# Fuel Ignition

Markdown version of https://l2beat.com/layer2s/projects/fuel

## Summary

**Warning:** Why is the project listed in others? The proof system isn't fully functional. Consequence: projects without a proper proof system fully rely on single entities to safely update the state. A malicious proposer can finalize an invalid state, which can cause loss of funds. There is no data availability bridge. Consequence: projects without a data availability bridge fully rely on single entities (the sequencer) to honestly rely available data roots on Ethereum. A malicious sequencer can collude with the proposer to finalize an unavailable state, which can cause loss of funds. Learn more about the [recategorisation](https://medium.com/l2beat/framework-update-l2-projects-recategorisation-5d43b0d1fe50).

- Total Value Secured: $17.35 M (-0.68% compared to seven days ago; canonically bridged $17.35 M, natively minted $0.00, externally bridged $0.00; 0.00% with additional trust assumptions compared to the tokens involved and the Stage assigned to the project's canonical messaging bridge)
- TVS by asset: ETH & derivatives $5.07 M (29.2%), Stablecoins $9.45 M (54.4%), BTC & derivatives $49.59 K (0.28%), Other $2.78 M (16.0%)
- Associated tokens: FUEL: $2.23 M (12.8% of TVS)
- Past day UOPS: 59.69 (-17.4% compared to seven days ago)
- Gas token: ETH
- Type: Other
- Purpose: Universal
- Host chain: Ethereum

### Risks

- Sequencer failure: Self sequence (sentiment: good)
- State validation: None (1d challenge period; sentiment: bad)
- Data availability: External (sentiment: bad)
- Exit window: None (sentiment: bad)
- Proposer failure: Cannot withdraw (sentiment: bad)

### About

Fuel Ignition is a high-performance Ethereum L2 built on FuelVM and the Sway language.

### Links

- Website: https://fuel.network/
- Bridge: https://app.fuel.network/ecosystem, https://app.fuel.network/bridge
- Docs: https://docs.fuel.network/
- Explorer: https://app.fuel.network/
- Repository: https://github.com/FuelLabs/
- Social: https://twitter.com/fuel_network, https://discord.gg/fuel-network, https://forum.fuel.network/, https://t.me/fuelcommunity, https://youtube.com/channel/UCam2Sj3SvFSAIfDbP-4jWZQ
- Contracts explorer (Disco): https://disco.l2beat.com/ui/p/fuel

### Badges

- FuelVM: This project uses the Fuel Virtual Machine to run its smart contracts and supports the Sway programming language
- EigenDA: This project is posting its data to EigenDA

## Value Secured

The interactive TVS charts are shown on [the HTML page](https://l2beat.com/layer2s/projects/fuel#tvs).

Token by token: [TVS breakdown](https://l2beat.com/layer2s/projects/fuel/tvs-breakdown).

- [TVS chart (JSON)](https://l2beat.com/api/scaling/tvs/fuel)
- [TVS breakdown by token (JSON)](https://l2beat.com/api/scaling/tvs/fuel/breakdown)

## Activity

The interactive activity chart is shown on [the HTML page](https://l2beat.com/layer2s/projects/fuel#activity).

- [Activity chart (JSON)](https://l2beat.com/api/scaling/activity/fuel)

## Onchain costs

The section shows the operating costs that L2s pay to Ethereum.

The interactive costs chart is shown on [the HTML page](https://l2beat.com/layer2s/projects/fuel#onchain-costs).

### Tracked transactions

#### Batch submissions

- transfer: 2024-10-07 17:47 UTC - 2025-07-03 07:36 UTC; historical; from: [0xEA0337EFC12e98AB118948dA570C07691E8E4b37](https://etherscan.io/address/0xEA0337EFC12e98AB118948dA570C07691E8E4b37); to: [0xEA0337EFC12e98AB118948dA570C07691E8E4b37](https://etherscan.io/address/0xEA0337EFC12e98AB118948dA570C07691E8E4b37)

#### State updates

- functionCall: 2024-08-30 23:38 UTC - now; currently used; address: [0xf3D20Db1D16A4D0ad2f280A5e594FF3c7790f130](https://etherscan.io/address/0xf3D20Db1D16A4D0ad2f280A5e594FF3c7790f130); selector: 0xe900ead8; signature: `function commit(bytes32 blockHash, uint256 commitHeight)`

## Data posted

This section shows how much data the project publishes to its data-availability (DA) layer over time. The project currently posts data to [EigenDA](https://l2beat.com/data-availability/projects/eigenda/no-bridge); previously it posted to [Ethereum](https://l2beat.com/data-availability/projects/ethereum/ethereum).

Data source: API provided by EigenLayer

The interactive data posted chart is shown on [the HTML page](https://l2beat.com/layer2s/projects/fuel#data-posted).

### Tracked transactions

#### Blob submissions

- DA layer Ethereum: from block 20915271 to 22837254; historical; inbox: [0xEA0337EFC12e98AB118948dA570C07691E8E4b37](https://etherscan.io/address/0xEA0337EFC12e98AB118948dA570C07691E8E4b37); sequencers: [0xEA0337EFC12e98AB118948dA570C07691E8E4b37](https://etherscan.io/address/0xEA0337EFC12e98AB118948dA570C07691E8E4b37)
- DA layer EigenDA: from 2025-07-03 07:00 UTC to now; currently used; customer ID: 0xea0337efc12e98ab118948da570c07691e8e4b37

## Milestones & Incidents

- 2026-07-10: [Fuel bridge unpaused](https://etherscan.io/tx/0x8943839708f408a0744ad346bbcf0e3f7557aa4c27170d15d2ca5568e886cbe1). Fuel unpauses the bridge after an eight-day pause.
- 2026-07-02 (incident): [Fuel bridge paused](https://etherscan.io/tx/0x95d4ff894e805f1c3348bf68022f60bf768ceaec9e58a3f18529da583df1b9f5). Fuel pauses the bridge, stopping deposits and withdrawal messages.
- 2025-07-03: [Switch to EigenDA](https://x.com/IAmNickDodson/status/1940736106187678037). Data publishing to Ethereum blobs is stopped and moved to EigenDA without a DA bridge instead.
- 2024-10-16: [Fuel Ignition Mainnet is Live](https://x.com/fuel_network/status/1846536888003313786). Fuel Ignition announces its official launch.

## Risk summary

### Funds can be stolen if

1. a contract receives a malicious code upgrade. There is no delay on upgrades (CRITICAL),
2. an invalid state root is submitted to the system by the proposer (CRITICAL).

### Funds can be lost if

3. the data is not available on the external provider (CRITICAL).

### Funds can be frozen if

4. pausers blacklist L2->L1 messages (CRITICAL),
5. the limit of tokens that can be withdrawn is set too low.

### MEV can be extracted if

6. the operator exploits their centralized position and frontruns user transactions.

## Risk analysis

### Sequencer failure

Self sequence (sentiment: good)

In the event of a sequencer failure, users can force transactions to be included in the project's chain by sending them to L1.

### State validation

None (1d challenge period; sentiment: bad)

Currently the system permits invalid state roots. More details in project overview.

### Data availability

External (sentiment: bad)

Proof construction and state derivation fully rely on data that is posted on EigenDA. The sequencer is publishing data to EigenDA v2. Sequencer transaction data roots are not checked against the DACert Verifier onchain.

### Exit window

None (sentiment: bad)

There is no window for users to exit in case of an unwanted upgrade since contracts are instantly upgradable.

### Proposer failure

Cannot withdraw (sentiment: bad)

Only the whitelisted proposers can publish state roots on L1, so in the event of failure the withdrawals are frozen.

## Data availability

### Data is posted to EigenDA

No transactions roots are posted onchain and the full data is posted on EigenDA. Since the ServiceManager bridge is not used, availability of the data is not verified against EigenDA operators, meaning that data is not guaranteed to be available.

**Risks**

- Funds can be lost if the data is not available on the external provider (CRITICAL).

**References**

- [EigenDA Docs - Overview](https://docs.eigenda.xyz/overview)

Learn more about the DA layer here: [EigenDA](https://l2beat.com/data-availability/projects/eigenda/no-bridge)

## State validation

### No state validation

Ultimately, Fuel will use one round fraud proofs with single round performed via a RISC-V-based zkVM. Currently, there is a 1d challenge period.

**Risks**

- Funds can be stolen if an invalid state root is submitted to the system by the proposer (CRITICAL).

**References**

- [FuelChainState.sol - Etherscan source code, commit function](https://etherscan.io/address/0xf3D20Db1D16A4D0ad2f280A5e594FF3c7790f130#code)
- [Fuel docs - Hybrid proving](https://docs.fuel.network/docs/fuel-book/the-architecture/fuel-and-ethereum/#hybrid-proving)

## Upgrades & Governance

### Past upgrades

The metrics include upgrades on the currently used proxy contracts. Historical proxy contracts and changes of such are not included.

- Count of upgrades: 5
- Last upgrade: 1y 1mo ago
- Avg upgrade interval: 9mo 18d

- 2025-08-27 14:14 UTC, upgrade of [FuelChainState](https://etherscan.io/address/0xf3D20Db1D16A4D0ad2f280A5e594FF3c7790f130#code): transaction [0x313c212ccfc5e1413acd0c8fa345c6f96631fbb7c026c67f8fc22471a971f09c](https://etherscan.io/tx/0x313c212ccfc5e1413acd0c8fa345c6f96631fbb7c026c67f8fc22471a971f09c), implementations: [0x621850dbB9160b54002B4a25b9fC9b2F26315f7e](https://etherscan.io/address/0x621850dbB9160b54002B4a25b9fC9b2F26315f7e#code) ([diff](https://disco.l2beat.com/diff/eth:0x725B2b1a15D818E1f25c68be77816802e6036559/eth:0x621850dbB9160b54002B4a25b9fC9b2F26315f7e))
- 2024-11-21 15:58 UTC, upgrade of [FuelMessagePortal](https://etherscan.io/address/0xAEB0c00D0125A8a788956ade4f4F12Ead9f65DDf#code): transaction [0x13b86e46d736db66212cf6a47b0328b72dbd2b769c8f55a00eb1dbaa3427d94b](https://etherscan.io/tx/0x13b86e46d736db66212cf6a47b0328b72dbd2b769c8f55a00eb1dbaa3427d94b), implementations: [0x2C4df10a82CF077122eD99573acA6daCd76F2E67](https://etherscan.io/address/0x2C4df10a82CF077122eD99573acA6daCd76F2E67#code) ([diff](https://disco.l2beat.com/diff/eth:0x05f886DDeE0FE07496f6e38b0e140F8eF4655B16/eth:0x2C4df10a82CF077122eD99573acA6daCd76F2E67))
- 2024-10-02 14:54 UTC, upgrade of [FuelMessagePortal](https://etherscan.io/address/0xAEB0c00D0125A8a788956ade4f4F12Ead9f65DDf#code): transaction [0x03ab218eccdc5ead9a29b416f9279a9c70f24a34191a949d3448856e0b570a79](https://etherscan.io/tx/0x03ab218eccdc5ead9a29b416f9279a9c70f24a34191a949d3448856e0b570a79), implementations: [0x05f886DDeE0FE07496f6e38b0e140F8eF4655B16](https://etherscan.io/address/0x05f886DDeE0FE07496f6e38b0e140F8eF4655B16#code) ([diff](https://disco.l2beat.com/diff/eth:0x6d67857224F66d7A677f063B861B6BACafB10639/eth:0x05f886DDeE0FE07496f6e38b0e140F8eF4655B16))
- 2024-10-02 14:54 UTC, upgrade of [FuelERC20Gateway](https://etherscan.io/address/0xa4cA04d02bfdC3A2DF56B9b6994520E69dF43F67#code): transaction [0x03ab218eccdc5ead9a29b416f9279a9c70f24a34191a949d3448856e0b570a79](https://etherscan.io/tx/0x03ab218eccdc5ead9a29b416f9279a9c70f24a34191a949d3448856e0b570a79), implementations: [0xdE2D792ca3C4d02DE3CE1cD1456d8D0990cC3fab](https://etherscan.io/address/0xdE2D792ca3C4d02DE3CE1cD1456d8D0990cC3fab#code) ([diff](https://disco.l2beat.com/diff/eth:0xB3109036813ff48E523Cef3818438e64ee04069d/eth:0xdE2D792ca3C4d02DE3CE1cD1456d8D0990cC3fab))
- 2024-09-04 15:44 UTC, deployment of [FuelERC20Gateway](https://etherscan.io/address/0xa4cA04d02bfdC3A2DF56B9b6994520E69dF43F67#code): transaction [0x57fd18a56dc2962a59b2404aedf837e4168c2487750d1f670563ec70066a62f8](https://etherscan.io/tx/0x57fd18a56dc2962a59b2404aedf837e4168c2487750d1f670563ec70066a62f8), implementations: [0xB3109036813ff48E523Cef3818438e64ee04069d](https://etherscan.io/address/0xB3109036813ff48E523Cef3818438e64ee04069d#code)
- 2024-08-27 16:02 UTC, upgrade of [FuelMessagePortal](https://etherscan.io/address/0xAEB0c00D0125A8a788956ade4f4F12Ead9f65DDf#code): transaction [0xe79d42f297676dabd168e8f151e59c4d9d6a25f364cb098eb01273d173a8dd19](https://etherscan.io/tx/0xe79d42f297676dabd168e8f151e59c4d9d6a25f364cb098eb01273d173a8dd19), implementations: [0x6d67857224F66d7A677f063B861B6BACafB10639](https://etherscan.io/address/0x6d67857224F66d7A677f063B861B6BACafB10639#code) ([diff](https://disco.l2beat.com/diff/eth:0x5A725F508659F9846E5877E8625F9ea32B57d577/eth:0x6d67857224F66d7A677f063B861B6BACafB10639))
- 2024-08-27 14:11 UTC, deployment of [FuelMessagePortal](https://etherscan.io/address/0xAEB0c00D0125A8a788956ade4f4F12Ead9f65DDf#code): transaction [0xa06594153f87c4313fe3c5dd702cb063072dd438bac45b89b439ed7447b6ea9f](https://etherscan.io/tx/0xa06594153f87c4313fe3c5dd702cb063072dd438bac45b89b439ed7447b6ea9f), implementations: [0x5A725F508659F9846E5877E8625F9ea32B57d577](https://etherscan.io/address/0x5A725F508659F9846E5877E8625F9ea32B57d577#code)
- 2024-08-27 14:10 UTC, deployment of [FuelChainState](https://etherscan.io/address/0xf3D20Db1D16A4D0ad2f280A5e594FF3c7790f130#code): transaction [0x01e63713a7ddee90866f272b7afb1d49aea17ed314edc7a80d00af36fd9b640a](https://etherscan.io/tx/0x01e63713a7ddee90866f272b7afb1d49aea17ed314edc7a80d00af36fd9b640a), implementations: [0x725B2b1a15D818E1f25c68be77816802e6036559](https://etherscan.io/address/0x725B2b1a15D818E1f25c68be77816802e6036559#code)

## Updates

Each date links the update on the HTML page, which also shows its contract diffs.

### [2026-07-15 13:59 UTC](https://l2beat.com/layer2s/projects/fuel?update=d6f27469) (1 change)

FuelMessagePortal is no longer paused.

### [2026-07-06 11:02 UTC](https://l2beat.com/layer2s/projects/fuel?update=32789f3e) (8 changes)

Paused the bridge: no deposits and withdrawals messages could be processed now. I haven't found any public communication about it.

Also reduced sc from 7 out of 10 to 4 out of 6 by removing 4 members.

### [2026-03-12 12:43 UTC](https://l2beat.com/layer2s/projects/fuel?update=b9e78ae6) (2 changes)

FuelChainState contract unpaused (bridge maintenance complete). New COMMITTER_ROLE member added (0x32da601374b38154f05904B16F44A1911Aa6f314), which is the Fuel Security Council multisig.

### [2026-01-09 15:10 UTC](https://l2beat.com/layer2s/projects/fuel?update=c4957627) (3 changes)

Security Council member removed (0x81ACA96D4Ae0932d2F3463a043392efcCB1F05b6), threshold reduced from 8/11 (73%) to 7/10 (70%).

### [2025-10-21 13:02 UTC](https://l2beat.com/layer2s/projects/fuel?update=b625c846) (3 changes)

Multisig member removed and threshold decreased.

### [2025-08-29 07:21 UTC](https://l2beat.com/layer2s/projects/fuel?update=f0c161c4) (high severity, 8 changes)

Updated challenge period from 7d to 1d.

### [2025-08-18 09:09 UTC](https://l2beat.com/layer2s/projects/fuel?update=e8197b50) (3 changes)

Removed one SC member.

### [2025-07-14 12:45 UTC](https://l2beat.com/layer2s/projects/fuel?update=42382e0b) (5 changes)

Discovery rerun on the same block number with only config-related changes.

### [2024-12-10 10:38 UTC](https://l2beat.com/layer2s/projects/fuel?update=ecb23972) (1 change)

Discovery rerun on the same block number with only config-related changes.

### [2024-11-22 08:40 UTC](https://l2beat.com/layer2s/projects/fuel?update=1b72b713) (high severity, 4 changes)

Upgrade FuelMessagePortal to the same contract code but with a higher (max) global deposit limit. (immutable)

### [2024-10-28 12:47 UTC](https://l2beat.com/layer2s/projects/fuel?update=d8624d9e) (1 change)

Withdrawal limit for the ETH escrow raised to 7829 ETH or USD ~20M. Current contract TVL is USD 39M.

### [2024-10-22 04:26 UTC](https://l2beat.com/layer2s/projects/fuel?update=a528cac5) (2 changes)

"Security Council" threshold update. Members not public yet.

### [2024-10-17 11:20 UTC](https://l2beat.com/layer2s/projects/fuel?update=c6d5b01d) (4 changes)

Initial discovery.

## Operator

### The system has a centralized sequencer

While forcing transaction is open to anyone the system employs a privileged sequencer that has priority for submitting transaction batches and ordering transactions.

**Risks**

- MEV can be extracted if the operator exploits their centralized position and frontruns user transactions.

### Users can force any transaction

Because the state of the system is based on transactions submitted on the underlying host chain and anyone can submit their transactions there it allows the users to circumvent censorship by interacting with the smart contract on the host chain directly.

**References**

- [FuelMessagePortalV3.sol - Etherscan source code, sendMessage function](https://etherscan.io/address/0xAEB0c00D0125A8a788956ade4f4F12Ead9f65DDf#code)
- [Fuel docs - L1->L2 messaging](https://docs.fuel.network/docs/fuel-book/the-architecture/fuel-and-ethereum/#l1--l2-messaging)

## Withdrawals

### Regular messaging

The user initiates L2->L1 messages by submitting a regular transaction on this chain. When the block containing that transaction is settled, the message becomes available for processing on L1. The process of block finalization usually takes several days to complete.

### Forced messaging

If the user experiences censorship from the operator with regular L2->L1 messaging they can submit their messages directly on L1. The system is then obliged to service this request or halt all messages, including forced withdrawals from L1 and regular messages initiated on L2. Once the force operation is submitted and if the request is serviced, the operation follows the flow of a regular message.

## Other considerations

### Fuel operates via the FuelVM and the Sway language

The FuelVM makes use of the UTXO model and a register-based design to enable parallel transaction processing. The language used is Sway and it does not support Solidity contracts.

**References**

- [Fuel docs - FuelVM](https://docs.fuel.network/docs/fuel-book/the-architecture/the-fuelvm/#the-fuelvm)

## Permissions

Explore these contracts and permissions in Disco, L2BEAT's contract explorer: https://disco.l2beat.com/ui/p/fuel

### Ethereum

#### Actors

##### 9 actors

Addresses: [0xE7DCFE1B21D4b9899A80Dc67847e03830a88585e](https://etherscan.io/address/0xE7DCFE1B21D4b9899A80Dc67847e03830a88585e), [0x32da601374b38154f05904B16F44A1911Aa6f314](https://etherscan.io/address/0x32da601374b38154f05904B16F44A1911Aa6f314), [0x958470a2ADe72b7a01A2e160F3286767b9623Ad7](https://etherscan.io/address/0x958470a2ADe72b7a01A2e160F3286767b9623Ad7), [0x81ACA96D4Ae0932d2F3463a043392efcCB1F05b6](https://etherscan.io/address/0x81ACA96D4Ae0932d2F3463a043392efcCB1F05b6), [0x796C3f536C6bf5CB7661C9A0570da0e1ECD303Dd](https://etherscan.io/address/0x796C3f536C6bf5CB7661C9A0570da0e1ECD303Dd), [0x9F7dfAb2222A473284205cdDF08a677726d786A0](https://etherscan.io/address/0x9F7dfAb2222A473284205cdDF08a677726d786A0), [0xC8Bd2Ead61e54C53C5A1836352c29F10383FBad2](https://etherscan.io/address/0xC8Bd2Ead61e54C53C5A1836352c29F10383FBad2), [0x45aa9fF818Ffaca57CA31b1C624b2a8CBF5B417e](https://etherscan.io/address/0x45aa9fF818Ffaca57CA31b1C624b2a8CBF5B417e), [0xf88b0247e611eE5af8Cf98f5303769Cba8e7177C](https://etherscan.io/address/0xf88b0247e611eE5af8Cf98f5303769Cba8e7177C)

Whitelisted addresses that can pause the ERC20Gateway.

##### 10 actors (0xE7DC…585e)

Addresses: [0xE7DCFE1B21D4b9899A80Dc67847e03830a88585e](https://etherscan.io/address/0xE7DCFE1B21D4b9899A80Dc67847e03830a88585e), [0xe7d56c84cEA9b58569fdfe8863085207F9a14881](https://etherscan.io/address/0xe7d56c84cEA9b58569fdfe8863085207F9a14881), [0x32da601374b38154f05904B16F44A1911Aa6f314](https://etherscan.io/address/0x32da601374b38154f05904B16F44A1911Aa6f314), [0x958470a2ADe72b7a01A2e160F3286767b9623Ad7](https://etherscan.io/address/0x958470a2ADe72b7a01A2e160F3286767b9623Ad7), [0x81ACA96D4Ae0932d2F3463a043392efcCB1F05b6](https://etherscan.io/address/0x81ACA96D4Ae0932d2F3463a043392efcCB1F05b6), [0x796C3f536C6bf5CB7661C9A0570da0e1ECD303Dd](https://etherscan.io/address/0x796C3f536C6bf5CB7661C9A0570da0e1ECD303Dd), [0x9F7dfAb2222A473284205cdDF08a677726d786A0](https://etherscan.io/address/0x9F7dfAb2222A473284205cdDF08a677726d786A0), [0xC8Bd2Ead61e54C53C5A1836352c29F10383FBad2](https://etherscan.io/address/0xC8Bd2Ead61e54C53C5A1836352c29F10383FBad2), [0x45aa9fF818Ffaca57CA31b1C624b2a8CBF5B417e](https://etherscan.io/address/0x45aa9fF818Ffaca57CA31b1C624b2a8CBF5B417e), [0xf88b0247e611eE5af8Cf98f5303769Cba8e7177C](https://etherscan.io/address/0xf88b0247e611eE5af8Cf98f5303769Cba8e7177C)

Whitelisted addresses that can pause the FuelMessagePortal and blacklist L2->L1 messages.

##### 10 actors (0xE7DC…585e)

Addresses: [0xE7DCFE1B21D4b9899A80Dc67847e03830a88585e](https://etherscan.io/address/0xE7DCFE1B21D4b9899A80Dc67847e03830a88585e), [0xe7d56c84cEA9b58569fdfe8863085207F9a14881](https://etherscan.io/address/0xe7d56c84cEA9b58569fdfe8863085207F9a14881), [0x32da601374b38154f05904B16F44A1911Aa6f314](https://etherscan.io/address/0x32da601374b38154f05904B16F44A1911Aa6f314), [0x958470a2ADe72b7a01A2e160F3286767b9623Ad7](https://etherscan.io/address/0x958470a2ADe72b7a01A2e160F3286767b9623Ad7), [0x81ACA96D4Ae0932d2F3463a043392efcCB1F05b6](https://etherscan.io/address/0x81ACA96D4Ae0932d2F3463a043392efcCB1F05b6), [0x796C3f536C6bf5CB7661C9A0570da0e1ECD303Dd](https://etherscan.io/address/0x796C3f536C6bf5CB7661C9A0570da0e1ECD303Dd), [0x9F7dfAb2222A473284205cdDF08a677726d786A0](https://etherscan.io/address/0x9F7dfAb2222A473284205cdDF08a677726d786A0), [0xC8Bd2Ead61e54C53C5A1836352c29F10383FBad2](https://etherscan.io/address/0xC8Bd2Ead61e54C53C5A1836352c29F10383FBad2), [0x45aa9fF818Ffaca57CA31b1C624b2a8CBF5B417e](https://etherscan.io/address/0x45aa9fF818Ffaca57CA31b1C624b2a8CBF5B417e), [0xf88b0247e611eE5af8Cf98f5303769Cba8e7177C](https://etherscan.io/address/0xf88b0247e611eE5af8Cf98f5303769Cba8e7177C)

Whitelisted addresses that can pause the FuelChainState.

##### 2 actors

Addresses: [0x83dC58504D1d2276Bc8D9Cf01d0B341D84A49cfF](https://etherscan.io/address/0x83dC58504D1d2276Bc8D9Cf01d0B341D84A49cfF), [0x32da601374b38154f05904B16F44A1911Aa6f314](https://etherscan.io/address/0x32da601374b38154f05904B16F44A1911Aa6f314)

Permissioned address that can propose new state roots.

##### Fuel Security Council

Addresses: [0x32da601374b38154f05904B16F44A1911Aa6f314](https://etherscan.io/address/0x32da601374b38154f05904B16F44A1911Aa6f314)

A Multisig with 4/6 threshold.
Can upgrade the FuelERC20Gateway, FuelMessagePortal and FuelChainState contracts, potentially gaining access to all funds. It can unpause contracts and remove L2->L1 messages from the blacklist. It can also limit the tokens that can be bridged to L2.

Participants (6): [0xAA52e167e8Ad426054DCF0fd5BD5481348F4FfC8](https://etherscan.io/address/0xAA52e167e8Ad426054DCF0fd5BD5481348F4FfC8), [0x515Fa9b26E195a043582377F51F9A9bAD2D10c7d](https://etherscan.io/address/0x515Fa9b26E195a043582377F51F9A9bAD2D10c7d), [0x958470a2ADe72b7a01A2e160F3286767b9623Ad7](https://etherscan.io/address/0x958470a2ADe72b7a01A2e160F3286767b9623Ad7), [0x9F7dfAb2222A473284205cdDF08a677726d786A0](https://etherscan.io/address/0x9F7dfAb2222A473284205cdDF08a677726d786A0), [0xC8Bd2Ead61e54C53C5A1836352c29F10383FBad2](https://etherscan.io/address/0xC8Bd2Ead61e54C53C5A1836352c29F10383FBad2), [0x796C3f536C6bf5CB7661C9A0570da0e1ECD303Dd](https://etherscan.io/address/0x796C3f536C6bf5CB7661C9A0570da0e1ECD303Dd)

**References**

- [Security Council members - Fuel Ignition docs](https://docs.fuel.network/docs/verified-addresses/security-council/#fuel-bridge-security-council)

## Smart contracts

![A diagram of the smart contract architecture](https://l2beat.com/static/images/architecture/fuel.71496ce1.png)

Explore these contracts and permissions in Disco, L2BEAT's contract explorer: https://disco.l2beat.com/ui/p/fuel

### Ethereum

#### FuelERC20Gateway

Addresses: [0xa4cA04d02bfdC3A2DF56B9b6994520E69dF43F67](https://etherscan.io/address/0xa4cA04d02bfdC3A2DF56B9b6994520E69dF43F67#code), [0xdE2D792ca3C4d02DE3CE1cD1456d8D0990cC3fab](https://etherscan.io/address/0xdE2D792ca3C4d02DE3CE1cD1456d8D0990cC3fab#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://etherscan.io/address/0x0000000000000000000000000000000000000000#code) (Admin)

**Past upgrades** (Count of upgrades: 1, Last upgrade: 2y ago, Avg upgrade interval: 1y)

- 2024-10-02 14:54 UTC, upgrade of [FuelERC20Gateway](https://etherscan.io/address/0xa4cA04d02bfdC3A2DF56B9b6994520E69dF43F67#code): transaction [0x03ab218eccdc5ead9a29b416f9279a9c70f24a34191a949d3448856e0b570a79](https://etherscan.io/tx/0x03ab218eccdc5ead9a29b416f9279a9c70f24a34191a949d3448856e0b570a79), implementations: [0xdE2D792ca3C4d02DE3CE1cD1456d8D0990cC3fab](https://etherscan.io/address/0xdE2D792ca3C4d02DE3CE1cD1456d8D0990cC3fab#code) ([diff](https://disco.l2beat.com/diff/eth:0xB3109036813ff48E523Cef3818438e64ee04069d/eth:0xdE2D792ca3C4d02DE3CE1cD1456d8D0990cC3fab))
- 2024-09-04 15:44 UTC, deployment of [FuelERC20Gateway](https://etherscan.io/address/0xa4cA04d02bfdC3A2DF56B9b6994520E69dF43F67#code): transaction [0x57fd18a56dc2962a59b2404aedf837e4168c2487750d1f670563ec70066a62f8](https://etherscan.io/tx/0x57fd18a56dc2962a59b2404aedf837e4168c2487750d1f670563ec70066a62f8), implementations: [0xB3109036813ff48E523Cef3818438e64ee04069d](https://etherscan.io/address/0xB3109036813ff48E523Cef3818438e64ee04069d#code)

Standard gateway to deposit and withdraw ERC20 tokens. It implements rate limits and a whitelist for tokens. The whitelist is currently active.

Can be upgraded by: Fuel Security Council with no delay

#### FuelMessagePortal

Addresses: [0xAEB0c00D0125A8a788956ade4f4F12Ead9f65DDf](https://etherscan.io/address/0xAEB0c00D0125A8a788956ade4f4F12Ead9f65DDf#code), [0x2C4df10a82CF077122eD99573acA6daCd76F2E67](https://etherscan.io/address/0x2C4df10a82CF077122eD99573acA6daCd76F2E67#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://etherscan.io/address/0x0000000000000000000000000000000000000000#code) (Admin)

**Past upgrades** (Count of upgrades: 3, Last upgrade: 1y 10mo ago, Avg upgrade interval: 6mo 12d)

- 2024-11-21 15:58 UTC, upgrade of [FuelMessagePortal](https://etherscan.io/address/0xAEB0c00D0125A8a788956ade4f4F12Ead9f65DDf#code): transaction [0x13b86e46d736db66212cf6a47b0328b72dbd2b769c8f55a00eb1dbaa3427d94b](https://etherscan.io/tx/0x13b86e46d736db66212cf6a47b0328b72dbd2b769c8f55a00eb1dbaa3427d94b), implementations: [0x2C4df10a82CF077122eD99573acA6daCd76F2E67](https://etherscan.io/address/0x2C4df10a82CF077122eD99573acA6daCd76F2E67#code) ([diff](https://disco.l2beat.com/diff/eth:0x05f886DDeE0FE07496f6e38b0e140F8eF4655B16/eth:0x2C4df10a82CF077122eD99573acA6daCd76F2E67))
- 2024-10-02 14:54 UTC, upgrade of [FuelMessagePortal](https://etherscan.io/address/0xAEB0c00D0125A8a788956ade4f4F12Ead9f65DDf#code): transaction [0x03ab218eccdc5ead9a29b416f9279a9c70f24a34191a949d3448856e0b570a79](https://etherscan.io/tx/0x03ab218eccdc5ead9a29b416f9279a9c70f24a34191a949d3448856e0b570a79), implementations: [0x05f886DDeE0FE07496f6e38b0e140F8eF4655B16](https://etherscan.io/address/0x05f886DDeE0FE07496f6e38b0e140F8eF4655B16#code) ([diff](https://disco.l2beat.com/diff/eth:0x6d67857224F66d7A677f063B861B6BACafB10639/eth:0x05f886DDeE0FE07496f6e38b0e140F8eF4655B16))
- 2024-08-27 16:02 UTC, upgrade of [FuelMessagePortal](https://etherscan.io/address/0xAEB0c00D0125A8a788956ade4f4F12Ead9f65DDf#code): transaction [0xe79d42f297676dabd168e8f151e59c4d9d6a25f364cb098eb01273d173a8dd19](https://etherscan.io/tx/0xe79d42f297676dabd168e8f151e59c4d9d6a25f364cb098eb01273d173a8dd19), implementations: [0x6d67857224F66d7A677f063B861B6BACafB10639](https://etherscan.io/address/0x6d67857224F66d7A677f063B861B6BACafB10639#code) ([diff](https://disco.l2beat.com/diff/eth:0x5A725F508659F9846E5877E8625F9ea32B57d577/eth:0x6d67857224F66d7A677f063B861B6BACafB10639))
- 2024-08-27 14:11 UTC, deployment of [FuelMessagePortal](https://etherscan.io/address/0xAEB0c00D0125A8a788956ade4f4F12Ead9f65DDf#code): transaction [0xa06594153f87c4313fe3c5dd702cb063072dd438bac45b89b439ed7447b6ea9f](https://etherscan.io/tx/0xa06594153f87c4313fe3c5dd702cb063072dd438bac45b89b439ed7447b6ea9f), implementations: [0x5A725F508659F9846E5877E8625F9ea32B57d577](https://etherscan.io/address/0x5A725F508659F9846E5877E8625F9ea32B57d577#code)

Contract that allows to send and receive arbitrary messages to and from L2. Pausers are allowed to blacklist L2->L1 messages.

Can be upgraded by: Fuel Security Council with no delay

#### FuelChainState

Addresses: [0xf3D20Db1D16A4D0ad2f280A5e594FF3c7790f130](https://etherscan.io/address/0xf3D20Db1D16A4D0ad2f280A5e594FF3c7790f130#code), [0x621850dbB9160b54002B4a25b9fC9b2F26315f7e](https://etherscan.io/address/0x621850dbB9160b54002B4a25b9fC9b2F26315f7e#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://etherscan.io/address/0x0000000000000000000000000000000000000000#code) (Admin)

**Past upgrades** (Count of upgrades: 1, Last upgrade: 1y 1mo ago, Avg upgrade interval: 1y)

- 2025-08-27 14:14 UTC, upgrade of [FuelChainState](https://etherscan.io/address/0xf3D20Db1D16A4D0ad2f280A5e594FF3c7790f130#code): transaction [0x313c212ccfc5e1413acd0c8fa345c6f96631fbb7c026c67f8fc22471a971f09c](https://etherscan.io/tx/0x313c212ccfc5e1413acd0c8fa345c6f96631fbb7c026c67f8fc22471a971f09c), implementations: [0x621850dbB9160b54002B4a25b9fC9b2F26315f7e](https://etherscan.io/address/0x621850dbB9160b54002B4a25b9fC9b2F26315f7e#code) ([diff](https://disco.l2beat.com/diff/eth:0x725B2b1a15D818E1f25c68be77816802e6036559/eth:0x621850dbB9160b54002B4a25b9fC9b2F26315f7e))
- 2024-08-27 14:10 UTC, deployment of [FuelChainState](https://etherscan.io/address/0xf3D20Db1D16A4D0ad2f280A5e594FF3c7790f130#code): transaction [0x01e63713a7ddee90866f272b7afb1d49aea17ed314edc7a80d00af36fd9b640a](https://etherscan.io/tx/0x01e63713a7ddee90866f272b7afb1d49aea17ed314edc7a80d00af36fd9b640a), implementations: [0x725B2b1a15D818E1f25c68be77816802e6036559](https://etherscan.io/address/0x725B2b1a15D818E1f25c68be77816802e6036559#code)

Contract that allows state root submissions and settlement.

Can be upgraded by: Fuel Security Council with no delay

The current deployment carries some associated risks:

- Funds can be stolen if a contract receives a malicious code upgrade. There is no delay on upgrades (CRITICAL).
- Funds can be frozen if pausers blacklist L2->L1 messages (CRITICAL).
- Funds can be frozen if the limit of tokens that can be withdrawn is set too low.