc2d663f7814b2771dEcfd576#code) ([diff](https://disco.l2beat.com/diff/eth:0xB1A20D1c885fd775df97396397d6f8F07Abdd20D/eth:0xFCe0502293dCacbFc2d663f7814b2771dEcfd576))
- 2021-11-22 15:36 UTC, deployment of [DeBridgeGate](https://etherscan.io/address/0x43dE2d77BF8027e25dBD179B491e8d64f38398aA#code): transaction [0x1f191abb3e293e615df529fef0c7f1f0a9c5a9dacd44154c47df269d2a68d8b8](https://etherscan.io/tx/0x1f191abb3e293e615df529fef0c7f1f0a9c5a9dacd44154c47df269d2a68d8b8), implementations: [0xB1A20D1c885fd775df97396397d6f8F07Abdd20D](https://etherscan.io/address/0xB1A20D1c885fd775df97396397d6f8F07Abdd20D#code)

Central hub of the deBridge messaging protocol on this chain: it emits cross-chain submissions (asset transfers and/or arbitrary messages), locks and releases native assets, mints and burns deBridge-wrapped assets (deTokens), and executes claimed submissions after their validator signatures are checked by the SignatureVerifier. Claiming is permissionless: anyone can execute a submission that carries enough validator signatures.
- Roles:
  - **admin**: ProxyAdmin; ultimately Admin Multisig
  - **defaultAdmin**: Admin Multisig
  - **govMonitoring**: Admin Multisig

Can be upgraded by: Admin Multisig with no delay

#### DeBridgeTokenDeployer

Addresses: [0x8244d6Ffe0695B30b2bAD424683Ee3bc534Ea464](https://etherscan.io/address/0x8244d6Ffe0695B30b2bAD424683Ee3bc534Ea464#code), [0x4c7CA8fcFFE77281A8B81D4580CFf8257d785491](https://etherscan.io/address/0x4c7CA8fcFFE77281A8B81D4580CFf8257d785491#code) (Implementation (Upgradable)), [0xE4427af3555CD9303D728C491364FAdFDD7494Fe](https://etherscan.io/address/0xE4427af3555CD9303D728C491364FAdFDD7494Fe#code) (Admin)

**Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A)

- 2021-11-22 20:43 UTC, deployment of [DeBridgeTokenDeployer](https://etherscan.io/address/0x8244d6Ffe0695B30b2bAD424683Ee3bc534Ea464#code): transaction [0x291ee8bccd951b70182aee107393bc15fe0f12aa49d9759b196040f8c7ba219b](https://etherscan.io/tx/0x291ee8bccd951b70182aee107393bc15fe0f12aa49d9759b196040f8c7ba219b), implementations: [0x4c7CA8fcFFE77281A8B81D4580CFf8257d785491](https://etherscan.io/address/0x4c7CA8fcFFE77281A8B81D4580CFf8257d785491#code)

Deploys deBridge-wrapped token (deToken) contracts when an asset is bridged to this chain for the first time (callable only by the DeBridgeGate). All deTokens are beacon proxies whose beacon is this contract itself, so its tokenImplementation applies to every deToken on this chain at once.
- Roles:
  - **admin**: ProxyAdmin; ultimately Admin Multisig
  - **deBridgeTokenAdmin**: Admin Multisig
  - **defaultAdmin**: Admin Multisig

Can be upgraded by: Admin Multisig with no delay

#### CallProxy

Addresses: [0x8a0C79F5532f3b2a16AD1E4282A5DAF81928a824](https://etherscan.io/address/0x8a0C79F5532f3b2a16AD1E4282A5DAF81928a824#code), [0xBd3d657AE87671eC6f8D6272A9f431a7c4a9B6f8](https://etherscan.io/address/0xBd3d657AE87671eC6f8D6272A9f431a7c4a9B6f8#code) (Implementation (Upgradable)), [0xE4427af3555CD9303D728C491364FAdFDD7494Fe](https://etherscan.io/address/0xE4427af3555CD9303D728C491364FAdFDD7494Fe#code) (Admin)

**Past upgrades** (Count of upgrades: 5, Last upgrade: 4y 4mo ago, Avg upgrade interval: 9mo 28d)

- 2022-05-28 12:04 UTC, upgrade of [CallProxy](https://etherscan.io/address/0x8a0C79F5532f3b2a16AD1E4282A5DAF81928a824#code): transaction [0xd5a418a542f27929f6bbf34f70ce62607626d83b8503bda49bcef3e5e0591ce9](https://etherscan.io/tx/0xd5a418a542f27929f6bbf34f70ce62607626d83b8503bda49bcef3e5e0591ce9), implementations: [0xBd3d657AE87671eC6f8D6272A9f431a7c4a9B6f8](https://etherscan.io/address/0xBd3d657AE87671eC6f8D6272A9f431a7c4a9B6f8#code) ([diff](https://disco.l2beat.com/diff/eth:0xe5a04b307B31Af07F4DfCaA840952Ff7d3845c7e/eth:0xBd3d657AE87671eC6f8D6272A9f431a7c4a9B6f8))
- 2022-05-19 13:24 UTC, upgrade of [CallProxy](https://etherscan.io/address/0x8a0C79F5532f3b2a16AD1E4282A5DAF81928a824#code): transaction [0x883ba2edf63b460976d0de98a7089f3ea4d0a26257cfeb94af96d557e8e02f25](https://etherscan.io/tx/0x883ba2edf63b460976d0de98a7089f3ea4d0a26257cfeb94af96d557e8e02f25), implementations: [0xe5a04b307B31Af07F4DfCaA840952Ff7d3845c7e](https://etherscan.io/address/0xe5a04b307B31Af07F4DfCaA840952Ff7d3845c7e#code) ([diff](https://disco.l2beat.com/diff/eth:0x0C4B79205F6Cc20c0E0201b61b99e77F3CE3B67A/eth:0xe5a04b307B31Af07F4DfCaA840952Ff7d3845c7e))
- 2022-05-02 14:08 UTC, upgrade of [CallProxy](https://etherscan.io/address/0x8a0C79F5532f3b2a16AD1E4282A5DAF81928a824#code): transaction [0x6d3f1f876d002a58b8c95bc7ebcbd107bae9d1474e9e92125d83b4bec578a2da](https://etherscan.io/tx/0x6d3f1f876d002a58b8c95bc7ebcbd107bae9d1474e9e92125d83b4bec578a2da), implementations: [0x0C4B79205F6Cc20c0E0201b61b99e77F3CE3B67A](https://etherscan.io/address/0x0C4B79205F6Cc20c0E0201b61b99e77F3CE3B67A#code) ([diff](https://disco.l2beat.com/diff/eth:0x752A9e96e8683400ae238270C97c1D0160861fEF/eth:0x0C4B79205F6Cc20c0E0201b61b99e77F3CE3B67A))
- 2022-02-16 12:55 UTC, upgrade of [CallProxy](https://etherscan.io/address/0x8a0C79F5532f3b2a16AD1E4282A5DAF81928a824#code): transaction [0x580899ecfd63515c52fec86f09211a5c68fc6945256cd13ef45f5e4fc8aaba61](https://etherscan.io/tx/0x580899ecfd63515c52fec86f09211a5c68fc6945256cd13ef45f5e4fc8aaba61), implementations: [0x752A9e96e8683400ae238270C97c1D0160861fEF](https://etherscan.io/address/0x752A9e96e8683400ae238270C97c1D0160861fEF#code) ([diff](https://disco.l2beat.com/diff/eth:0xd5317E82BFEFf70b4773f0fcab5e2ABFA3c7D63b/eth:0x752A9e96e8683400ae238270C97c1D0160861fEF))
- 2022-01-18 09:32 UTC, upgrade of [CallProxy](https://etherscan.io/address/0x8a0C79F5532f3b2a16AD1E4282A5DAF81928a824#code): transaction [0xc3bf11577e383e1292663bd254b218f4c4f4d9dd682a6d51f2a7149eb0991420](https://etherscan.io/tx/0xc3bf11577e383e1292663bd254b218f4c4f4d9dd682a6d51f2a7149eb0991420), implementations: [0xd5317E82BFEFf70b4773f0fcab5e2ABFA3c7D63b](https://etherscan.io/address/0xd5317E82BFEFf70b4773f0fcab5e2ABFA3c7D63b#code) ([diff](https://disco.l2beat.com/diff/eth:0x4e446b6Cf4d127827c83Ca0c848Db0B43841c391/eth:0xd5317E82BFEFf70b4773f0fcab5e2ABFA3c7D63b))
- 2021-11-22 23:54 UTC, deployment of [CallProxy](https://etherscan.io/address/0x8a0C79F5532f3b2a16AD1E4282A5DAF81928a824#code): transaction [0x36e5d0f595838f33403445a5570b731087b16f2d7cb133aeb584f1ac1d444e3d](https://etherscan.io/tx/0x36e5d0f595838f33403445a5570b731087b16f2d7cb133aeb584f1ac1d444e3d), implementations: [0x4e446b6Cf4d127827c83Ca0c848Db0B43841c391](https://etherscan.io/address/0x4e446b6Cf4d127827c83Ca0c848Db0B43841c391#code)

Sandbox that executes arbitrary calldata attached to claimed cross-chain submissions on behalf of the DeBridgeGate. Calls are performed from this contract's address with attacker-choosable target and data, so external contracts must never trust it as a caller; it isolates such calls from the gate's balances.
- Roles:
  - **admin**: ProxyAdmin; ultimately Admin Multisig
  - **defaultAdmin**: Admin Multisig

Can be upgraded by: Admin Multisig with no delay

#### SignatureVerifier

Addresses: [0x949b3B3c098348b879C9e4F15cecc8046d9C8A8c](https://etherscan.io/address/0x949b3B3c098348b879C9e4F15cecc8046d9C8A8c#code), [0xfE7De3c1e1BD252C67667B56347cABFC6df08dF4](https://etherscan.io/address/0xfE7De3c1e1BD252C67667B56347cABFC6df08dF4#code) (Implementation (Upgradable)), [0xE4427af3555CD9303D728C491364FAdFDD7494Fe](https://etherscan.io/address/0xE4427af3555CD9303D728C491364FAdFDD7494Fe#code) (Admin)

**Past upgrades** (Count of upgrades: 1, Last upgrade: 4y 10mo ago, Avg upgrade interval: 2y 5mo)

- 2021-12-17 11:09 UTC, upgrade of [SignatureVerifier](https://etherscan.io/address/0x949b3B3c098348b879C9e4F15cecc8046d9C8A8c#code): transaction [0x190291e3c01fd074908fb41309a0438c8458d7b7f0f659dcfc5d9dbb5ea3807f](https://etherscan.io/tx/0x190291e3c01fd074908fb41309a0438c8458d7b7f0f659dcfc5d9dbb5ea3807f), implementations: [0xfE7De3c1e1BD252C67667B56347cABFC6df08dF4](https://etherscan.io/address/0xfE7De3c1e1BD252C67667B56347cABFC6df08dF4#code) ([diff](https://disco.l2beat.com/diff/eth:0x2a3e72eD893b5958690e16c3BBe1BD92137b6250/eth:0xfE7De3c1e1BD252C67667B56347cABFC6df08dF4))
- 2021-11-22 22:58 UTC, deployment of [SignatureVerifier](https://etherscan.io/address/0x949b3B3c098348b879C9e4F15cecc8046d9C8A8c#code): transaction [0xd8f65ce63f16eefd8816d0faa6c975cb1422ef4d6bbb58bd8e7507fb27b2dc5f](https://etherscan.io/tx/0xd8f65ce63f16eefd8816d0faa6c975cb1422ef4d6bbb58bd8e7507fb27b2dc5f), implementations: [0x2a3e72eD893b5958690e16c3BBe1BD92137b6250](https://etherscan.io/address/0x2a3e72eD893b5958690e16c3BBe1BD92137b6250#code)

Validation layer of the deBridge messaging protocol on this chain: it accepts a cross-chain submission if at least minConfirmations of the registered validators (oracles) have signed its submission ID with a plain ECDSA signature, and every validator flagged as 'required' has signed. There is no other proof system.
- Roles:
  - **admin**: ProxyAdmin; ultimately Admin Multisig
  - **defaultAdmin**: Admin Multisig
  - **oracleAddresses**: EOA 10, EOA 11, EOA 12, EOA 13, EOA 14, EOA 2, EOA 4, EOA 5, EOA 6, EOA 7, EOA 8, EOA 9

Can be upgraded by: Admin Multisig with no delay

#### DlnDestination

Addresses: [0xE7351Fd770A37282b91D153Ee690B63579D6dd7f](https://etherscan.io/address/0xE7351Fd770A37282b91D153Ee690B63579D6dd7f#code), [0xD9b4f9CacFFB59F2B982ad3c45096e3AA4B4020e](https://etherscan.io/address/0xD9b4f9CacFFB59F2B982ad3c45096e3AA4B4020e#code) (Implementation (Upgradable)), [0xA7b88A746FA457578D5abd6234471f07D895F46b](https://etherscan.io/address/0xA7b88A746FA457578D5abd6234471f07D895F46b#code) (Admin)

**Past upgrades** (Count of upgrades: 5, Last upgrade: 2mo ago, Avg upgrade interval: 7mo 23d)

- 2026-08-17 10:20 UTC, upgrade of [DlnDestination](https://etherscan.io/address/0xE7351Fd770A37282b91D153Ee690B63579D6dd7f#code): transaction [0x30e7e8dac55cb6f8ac7b7cc81c9132f01acb5fbb87ed1f44b568183518670fbb](https://etherscan.io/tx/0x30e7e8dac55cb6f8ac7b7cc81c9132f01acb5fbb87ed1f44b568183518670fbb), implementations: [0xD9b4f9CacFFB59F2B982ad3c45096e3AA4B4020e](https://etherscan.io/address/0xD9b4f9CacFFB59F2B982ad3c45096e3AA4B4020e#code) ([diff](https://disco.l2beat.com/diff/eth:0xE540eb6BfEE129d28d47E26Ad33a138d66FD78f5/eth:0xD9b4f9CacFFB59F2B982ad3c45096e3AA4B4020e))
- 2026-02-13 12:08 UTC, upgrade of [DlnDestination](https://etherscan.io/address/0xE7351Fd770A37282b91D153Ee690B63579D6dd7f#code): transaction [0xf187915dcb7b435138135f96d4a9bf6f606255d5247b00f0282afd2516bc02d2](https://etherscan.io/tx/0xf187915dcb7b435138135f96d4a9bf6f606255d5247b00f0282afd2516bc02d2), implementations: [0xE540eb6BfEE129d28d47E26Ad33a138d66FD78f5](https://etherscan.io/address/0xE540eb6BfEE129d28d47E26Ad33a138d66FD78f5#code) ([diff](https://disco.l2beat.com/diff/eth:0x33B72F60F2CEB7BDb64873Ac10015a35bed81717/eth:0xE540eb6BfEE129d28d47E26Ad33a138d66FD78f5))
- 2023-09-08 16:34 UTC, upgrade of [DlnDestination](https://etherscan.io/address/0xE7351Fd770A37282b91D153Ee690B63579D6dd7f#code): transaction [0xce0ae6434e2eca80d8a4efbfbe15f1fa7f9c8b32f4452fda42dcd9e34b9fef16](https://etherscan.io/tx/0xce0ae6434e2eca80d8a4efbfbe15f1fa7f9c8b32f4452fda42dcd9e34b9fef16), implementations: [0x33B72F60F2CEB7BDb64873Ac10015a35bed81717](https://etherscan.io/address/0x33B72F60F2CEB7BDb64873Ac10015a35bed81717#code) ([diff](https://disco.l2beat.com/diff/eth:0x979791C607a388702690599120c46332f61f592C/eth:0x33B72F60F2CEB7BDb64873Ac10015a35bed81717))
- 2023-08-24 08:29 UTC, upgrade of [DlnDestination](https://etherscan.io/address/0xE7351Fd770A37282b91D153Ee690B63579D6dd7f#code): transaction [0xeada1e2b8eb5ca1dca54b7cd4e41c87dee29b6c9841fd05edd39f126edd8e539](https://etherscan.io/tx/0xeada1e2b8eb5ca1dca54b7cd4e41c87dee29b6c9841fd05edd39f126edd8e539), implementations: [0x979791C607a388702690599120c46332f61f592C](https://etherscan.io/address/0x979791C607a388702690599120c46332f61f592C#code) ([diff](https://disco.l2beat.com/diff/eth:0x177c8AeDc61EFc47DE70616C89464c5d2A56E4AB/eth:0x979791C607a388702690599120c46332f61f592C))
- 2023-08-21 11:10 UTC, upgrade of [DlnDestination](https://etherscan.io/address/0xE7351Fd770A37282b91D153Ee690B63579D6dd7f#code): transaction [0xb7d8cfb77cd7ee0be426477583ed4597fe238e699cd690bdaf882371b9f98f0e](https://etherscan.io/tx/0xb7d8cfb77cd7ee0be426477583ed4597fe238e699cd690bdaf882371b9f98f0e), implementations: [0x177c8AeDc61EFc47DE70616C89464c5d2A56E4AB](https://etherscan.io/address/0x177c8AeDc61EFc47DE70616C89464c5d2A56E4AB#code) ([diff](https://disco.l2beat.com/diff/eth:0x60E50145db18e09fF2bB277e88D3C264FF57b91f/eth:0x177c8AeDc61EFc47DE70616C89464c5d2A56E4AB))
- 2022-12-12 14:25 UTC, deployment of [DlnDestination](https://etherscan.io/address/0xE7351Fd770A37282b91D153Ee690B63579D6dd7f#code): transaction [0xd606c6f939028171d2b15a50ac3af8f87d21a5623730d4ed45e5771980819393](https://etherscan.io/tx/0xd606c6f939028171d2b15a50ac3af8f87d21a5623730d4ed45e5771980819393), implementations: [0x60E50145db18e09fF2bB277e88D3C264FF57b91f](https://etherscan.io/address/0x60E50145db18e09fF2bB277e88D3C264FF57b91f#code)

Destination side of the deBridge Liquidity Network (DLN) intent protocol: takers fulfill orders here permissionlessly by paying the 'take' amount, which is forwarded to the order recipient in the same transaction (this contract holds no user funds). The taker then sends an unlock message back to the source chain's DlnSource through the deBridge messaging protocol to claim the escrowed maker funds.
- Roles:
  - **admin**: ProxyAdmin; ultimately Admin Multisig
  - **defaultAdmin**: Admin Multisig
  - **govCancel**: EOA 1

Can be upgraded by: Admin Multisig with no delay

#### DlnSource

Addresses: [0xeF4fB24aD0916217251F553c0596F8Edc630EB66](https://etherscan.io/address/0xeF4fB24aD0916217251F553c0596F8Edc630EB66#code), [0x2b426a0Ac391490e88d15B304436e7a84Df78611](https://etherscan.io/address/0x2b426a0Ac391490e88d15B304436e7a84Df78611#code) (Implementation (Upgradable)), [0xA7b88A746FA457578D5abd6234471f07D895F46b](https://etherscan.io/address/0xA7b88A746FA457578D5abd6234471f07D895F46b#code) (Admin)

**Past upgrades** (Count of upgrades: 5, Last upgrade: 2mo ago, Avg upgrade interval: 7mo 23d)

- 2026-08-17 10:20 UTC, upgrade of [DlnSource](https://etherscan.io/address/0xeF4fB24aD0916217251F553c0596F8Edc630EB66#code): transaction [0x30e7e8dac55cb6f8ac7b7cc81c9132f01acb5fbb87ed1f44b568183518670fbb](https://etherscan.io/tx/0x30e7e8dac55cb6f8ac7b7cc81c9132f01acb5fbb87ed1f44b568183518670fbb), implementations: [0x2b426a0Ac391490e88d15B304436e7a84Df78611](https://etherscan.io/address/0x2b426a0Ac391490e88d15B304436e7a84Df78611#code) ([diff](https://disco.l2beat.com/diff/eth:0x322B481088143d9Ff74e4169Fb7f12F7808690DF/eth:0x2b426a0Ac391490e88d15B304436e7a84Df78611))
- 2025-12-08 14:40 UTC, upgrade of [DlnSource](https://etherscan.io/address/0xeF4fB24aD0916217251F553c0596F8Edc630EB66#code): transaction [0x25b20353a5814918c4c569e1f9e8fede74138c9b7ab2043428a60f1c632d0ce6](https://etherscan.io/tx/0x25b20353a5814918c4c569e1f9e8fede74138c9b7ab2043428a60f1c632d0ce6), implementations: [0x322B481088143d9Ff74e4169Fb7f12F7808690DF](https://etherscan.io/address/0x322B481088143d9Ff74e4169Fb7f12F7808690DF#code) ([diff](https://disco.l2beat.com/diff/eth:0xe13a85137f8752AbE4c5A614Dc3BaF396b00308D/eth:0x322B481088143d9Ff74e4169Fb7f12F7808690DF))
- 2025-09-15 11:47 UTC, upgrade of [DlnSource](https://etherscan.io/address/0xeF4fB24aD0916217251F553c0596F8Edc630EB66#code): transaction [0xf1d50e3b14cf974394d925c71087896c185c14c9e79506744a9fd57d5f2aa738](https://etherscan.io/tx/0xf1d50e3b14cf974394d925c71087896c185c14c9e79506744a9fd57d5f2aa738), implementations: [0xe13a85137f8752AbE4c5A614Dc3BaF396b00308D](https://etherscan.io/address/0xe13a85137f8752AbE4c5A614Dc3BaF396b00308D#code) ([diff](https://disco.l2beat.com/diff/eth:0xbF20cB9614a0059bBe4b599d1D04358aFe31eDfb/eth:0xe13a85137f8752AbE4c5A614Dc3BaF396b00308D))
- 2025-07-16 10:55 UTC, upgrade of [DlnSource](https://etherscan.io/address/0xeF4fB24aD0916217251F553c0596F8Edc630EB66#code): transaction [0x2891ca2643f9cb857b006952744b633088f22b57a8a04495abec7b79a500f1e3](https://etherscan.io/tx/0x2891ca2643f9cb857b006952744b633088f22b57a8a04495abec7b79a500f1e3), implementations: [0xbF20cB9614a0059bBe4b599d1D04358aFe31eDfb](https://etherscan.io/address/0xbF20cB9614a0059bBe4b599d1D04358aFe31eDfb#code) ([diff](https://disco.l2beat.com/diff/eth:0x7Ec2E51A9c4f088354aD8Ad8703C12D81BF21677/eth:0xbF20cB9614a0059bBe4b599d1D04358aFe31eDfb))
- 2023-09-08 16:34 UTC, upgrade of [DlnSource](https://etherscan.io/address/0xeF4fB24aD0916217251F553c0596F8Edc630EB66#code): transaction [0xce0ae6434e2eca80d8a4efbfbe15f1fa7f9c8b32f4452fda42dcd9e34b9fef16](https://etherscan.io/tx/0xce0ae6434e2eca80d8a4efbfbe15f1fa7f9c8b32f4452fda42dcd9e34b9fef16), implementations: [0x7Ec2E51A9c4f088354aD8Ad8703C12D81BF21677](https://etherscan.io/address/0x7Ec2E51A9c4f088354aD8Ad8703C12D81BF21677#code) ([diff](https://disco.l2beat.com/diff/eth:0x95c99EA6D7e72e99F18049019a427A4a17C53A30/eth:0x7Ec2E51A9c4f088354aD8Ad8703C12D81BF21677))
- 2022-12-12 14:23 UTC, deployment of [DlnSource](https://etherscan.io/address/0xeF4fB24aD0916217251F553c0596F8Edc630EB66#code): transaction [0x45e08da232b5aea7adc3aaccd8ba54ced78667d11fc356eb46bce459a5289c85](https://etherscan.io/tx/0x45e08da232b5aea7adc3aaccd8ba54ced78667d11fc356eb46bce459a5289c85), implementations: [0x95c99EA6D7e72e99F18049019a427A4a17C53A30](https://etherscan.io/address/0x95c99EA6D7e72e99F18049019a427A4a17C53A30#code)

Source-side escrow of the deBridge Liquidity Network (DLN) intent protocol: users lock the 'give' funds of a cross-chain order directly in this contract. Funds are released to the taker (claimUnlock) or refunded to the maker (claimCancel) only on a message from the DlnDestination configured for the order's destination chain, authenticated via the CallProxy of the deBridge messaging protocol (i.e. ultimately by deBridge validator signatures).
- Roles:
  - **admin**: ProxyAdmin; ultimately Admin Multisig
  - **defaultAdmin**: Admin Multisig
  - **feeCollector**: EOA 3

Can be upgraded by: Admin Multisig with no delay

#### ProxyAdmin (0x368F…C4A3, 2 instances)

Addresses: [0x368Fa5E37EF1aCefF359Dc2E9DC7393C1CbCC4A3](https://etherscan.io/address/0x368Fa5E37EF1aCefF359Dc2E9DC7393C1CbCC4A3#code), [0xaBAc0E0AB68FC34441b36015bB952cD8f378283F](https://etherscan.io/address/0xaBAc0E0AB68FC34441b36015bB952cD8f378283F#code)

- Roles:
  - **owner**: EOA 16

#### IntentManagerValidator

Addresses: [0x4247c6f71407359E4C8D29787E98D752F264CD4b](https://etherscan.io/address/0x4247c6f71407359E4C8D29787E98D752F264CD4b#code)

Immutable allowlist contract referenced by DlnSource: addresses holding the INTENT_MANAGER_ROLE can create DLN orders with custom or zero protocol fees. It grants no access to existing funds.
- Roles:
  - **defaultAdmin**: EOA 17

#### ExternalCallAdapter

Addresses: [0x61eF2e01E603aEB5Cd96F9eC9AE76cc6A68f6cF9](https://etherscan.io/address/0x61eF2e01E603aEB5Cd96F9eC9AE76cc6A68f6cF9#code), [0xE143DbAEC892cEf2Af836dB49870A0Bcf9d5E6A1](https://etherscan.io/address/0xE143DbAEC892cEf2Af836dB49870A0Bcf9d5E6A1#code) (Implementation (Upgradable)), [0xA7b88A746FA457578D5abd6234471f07D895F46b](https://etherscan.io/address/0xA7b88A746FA457578D5abd6234471f07D895F46b#code) (Admin)

**Past upgrades** (Count of upgrades: 3, Last upgrade: 2mo ago, Avg upgrade interval: 9mo 13d)

- 2026-08-17 10:20 UTC, upgrade of [ExternalCallAdapter](https://etherscan.io/address/0x61eF2e01E603aEB5Cd96F9eC9AE76cc6A68f6cF9#code): transaction [0x30e7e8dac55cb6f8ac7b7cc81c9132f01acb5fbb87ed1f44b568183518670fbb](https://etherscan.io/tx/0x30e7e8dac55cb6f8ac7b7cc81c9132f01acb5fbb87ed1f44b568183518670fbb), implementations: [0xE143DbAEC892cEf2Af836dB49870A0Bcf9d5E6A1](https://etherscan.io/address/0xE143DbAEC892cEf2Af836dB49870A0Bcf9d5E6A1#code) ([diff](https://disco.l2beat.com/diff/eth:0x7EA200f06c17cB9f64A3c8973a76DD8359fd68FA/eth:0xE143DbAEC892cEf2Af836dB49870A0Bcf9d5E6A1))
- 2025-07-16 10:55 UTC, upgrade of [ExternalCallAdapter](https://etherscan.io/address/0x61eF2e01E603aEB5Cd96F9eC9AE76cc6A68f6cF9#code): transaction [0x2891ca2643f9cb857b006952744b633088f22b57a8a04495abec7b79a500f1e3](https://etherscan.io/tx/0x2891ca2643f9cb857b006952744b633088f22b57a8a04495abec7b79a500f1e3), implementations: [0x7EA200f06c17cB9f64A3c8973a76DD8359fd68FA](https://etherscan.io/address/0x7EA200f06c17cB9f64A3c8973a76DD8359fd68FA#code) ([diff](https://disco.l2beat.com/diff/eth:0xA85437470f38F004C2F4b0D75d282E47bF555a3a/eth:0x7EA200f06c17cB9f64A3c8973a76DD8359fd68FA))
- 2023-10-16 15:35 UTC, upgrade of [ExternalCallAdapter](https://etherscan.io/address/0x61eF2e01E603aEB5Cd96F9eC9AE76cc6A68f6cF9#code): transaction [0x609ef19a09385ad022a973b6dd98868a56d3354c0cff07eddefb4599327adf44](https://etherscan.io/tx/0x609ef19a09385ad022a973b6dd98868a56d3354c0cff07eddefb4599327adf44), implementations: [0xA85437470f38F004C2F4b0D75d282E47bF555a3a](https://etherscan.io/address/0xA85437470f38F004C2F4b0D75d282E47bF555a3a#code) ([diff](https://disco.l2beat.com/diff/eth:0x5706875cef89AB69E818D4921a47D0d2663D2728/eth:0xA85437470f38F004C2F4b0D75d282E47bF555a3a))
- 2023-09-07 09:39 UTC, deployment of [ExternalCallAdapter](https://etherscan.io/address/0x61eF2e01E603aEB5Cd96F9eC9AE76cc6A68f6cF9#code): transaction [0x39c864edd3630cf628c32b5d52f5a6f17348a27f6a906698bf0a4f4f6cfa0701](https://etherscan.io/tx/0x39c864edd3630cf628c32b5d52f5a6f17348a27f6a906698bf0a4f4f6cfa0701), implementations: [0x5706875cef89AB69E818D4921a47D0d2663D2728](https://etherscan.io/address/0x5706875cef89AB69E818D4921a47D0d2663D2728#code)

Escrow and dispatcher for external calls attached to DLN orders: it receives the taker's funds of orders that carry calldata and releases them when the calldata is executed by the registered executor, or refunds the order authority on cancellation.
- Roles:
  - **admin**: ProxyAdmin; ultimately Admin Multisig
  - **defaultAdmin**: Admin Multisig

Can be upgraded by: Admin Multisig with no delay

#### DeBridgeRouter

Addresses: [0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251](https://etherscan.io/address/0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251#code), [0xCe56012E880851baa234cD092aF516A0fcA9CFe3](https://etherscan.io/address/0xCe56012E880851baa234cD092aF516A0fcA9CFe3#code) (Implementation (Upgradable)), [0xC86ab72dc6da7eF91a96650f3BC23125cD997130](https://etherscan.io/address/0xC86ab72dc6da7eF91a96650f3BC23125cD997130#code) (Admin)

**Past upgrades** (Count of upgrades: 10, Last upgrade: 2mo ago, Avg upgrade interval: 5mo 2d)

- 2026-08-17 10:20 UTC, upgrade of [DeBridgeRouter](https://etherscan.io/address/0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251#code): transaction [0x30e7e8dac55cb6f8ac7b7cc81c9132f01acb5fbb87ed1f44b568183518670fbb](https://etherscan.io/tx/0x30e7e8dac55cb6f8ac7b7cc81c9132f01acb5fbb87ed1f44b568183518670fbb), implementations: [0xCe56012E880851baa234cD092aF516A0fcA9CFe3](https://etherscan.io/address/0xCe56012E880851baa234cD092aF516A0fcA9CFe3#code) ([diff](https://disco.l2beat.com/diff/eth:0x3c857eD51c8a2747EE8c6F30EdDA5ea0D487CC64/eth:0xCe56012E880851baa234cD092aF516A0fcA9CFe3))
- 2025-07-16 10:55 UTC, upgrade of [DeBridgeRouter](https://etherscan.io/address/0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251#code): transaction [0x2891ca2643f9cb857b006952744b633088f22b57a8a04495abec7b79a500f1e3](https://etherscan.io/tx/0x2891ca2643f9cb857b006952744b633088f22b57a8a04495abec7b79a500f1e3), implementations: [0x3c857eD51c8a2747EE8c6F30EdDA5ea0D487CC64](https://etherscan.io/address/0x3c857eD51c8a2747EE8c6F30EdDA5ea0D487CC64#code) ([diff](https://disco.l2beat.com/diff/eth:0x7C5CC78333960E787B53C4D292320aE64dc68CFA/eth:0x3c857eD51c8a2747EE8c6F30EdDA5ea0D487CC64))
- 2025-06-04 15:01 UTC, upgrade of [DeBridgeRouter](https://etherscan.io/address/0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251#code): transaction [0x0c4b7189c746fcafd0e3b3c22b124e2575da35777eef74c4ceeea42a954c81ef](https://etherscan.io/tx/0x0c4b7189c746fcafd0e3b3c22b124e2575da35777eef74c4ceeea42a954c81ef), implementations: [0x7C5CC78333960E787B53C4D292320aE64dc68CFA](https://etherscan.io/address/0x7C5CC78333960E787B53C4D292320aE64dc68CFA#code) ([diff](https://disco.l2beat.com/diff/eth:0xE67534A9F24cc000f467EAA17f920BF63b87a2Cd/eth:0x7C5CC78333960E787B53C4D292320aE64dc68CFA))
- 2023-10-16 15:35 UTC, upgrade of [DeBridgeRouter](https://etherscan.io/address/0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251#code): transaction [0x609ef19a09385ad022a973b6dd98868a56d3354c0cff07eddefb4599327adf44](https://etherscan.io/tx/0x609ef19a09385ad022a973b6dd98868a56d3354c0cff07eddefb4599327adf44), implementations: [0xE67534A9F24cc000f467EAA17f920BF63b87a2Cd](https://etherscan.io/address/0xE67534A9F24cc000f467EAA17f920BF63b87a2Cd#code) ([diff](https://disco.l2beat.com/diff/eth:0xd095A2B84E80532cEF267dEf3561DD66e5414946/eth:0xE67534A9F24cc000f467EAA17f920BF63b87a2Cd))
- 2022-12-15 19:38 UTC, upgrade of [DeBridgeRouter](https://etherscan.io/address/0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251#code): transaction [0xdd3506ddba7b564a441499bd3859c0e0fed34690a2747df7f44e7b069beb9207](https://etherscan.io/tx/0xdd3506ddba7b564a441499bd3859c0e0fed34690a2747df7f44e7b069beb9207), implementations: [0xd095A2B84E80532cEF267dEf3561DD66e5414946](https://etherscan.io/address/0xd095A2B84E80532cEF267dEf3561DD66e5414946#code) ([diff](https://disco.l2beat.com/diff/eth:0x777c22F63A83ee27D375865C65AfdaBaf96e213a/eth:0xd095A2B84E80532cEF267dEf3561DD66e5414946))
- 2022-08-28 19:10 UTC, upgrade of [DeBridgeRouter](https://etherscan.io/address/0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251#code): transaction [0x3c720600e3f74aec8bf944adc034025d5f074492d24e936160d87c1fcb123318](https://etherscan.io/tx/0x3c720600e3f74aec8bf944adc034025d5f074492d24e936160d87c1fcb123318), implementations: [0x777c22F63A83ee27D375865C65AfdaBaf96e213a](https://etherscan.io/address/0x777c22F63A83ee27D375865C65AfdaBaf96e213a#code) ([diff](https://disco.l2beat.com/diff/eth:0xbeb2b37D6f2DdB463e2154Bd34C5229386960ac0/eth:0x777c22F63A83ee27D375865C65AfdaBaf96e213a))
- 2022-06-29 23:16 UTC, upgrade of [DeBridgeRouter](https://etherscan.io/address/0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251#code): transaction [0x96d253b49e32869f11a0a4c836151f4918963ecd44d795235898e2a741276165](https://etherscan.io/tx/0x96d253b49e32869f11a0a4c836151f4918963ecd44d795235898e2a741276165), implementations: [0xbeb2b37D6f2DdB463e2154Bd34C5229386960ac0](https://etherscan.io/address/0xbeb2b37D6f2DdB463e2154Bd34C5229386960ac0#code) ([diff](https://disco.l2beat.com/diff/eth:0x8ACA115f66B9E1c5411757fe01a5E9E59bC5B612/eth:0xbeb2b37D6f2DdB463e2154Bd34C5229386960ac0))
- 2022-05-06 07:25 UTC, upgrade of [DeBridgeRouter](https://etherscan.io/address/0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251#code): transaction [0xb2e03a93ad55ce3d348d54b7754f92b958e881985c64d5085aa9211667c66db0](https://etherscan.io/tx/0xb2e03a93ad55ce3d348d54b7754f92b958e881985c64d5085aa9211667c66db0), implementations: [0x8ACA115f66B9E1c5411757fe01a5E9E59bC5B612](https://etherscan.io/address/0x8ACA115f66B9E1c5411757fe01a5E9E59bC5B612#code) ([diff](https://disco.l2beat.com/diff/eth:0x069820f4828dC7ADE62a549e007A018E4A7c9E41/eth:0x8ACA115f66B9E1c5411757fe01a5E9E59bC5B612))
- 2022-03-23 11:42 UTC, upgrade of [DeBridgeRouter](https://etherscan.io/address/0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251#code): transaction [0x66f5f83371866f46654a42040198c3a53221057eb8b141a4f1793c4ac0adff70](https://etherscan.io/tx/0x66f5f83371866f46654a42040198c3a53221057eb8b141a4f1793c4ac0adff70), implementations: [0x069820f4828dC7ADE62a549e007A018E4A7c9E41](https://etherscan.io/address/0x069820f4828dC7ADE62a549e007A018E4A7c9E41#code) ([diff](https://disco.l2beat.com/diff/eth:0x4084FDAA5088427496102a994b079C6018B0d55D/eth:0x069820f4828dC7ADE62a549e007A018E4A7c9E41))
- 2022-03-21 09:42 UTC, upgrade of [DeBridgeRouter](https://etherscan.io/address/0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251#code): transaction [0x14a6e854be2f9e8bee48b2c30d5f4a1b0affbf5d0619e6d435bb63c3d9967a25](https://etherscan.io/tx/0x14a6e854be2f9e8bee48b2c30d5f4a1b0affbf5d0619e6d435bb63c3d9967a25), implementations: [0x4084FDAA5088427496102a994b079C6018B0d55D](https://etherscan.io/address/0x4084FDAA5088427496102a994b079C6018B0d55D#code) ([diff](https://disco.l2beat.com/diff/eth:0xF7399C83B12edD1a21aAB250D30CCB4474902688/eth:0x4084FDAA5088427496102a994b079C6018B0d55D))
- 2022-03-15 23:17 UTC, deployment of [DeBridgeRouter](https://etherscan.io/address/0x663DC15D3C1aC63ff12E45Ab68FeA3F0a883C251#code): transaction [0x8f0d57e6b8090d7fb51e0eb4b05441f33abffa7229e72d86491826572c4ba923](https://etherscan.io/tx/0x8f0d57e6b8090d7fb51e0eb4b05441f33abffa7229e72d86491826572c4ba923), implementations: [0xF7399C83B12edD1a21aAB250D30CCB4474902688](https://etherscan.io/address/0xF7399C83B12edD1a21aAB250D30CCB4474902688#code)

Optional periphery router that can swap input tokens via whitelisted DEX routers and forward the proceeds into the DLN contracts (order creation, or order fulfillment on the hardcoded DlnDestination via fillCrossChain) in a single transaction. It does not custody funds across transactions and is not part of the DLN critical path.
- Roles:
  - **admin**: ProxyAdmin; ultimately Admin Multisig
  - **defaultAdmin**: Admin Multisig

Can be upgraded by: Admin Multisig with no delay

#### DeBridgeAllowanceHolder_v0_1_4

Addresses: [0x6A4C907A987635Fe0cD7C5003740599D4026C25A](https://etherscan.io/address/0x6A4C907A987635Fe0cD7C5003740599D4026C25A#code), [0x65425C1cE7D2e16D7C003B40E50E0B46401156f2](https://etherscan.io/address/0x65425C1cE7D2e16D7C003B40E50E0B46401156f2#code) (Implementation (Upgradable)), [0xA813476c73514012F5825Cbd408d05A19742714e](https://etherscan.io/address/0xA813476c73514012F5825Cbd408d05A19742714e#code) (Admin)

**Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A)

- 2025-10-21 09:31 UTC, deployment of [DeBridgeAllowanceHolder_v0_1_4](https://etherscan.io/address/0x6A4C907A987635Fe0cD7C5003740599D4026C25A#code): transaction [0xcb72ee531a643248b5f200798c1e9c5b32c626e74453ae2a8b14dfdbba0e3f6c](https://etherscan.io/tx/0xcb72ee531a643248b5f200798c1e9c5b32c626e74453ae2a8b14dfdbba0e3f6c), implementations: [0x65425C1cE7D2e16D7C003B40E50E0B46401156f2](https://etherscan.io/address/0x65425C1cE7D2e16D7C003B40E50E0B46401156f2#code)

Upgradeable approval holder for deBridge intents. Authorized spenders can transfer any approved token from any user to any recipient, through direct allowances or Permit2. Transfers carry no intent-level checks.
- Roles:
  - **admin**: ProxyAdmin; ultimately EOA 18
  - **allowedSpender**: DeBridgeIntentManager_v0_8_0
  - **defaultAdmin**: EOA 15

Can be upgraded by: EOA 18 with no delay

#### FeeTreasury

Addresses: [0x6D83EAEb957986FEA14Ff0E88AF23736598e22cc](https://etherscan.io/address/0x6D83EAEb957986FEA14Ff0E88AF23736598e22cc#code), [0x4F2f3d3949B37A944A10Bf3C5355d0c827BbaF68](https://etherscan.io/address/0x4F2f3d3949B37A944A10Bf3C5355d0c827BbaF68#code) (Implementation (Upgradable)), [0x368Fa5E37EF1aCefF359Dc2E9DC7393C1CbCC4A3](https://etherscan.io/address/0x368Fa5E37EF1aCefF359Dc2E9DC7393C1CbCC4A3#code) (Admin)

**Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A)

- 2025-12-08 08:39 UTC, deployment of [FeeTreasury](https://etherscan.io/address/0x6D83EAEb957986FEA14Ff0E88AF23736598e22cc#code): transaction [0x3c2b659c54b706e3a1ca5d39e32bac118205c416692541f56e496759101820fc](https://etherscan.io/tx/0x3c2b659c54b706e3a1ca5d39e32bac118205c416692541f56e496759101820fc), implementations: [0x4F2f3d3949B37A944A10Bf3C5355d0c827BbaF68](https://etherscan.io/address/0x4F2f3d3949B37A944A10Bf3C5355d0c827BbaF68#code)

Holds fees collected by deBridge intent contracts. Authorized collectors can withdraw native tokens and ERC20 tokens to any recipient.
- Roles:
  - **admin**: ProxyAdmin; ultimately EOA 16
  - **defaultAdmin**: EOA 16

Can be upgraded by: EOA 16 with no delay

#### ProxyAdmin (0xA7b8…F46b, 3 instances)

Addresses: [0xA7b88A746FA457578D5abd6234471f07D895F46b](https://etherscan.io/address/0xA7b88A746FA457578D5abd6234471f07D895F46b#code), [0xC86ab72dc6da7eF91a96650f3BC23125cD997130](https://etherscan.io/address/0xC86ab72dc6da7eF91a96650f3BC23125cD997130#code), [0xE4427af3555CD9303D728C491364FAdFDD7494Fe](https://etherscan.io/address/0xE4427af3555CD9303D728C491364FAdFDD7494Fe#code)

- Roles:
  - **owner**: Admin Multisig

#### ProxyAdmin (0xA813…714e, 2 instances)

Addresses: [0xA813476c73514012F5825Cbd408d05A19742714e](https://etherscan.io/address/0xA813476c73514012F5825Cbd408d05A19742714e#code), [0xb54CD1e74f232C6de444464C81f81D13E6978816](https://etherscan.io/address/0xb54CD1e74f232C6de444464C81f81D13E6978816#code)

- Roles:
  - **owner**: EOA 18

#### ExternalCallExecutor

Addresses: [0xAE0361b1C3454b297129e01046057F1D294c7974](https://etherscan.io/address/0xAE0361b1C3454b297129e01046057F1D294c7974#code)

The default executor in the ExternalCallAdapter: it executes external calldata attached to DLN orders.

#### SimpleFeeProxy

Addresses: [0xC2bAC0DB5B18B0c3225581Ba14BD0B448c623636](https://etherscan.io/address/0xC2bAC0DB5B18B0c3225581Ba14BD0B448c623636#code), [0xa1cc7E623423169e1C10e6e5CC8Ae6f1d11042DE](https://etherscan.io/address/0xa1cc7E623423169e1C10e6e5CC8Ae6f1d11042DE#code) (Implementation (Upgradable)), [0xE4427af3555CD9303D728C491364FAdFDD7494Fe](https://etherscan.io/address/0xE4427af3555CD9303D728C491364FAdFDD7494Fe#code) (Admin)

**Past upgrades** (Count of upgrades: 2, Last upgrade: 1y 3mo ago, Avg upgrade interval: 1y 7mo)

- 2025-07-16 10:55 UTC, upgrade of [SimpleFeeProxy](https://etherscan.io/address/0xC2bAC0DB5B18B0c3225581Ba14BD0B448c623636#code): transaction [0x2891ca2643f9cb857b006952744b633088f22b57a8a04495abec7b79a500f1e3](https://etherscan.io/tx/0x2891ca2643f9cb857b006952744b633088f22b57a8a04495abec7b79a500f1e3), implementations: [0xa1cc7E623423169e1C10e6e5CC8Ae6f1d11042DE](https://etherscan.io/address/0xa1cc7E623423169e1C10e6e5CC8Ae6f1d11042DE#code) ([diff](https://disco.l2beat.com/diff/eth:0x37a52ddb753c924f8C914de65ef00b5210Caa83C/eth:0xa1cc7E623423169e1C10e6e5CC8Ae6f1d11042DE))
- 2022-02-16 12:53 UTC, upgrade of [SimpleFeeProxy](https://etherscan.io/address/0xC2bAC0DB5B18B0c3225581Ba14BD0B448c623636#code): transaction [0x67612f4676f3c141f8360be940caf971519f9bf1265465f94a6c13ed1e64adca](https://etherscan.io/tx/0x67612f4676f3c141f8360be940caf971519f9bf1265465f94a6c13ed1e64adca), implementations: [0x37a52ddb753c924f8C914de65ef00b5210Caa83C](https://etherscan.io/address/0x37a52ddb753c924f8C914de65ef00b5210Caa83C#code) ([diff](https://disco.l2beat.com/diff/eth:0x27406EbF0b76923d93b4C6c6224bCaB7fFf11f87/eth:0x37a52ddb753c924f8C914de65ef00b5210Caa83C))
- 2021-11-23 07:17 UTC, deployment of [SimpleFeeProxy](https://etherscan.io/address/0xC2bAC0DB5B18B0c3225581Ba14BD0B448c623636#code): transaction [0xd83a1e2513ffd001193b5d56264f9a3acce5eb31ccd7f122256afa5505c3213d](https://etherscan.io/tx/0xd83a1e2513ffd001193b5d56264f9a3acce5eb31ccd7f122256afa5505c3213d), implementations: [0x27406EbF0b76923d93b4C6c6224bCaB7fFf11f87](https://etherscan.io/address/0x27406EbF0b76923d93b4C6c6224bCaB7fFf11f87#code)

The only contract allowed to withdraw protocol fees accrued in the DeBridgeGate. Fees are paid out directly to the caller of withdrawFees(), so the effective fee destination is whoever holds the FEE_COLLECTOR_ROLE.
- Roles:
  - **admin**: ProxyAdmin; ultimately Admin Multisig
  - **defaultAdmin**: Admin Multisig
  - **feeCollector**: EOA 3

Can be upgraded by: Admin Multisig with no delay

#### DeBridgeToken

Addresses: [0xCAceBE8c354b70Fa6E3107f3F6F699e4Fbb3A98B](https://etherscan.io/address/0xCAceBE8c354b70Fa6E3107f3F6F699e4Fbb3A98B#code)

Implementation contract for deBridge-wrapped tokens (deTokens). Minting and burning of deTokens is restricted to the MINTER_ROLE, which is held by the DeBridgeGate.

#### DeBridgeAllowanceHolder

Addresses: [0xddddddddd4B6472c5002F95610b194D1161223d0](https://etherscan.io/address/0xddddddddd4B6472c5002F95610b194D1161223d0#code)

Immutable allowance sink of the deBridge intent system: users approve this contract (directly or as Permit2 spender) so that the upgradeable executor contracts never hold approvals themselves. Its transfer functions carry no intent-level checks: any ALLOWED_SPENDER_ROLE holder can move any approved token from any approver to any recipient.
- Roles:
  - **allowedSpender**: DeBridgeIntentManager
  - **defaultAdmin**: EOA 16

The current deployment carries some associated risks:

- Funds can be stolen if a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL).