# Zama Confidential Tokens Markdown version of https://l2beat.com/privacy/projects/zama-confidential-tokens ## Summary - Total Value Locked: $130.12 M (+0.13% compared to seven days ago) - Assets tracked: 25 - Buckets tracked: 25 - Deposits 7D: 227 (-1.73% compared to the previous seven days) - Deposits 30D: 951 - Deposits Total: 15.01 K - Tracked on: Ethereum - Attributes: FHE, Private amounts, Any amount, DeFi ### Risks - Privacy: Amount privacy. Public observer: Amounts at risk (sentiment: warning); Chain analyst: Amounts at risk (sentiment: warning); Network observer: Amounts at risk (sentiment: warning); Privileged insider: Amounts exposed (sentiment: bad); Future adversary: Amounts exposed (sentiment: bad). - Trusted setup: No setup (sentiment: neutral). No setup: This project does not have a ZK system and thus no setup-related trust assumptions. - Exit window: None (sentiment: bad). Zama's governance multisigs can upgrade every contract instantly. This protocol fails the walkaway test: users cannot fully use it if every centralized participant disappears. Every unwrap needs a decryption signed by 7 of 13 KMS operators, and every input needs 3 of 5 coprocessors. - Reproducibility: Partially reproducible (sentiment: warning). The contracts, the SDK and the KMS and coprocessor sources are public. Zama's app source is unpublished. ### About Confidential amounts for ERC-20 tokens on Ethereum: wrappers that encrypt balances and transfer amounts with FHE, decrypted by a committee of KMS operators. ### Links - Website: https://www.zama.org - Docs: https://docs.zama.org/protocol - Repository: https://github.com/zama-ai - Contracts explorer (Disco): https://disco.l2beat.com/ui/p/zama-cw ## Protocol description Zama Confidential Tokens let users hold and send tokens on Ethereum with hidden balances and transfer amounts. A user wraps a token into its confidential version, such as USDC into cUSDC, swaps, lends, pays others with it and unwraps it back. Who pays whom and every wrap and unwrap amount stay public. Users trust the 13 operators of the key management service (KMS), who share the decryption key. They also trust 5 coprocessor operators, Zama for the relayer and app, and two governance multisigs. Any 5 KMS operators together can decrypt every amount, and the multisigs can upgrade every contract instantly. Unwraps need 7 KMS signatures, so funds leave only while the KMS and the coprocessors run. ![Zama Confidential Tokens architecture](https://l2beat.com/images/architecture/zama.png#center) ### Architecture The tokens follow [ERC-7984](https://eips.ethereum.org/EIPS/eip-7984) and use fully homomorphic encryption (FHE), which lets contracts compute on encrypted amounts. One FHE key pair protects every balance and amount. Wallets encrypt with its public key, and the coprocessors compute on the ciphertexts without decrypting them. The KMS operators hold the secret key in shares and decrypt on request. ### Flow 1. **Wrap.** You deposit a token into its confidential wrapper, such as USDC into cUSDC. Your address and the amount are public. 2. **Transfer.** Your wallet encrypts the amount, and the coprocessors update both balances without decrypting them. Sender and recipient are public. 3. **Unwrap.** The wrapper asks the KMS to decrypt the amount, and the tokens are paid out once enough operators sign it. The amount is public. ### App The ratings assume the closed source [Zama app](https://app.zama.org). Before every write it checks the address with Zama's screening service, which refuses fresh addresses. A client built on Zama's open SDK needs a Zama [API key](https://docs.zama.org/protocol/sdk/guides/relayer-api-keys) or a [self-run relayer](https://github.com/zama-ai/fhevm/blob/4bf50a083e65f0a53997292ca5848010faf98b79/relayer/docs/SELF_HOSTING.md). The vault deposit form shares the user's vault balance with Merkl for extra rewards, [on by default, opt-out available](https://www.zama.org/post/confidential-rewards-with-merkl-are-now-available-to-claim). ### Yield vaults Vault deposits are batched. You join the open batch with an encrypted amount. After about 24 hours the batch total is unwrapped publicly, deposited into the Morpho vault and the shares wrapped back. Each depositor claims an encrypted share. The app also joins other vaults' batches with encrypted zero amounts as decoys to hide which vault the user actually joined. ### Swaps A swap is a sealed-bid auction on ConfidentialSwap. It locks the user's tokens in the swap contract's escrow until it settles or is reclaimed. Approved market makers quote every order, including decoys. The winner is public, sees the real order and has to settle it within a time window. ### KMS The [KMS operators](https://docs.zama.org/protocol/protocol-apps/addresses/mainnet/ethereum#operator-staking) are Zama, Dfns, Figment, Fireblocks, InfStones, Unit410, LayerZero, Ledger, Omakase, Stake Capital, OpenZeppelin, Etherscan and Conduit. Each holds a share of the FHE secret key and a key that signs results for Ethereum. They decrypt an amount only for accounts that the ACL, an onchain access list, allows. [Zama states](https://docs.zama.org/protocol/protocol/overview/kms) that they run in AWS Nitro enclaves, but Ethereum checks only their signatures. Removing an operator onchain leaves its key share intact. ### Coprocessors [Artifact, Blockscape, Luganodes, P2P and Zama](https://github.com/zama-ai/protocol-registry/blob/944485d168957ae5857e675281eec0329c7fb9ff/mainnet.md#operator-staking) run the coprocessors, which compute on ciphertexts and check every encrypted input. Ethereum accepts an input signed by 3 of 5 of them, so they are trusted for validity. Zama stores all ciphertexts in a [public bucket](https://coprocessor-1.mainnet.zama.org/). The Zama Gateway, an L3 on Arbitrum, relays decryption requests and publishes who reads which balance and when. ### Compliance Each token's owner, controlled by the multisigs, can block users and check them against the underlying token's denylist, as cUSDC does with USDC's blacklist. It can also appoint a pauser that halts the token, and observers that decrypt all of its balances and amounts. Today no token has a pauser or an observer. ConfidentialSwap has its own compliance address, set at deployment. Issuers of underlying tokens like USDC can freeze a token's whole escrow. ### Fees Users pay Ethereum gas. The Gateway charges 1 ZAMA per encrypted input and 0.1 ZAMA per decryption, paid by the relayer. ## Privacy **What the protocol promises:** Hides balances and transfer amounts. Senders, recipients and every wrap and unwrap amount are public. Ethereum is public by default. Each protocol is rated on its main privacy promise, like hiding who paid, who received, how much, or which deposit became which withdrawal. Against each adversary, the colour says whether it holds for a careful user with the app's own settings: green yes, yellow only with significant extra work, red no. Fields marked at risk stay private only under the condition in their note. ### Public observer Amounts at risk (sentiment: warning) **Who:** Everyone with a block explorer and some basic tools. Sees every public onchain event, but does no correlation beyond following links. Examples: A curious counterparty, an employer, a journalist. Wraps, unwraps and vault batch totals publish their amounts, while confidential transfers keep theirs encrypted. Either party to a transfer can disclose its amount onchain at any time. A vault batch with a single depositor publishes that depositor's amount. **Advice:** Pay and get paid inside the confidential token, and unwrap only what the user needs. **Inside** - Sender: exposed - Recipient: exposed - Amount: private - Asset: exposed - Link: exposed **Sources** - [Wrap event carries the clear amount](https://github.com/OpenZeppelin/openzeppelin-confidential-contracts/blob/23ba15402346027f2416667acbb1e741179f8485/contracts/token/ERC7984/extensions/ERC7984ERC20Wrapper.sol#L256) - [Unwrap makes the burned amount publicly decryptable](https://github.com/OpenZeppelin/openzeppelin-confidential-contracts/blob/23ba15402346027f2416667acbb1e741179f8485/contracts/token/ERC7984/extensions/ERC7984ERC20Wrapper.sol#L262-L268) - [Either party can disclose a transfer amount](https://github.com/OpenZeppelin/openzeppelin-confidential-contracts/blob/23ba15402346027f2416667acbb1e741179f8485/contracts/token/ERC7984/ERC7984.sol#L202-L209) - [Batchers log every depositor and unwrap each batch total publicly](https://l2beat.com/privacy/projects/zama-confidential-tokens#SteakcUSDCDepositBatcher) ### Chain analyst Amounts at risk (sentiment: warning) **Who:** Scrapes all public data and correlates it: timing, amounts, gas and wallet fingerprints, address clusters. Examples: Chain analytics firms, ZachXBT, data brokers. An account's balance is bounded by its public wraps and unwraps, and exact if it never took part in a confidential transfer. Transfer partners and timing are public, so a wrap, a transfer and an unwrap in a row pair up by amount. Swap market makers decrypt the amounts of each order and its decoys, and the winner learns which one is real. **Advice:** Transfer often, even zero amounts, and unwrap only after a while. Withdraw common amounts rather than everything at once. **Inside, compared with a public observer** - Amount: at risk. Hidden only within an account's confidential transfers. **Sources** - [ERC-7984: public sender, recipient and encrypted amount per transfer](https://eips.ethereum.org/EIPS/eip-7984) - [Explorer linking unwraps to their wraps: 95% link to a single wrap (October 2026)](https://sekuba.github.io/zama-graph/) - [Market makers decrypt each order and its decoys through a shared delegation](https://l2beat.com/privacy/projects/zama-confidential-tokens#ConfidentialSwap) ### Network observer Amounts at risk (sentiment: warning) **Who:** Sits between the user and the services and sees traffic only: ISPs, VPNs, Tor exits, public RPCs and relayers. Learns IP addresses, timing, fingerprints and ciphertext. Services the operator runs count as the insider. Examples: Infura or Alchemy, a Tornado relayer, a wallet vendor selling telemetry, Google captcha or analytics in the dapp frontend. Zama's closed-source app sends no amount to third parties today, but our trace of closed code cannot cannot guarantee it. The app encrypts amounts on the device with Zama's open SDK and reads balances under a key only the device holds. The user's address and decryption requests go to Zama's own servers. Other services see no address or amount. **Advice:** Reject the analytics prompt, so Google Analytics and Sentry receive nothing. **Inside, compared with a public observer** - Amount: unverifiable **Sources** - [Inputs are encrypted on the device](https://github.com/zama-ai/sdk/blob/464764577777367e869c47ae53e6ba0de35e3f93/packages/sdk/src/worker/encrypt.worker.ts#L112-L128) - [Balance reads use a device ML-KEM key pair](https://github.com/zama-ai/sdk/blob/464764577777367e869c47ae53e6ba0de35e3f93/packages/sdk/src/credentials/keypair-vault.ts#L118-L133) ### Privileged insider Amounts exposed (sentiment: bad) **Who:** Holds an operator role, custodies funds, receives keys or plaintext by design, or delivers the client: upgrade admin, custodian, view key holder, enclave operator, association set provider, hosted prover, registry, frontend host. Examples: A compliance backdoor key, a DAO with an upgrade key, a KMS committee, an ASP operator, a custodial bridge. Any 5 of the 13 KMS operators can combine their key shares and decrypt every balance and transfer ever made. The token owner can instantly appoint an observer that sees all amounts. Zama's closed-source app can read amounts before encryption, and today sends every swap amount to Zama in cleartext. The swap's compliance address decrypts every swap, and the vault feature shares balances with Merkl by default. **Inside, compared with a public observer** - Amount: exposed **Sources** - [KMS parties and key-share threshold](https://github.com/zama-ai/kms/blob/b5cd5cf465dc488ff04ac8c19f3ef12877abffa0/ai-docs/ARCHITECTURE.md#L22-L25) - [Observer gets a wildcard delegation without expiration](https://github.com/zama-ai/protocol-apps/blob/85eef95c797da20875fe7eeae7f8d212d760486f/contracts/confidential-wrapper/contracts/ConfidentialWrapper.sol#L395-L403) - [The compliance address decrypts every intent, quote and settlement](https://l2beat.com/privacy/projects/zama-confidential-tokens#ConfidentialSwap) - [Sharing vault balances with Merkl is on by default](https://www.zama.org/post/confidential-rewards-with-merkl-are-now-available-to-claim) ### Future adversary Amounts exposed (sentiment: bad) **Who:** Harvest now, decrypt later. Holds every byte ever published and runs the known quantum attacks: elliptic curves, pairings and RSA fall. Hashes, symmetric ciphers and post-quantum schemes stand until an attack on them is known. Examples: An intelligence agency archiving chain data today, then anyone once a break is public. Whoever breaks elliptic-curve cryptography recovers a user's wallet key from any past transaction and can have the KMS decrypt that user's history. A wallet signature alone authorizes decryption of past balances and transfers, and the KMS encrypts its reply to any key the request names. The ciphertexts themselves rest on lattice assumptions with no known quantum attack. **Inside, compared with a public observer** - Amount: exposed **Sources** - [A wallet signature authorizes a user decryption request](https://l2beat.com/privacy/projects/zama-confidential-tokens#Decryption) - [Permissions on past ciphertexts have no expiry](https://l2beat.com/privacy/projects/zama-confidential-tokens#ACL) - [Replies are encrypted to the key the request names](https://github.com/zama-ai/kms/blob/b5cd5cf465dc488ff04ac8c19f3ef12877abffa0/core/service/src/cryptography/hybrid_ml_kem.rs) - [Coprocessor ciphertext store (public listing)](https://coprocessor-1.mainnet.zama.org/) ## Value Locked The interactive value chart is shown on [the HTML page](https://l2beat.com/privacy/projects/zama-confidential-tokens#privacy-tvl). ## Flows The interactive flows chart is shown on [the HTML page](https://l2beat.com/privacy/projects/zama-confidential-tokens#privacy-flows). ## Assets Breakdown | Asset | Deposits 7D | Deposits 30D | Deposits Total | Value Locked | | --- | --- | --- | --- | --- | | fcUSDT | 7 ($14.54 M) | 30 ($46.55 M) | 41 ($63.24 M) | $36.48 M | | roxcUSDC | 7 ($7.05 M) | 27 ($27.82 M) | 36 ($45.20 M) | $35.31 M | | steakcUSDC | 8 ($1.70 M) | 26 ($6.20 M) | 124 ($93.71 M) | $28.90 M | | ZAMA | 15 ($336.25 K) | 38 ($2.80 M) | 164 ($47.27 M) | $10.67 M | | bbqTGBP | 0 ($0.00) | 0 ($0.00) | 3 ($5.07 M) | $5.06 M | | USDT | 76 ($16.43 M) | 417 ($64.02 M) | 11.08 K ($211.95 M) | $5.03 M | | USDC | 85 ($13.37 M) | 307 ($42.77 M) | 3.25 K ($179.65 M) | $3.55 M | | steakUSDT | 4 ($87.08 K) | 22 ($11.05 M) | 28 ($11.12 M) | $3.31 M | | armcWBTC | 4 ($83.27 K) | 16 ($384.27 K) | 24 ($960.40 K) | $509.71 K | | PAPY | 0 ($0.00) | 0 ($0.00) | 3 ($348.69 K) | $348.59 K | | WBTC | 6 ($82.29 K) | 27 ($484.77 K) | 41 ($1.19 M) | $249.88 K | | pendleUSDC | 0 ($0.00) | 6 ($40.80 K) | 13 ($552.37 K) | $152.48 K | | roxUSDCy | 0 ($0.00) | 0 ($0.00) | 3 ($150.21 K) | $150.21 K | | tGBP | 1 ($5.83) | 1 ($5.83) | 12 ($5.19 M) | $105.74 K | | WETH | 4 ($12.15 K) | 18 ($16.67 K) | 122 ($265.16 K) | $52.59 K | | PENDLE | 2 ($236.76) | 2 ($236.76) | 6 ($53.69 K) | $45.97 K | | armUSDTs | 0 ($0.00) | 1 ($198.53) | 5 ($30.20 K) | $25.15 K | | AUSD | 4 ($233.12 K) | 5 ($429.85 K) | 11 ($975.49 K) | $15.16 K | | bbqUSDT | 0 ($0.00) | 0 ($0.00) | 4 ($10.45 K) | $10.44 K | | fAUSDe | 1 ($240.02) | 2 ($189.75 K) | 5 ($194.71 K) | $5.19 K | | bbqUSDC | 0 ($0.00) | 2 ($3.83 K) | 4 ($5.78 K) | $1.95 K | | armUSDCs | 0 ($0.00) | 1 ($9.79) | 5 ($222.79) | $222.76 | | XAUt | 3 ($152.19) | 3 ($152.19) | 15 ($70.02 K) | $81.87 | | armUSDTp | 0 ($0.00) | 0 ($0.00) | 2 ($118.47) | $68.45 | | armUSDCp | 0 ($0.00) | 0 ($0.00) | 1 ($44.31) | $44.31 | | Total | 227 ($53.95 M) | 951 ($202.79 M) | 15.01 K ($667.25 M) | $130.02 M | ## Milestones & Incidents - 2026-10-22: [Inputs need 3 of 5 coprocessors](https://etherscan.io/tx/0xa34128b9039f5050e18ff0e6131e7ae5e174dcc61da00679dc462494ae204660). Encrypted inputs need signatures from 3 of 5 coprocessors instead of one. - 2026-09-15: [Confidential vaults and swaps launch](https://www.zama.org/post/confidential-defi-at-scale). Confidential deposits expand to 16 Morpho vaults, and swaps between confidential tokens go live. - 2026-05-30 (incident): [Circle freezes the cUSDC escrow](https://www.zama.org/post/the-freeze-on-zamas-cusdc-contract-has-been-lifted-and-all-systems-are-back-to-normal). A court order makes Circle blacklist the cUSDC wrapper for almost three days, blocking every unwrap. - 2026-01-06 (incident): [ACL paused, every token halted](https://etherscan.io/tx/0x1fe5bf2c4c59b4c0034167e8eea979e3a8fa700d590c73ca7587712bb43359b2). A pauser halts the ACL, and with it every confidential token, for 84 minutes. - 2025-12-30: [Zama Protocol live on Ethereum](https://cryptoast.fr/?p=199633). Zama launches its mainnet with a first confidential stablecoin transfer, in cUSDT. ## Risk summary ### Funds can be stolen if 1. a governance multisig deploys a malicious [upgrade](https://l2beat.com/privacy/projects/zama-confidential-tokens#upgrades-and-governance), which takes effect instantly. 2. a KMS signer set, which either multisig can create instantly, attests an inflated unwrap amount. 3. 3 of 5 coprocessors accept invalid encrypted inputs that bypass balance checks. ### Funds can be lost if 1. the coprocessors lose ciphertext data, so balances can no longer be decrypted. ### Funds can be frozen if 1. an underlying token issuer blacklists a confidential token's address. 2. the token owner or an underlying denylist blocks a user before they unwrap. 3. an ACL, Gateway or token pauser halts tokens and the owner keeps them paused. 4. the KMS or the coprocessors stop, which halts every unwrap. ### Privacy can be lost if 1. 5 of 13 KMS operators combine their key shares (see privileged insider). 2. the token owner appoints an observer or upgrades the token (see privileged insider). 3. a user swaps, since Zama's app and the swap's compliance address see the amount (see privileged insider). 4. a user keeps the vault form's default of sharing their balance with Merkl (see privileged insider). 5. Zama changes its closed-source app to leak amounts to itself or to third parties (see privileged insider and network observer). 6. public wraps, unwraps and vault batch totals bound a user's balance (see public observer and chain analyst). 7. elliptic-curve cryptography is broken, which lets anyone impersonate a user to the KMS and decrypt that user's history (see future adversary). ## Upgrades & Governance ZamaGovMultisigA (9/17) and ZamaGovMultisigB (3/6) each control the protocol through ZamaGovCore, an Aragon governance contract that owns the core contracts. Either multisig can upgrade core contracts, change every compliance setting, manage KMS signer sets and trigger FHE key generation. ZamaDeFiGovCore, a second such contract and one member of ZamaGovMultisigA, acts through its own multisig (3/6). It can upgrade ConfidentialSwap instantly, appoint its market makers and pausers, and pause or retune the vault batchers. SafeL2 (3/5) owns the Gateway contracts and can change coprocessors and KMS settings there or disconnect Ethereum. Any of 17 pausers can pause the ACL, and any of 17 the Gateway. Either halts every token until its owner unpauses. ## Updates Each date links the update on the HTML page, which also shows its contract diffs. ### [2026-10-22 16:40 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=c10482a4) (high severity, 57 changes) Encrypted inputs now need 3 of 5 coprocessor signatures on Ethereum (was 1 of 1), and the Gateway priority coprocessor is off, so its 3-of-5 majority applies. Discovery now covers ConfidentialSwap, the vault batcher router and 36 vault batchers. ZamaDeFiDAO, a second Aragon DAO contract, and its 3/6 multisig plugin own all of them. The protocol DAO is now named ZamaDAO and clarified as a contract in all refs (so that people do not assume it is decentralized). ### [2026-10-19 13:01 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=973a5756) (high severity, 6 changes) Safe 0x97E1…4e54 upgraded from Safe 1.4.1 to 1.5.0. The Aragon Multisig template now models its members, which changes no resolved permission here. ### [2026-10-12 07:14 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=d2fea842) (high severity, 28 changes) Gateway coprocessors expanded from one to five, and their majority threshold rose to three. ACL updates now need three responses. ### [2026-10-08 11:21 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=5931caeb) (high severity, 51 changes) Upgraded: - Gateway contracts introduce a priority coprocessor mode, where a single registered coprocessor can ignore the majority threshold and finalize input-proof verification and rejection, and ciphertext commits on its own (GatewayConfig: https://disco.l2beat.com/diff/zama:0x1950aD98e834f6c07553365196d4CddeD179c536/zama:0x94209410f6CAa4A8c6Fd7ED4AB67560eD8A3002C, InputVerification: https://disco.l2beat.com/diff/zama:0xf9f0F5ef8301CF1573EBe0F45E13A4CabB621821/zama:0xa9A3eA1cdD078a79bB31c3a284a4abA80bd0E8d8, CiphertextCommits: https://disco.l2beat.com/diff/zama:0xB373Ae42736E3C266D4A5D090c00c7f0Bda06622/zama:0x81a6CBD6B1bb0296BfFd38AD8584918640F35948). This mode effectively removes coprocessor decentralization. Zama coprocessor is also set as the priority coprocessor. - FHEVMExecutor has new validity checks (https://disco.l2beat.com/diff/eth:0xf444B2B5e45cD07F1E735122F53A2d70A8c81dB5/eth:0x0675c7BFA34aF170C49e6590A2cBf845c3029d7B). ### [2026-10-01 10:42 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=0f767d21) (2 changes) A Safe that is one of the signers of ZamaGovMultisigA (eth:0x69E55790880d0ABa56E48Ee1f7fc3834b0F5c223) lowered its own threshold from 3/5 to 2/5. ### [2026-09-17 07:49 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=08457d02) (high severity, 327 changes) Add 17 new confidential wrappers (WBTC, AUSD, PENDLE and 14 Morpho vault shares) ### [2026-08-27 12:35 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=4697bd9a) (high severity, 171 changes) All nine confidential token wrappers were upgraded to a shared new implementation named `ConfidentialWrapper` (eth:0x2ABad2203Eba104b52cf040cCcFA100Df15687F8). Compared to the previous `ConfidentialWrapperV3`, the upgrade adds two subsystems: 1. Observers: the owner can add/remove observer accounts that receive a wildcard, non-expiring user-decryption delegation over all wrapper-owned encrypted handles, i.e. they can decrypt every confidential balance and transfer amount of the wrapper. 2. Pausing: an owner-set pauser address can pause wrapping, unwrapping, unwrap finalization and confidential transfers; only the owner can unpause. ### [2026-08-25 08:53 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=45f1347a) (2 changes) Add multisig signer. ### [2026-08-12 12:56 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=07be036e) (high severity, 160 changes) Zama FHEVM host-chain upgrade (the Ethereum-side counterpart of the 2026-08-07 Gateway upgrade that moved KMS management off the Gateway): ZamaGovMultisigB executed a DAO (ACL owner) proposal that upgraded four host contracts and initialized two new ones in a single transaction. Governance is unchanged — everything below remains controlled by the Aragon DAO without a timelock. - KMSVerifier v0.2.0 -> v0.3.0 ([implementation diff](https://disco.l2beat.com/diff/eth:0xd0d0C7E1bc1E2F6Cd00E3b4B1083DdD9969155FD/eth:0x390683dEa46a61786f4F0807bf3559038Cf43Fa4)): all KMS context management (signer sets, thresholds, context create/destroy) is removed from the verifier and moved to the new ProtocolConfig contract. The KMSVerifier is now a stateless proof checker whose signer- and threshold-reads delegate to ProtocolConfig. Public decryption proofs can still select any non-destroyed context via extraData v1. - New ProtocolConfig v0.1.0 (proxy eth:0xD8236B57394f90726b26aB25D38CeAC776E1a7C4, impl eth:0x25c76298Fb4d15bFADce4798519a7B37ac0076E7): ACL-owner-governed registry of KMS nodes (signer + tx-sender + metadata) and contexts, now with four separate per-context thresholds: publicDecryption (7), userDecryption (9), kmsGen and mpc. exactly one context is live. the ACL owner can now retune the thresholds of any live context — including the current one — in place, mirroring GatewayConfig v0.6.0 on the Gateway. - New KMSGeneration v0.1.0 (proxy eth:0xf102cC9A9D2174630c394f5b7B7D63104E348daa, impl eth:0x5DD95e97287672b5d86dd3a427E855099E5AC940): FHE key- and CRS-generation is now orchestrated onchain on Ethereum (previously not orchestrated onchain at all after being removed from the Gateway KMSGeneration v0.5.0). The ACL owner triggers keygen/crsgen and can abort them; KMS nodes respond with EIP-712 signatures that reach consensus at the ProtocolConfig kmsGen threshold. - ACL v0.3.0 -> v0.4.0 ([implementation diff](https://disco.l2beat.com/diff/eth:0x3F6D970d30E1FFE9657aa8072C82dA10eef1c3D6/eth:0x9A017e0ba4c19A325D5a89f5dd2112e605E85418)): adds wildcard user-decryption delegation — a user can delegate user decryption of their handles across all app contracts at once - FHEVMExecutor v0.3.0 -> v0.4.0 ([implementation diff](https://disco.l2beat.com/diff/eth:0xC38aAfCBB73Fd4bd6f995275079C4Add9C1687E5/eth:0xf444B2B5e45cD07F1E735122F53A2d70A8c81dB5)): adds two n-ary encrypted operations, `fheSum` (sum over up to 100/60 ciphertexts depending on width) and `fheIsIn` (encrypted set membership), with per-element ACL checks on inputs. - HCULimit v0.2.0 -> v0.3.0 ([implementation diff](https://disco.l2beat.com/diff/eth:0x0F2B7e8F19ADc874F21e27ADAA4B22FC00a0B442/eth:0x69A91389006443448d8E90Fd84B6bDF5ae253837)): adds HCU pricing for the new fheSum/fheIsIn operations and a guard reserving the zero transient-storage slot for the per-transaction HCU accumulator (a handle of 0x0 can no longer read/write it). Limits themselves are unchanged (empty reinitializer). ### [2026-08-07 12:55 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=5b83a932) (high severity, 133 changes) Zama Gateway upgrade: a larger upgrade that touches key generation and is only half deployed. - Decryption v0.4.0 -> v0.5.0: requests now pin a KMS context at request time and responses must reference the pinned context - GatewayConfig v0.5.0 -> v0.6.0: the owner can now destroy non-current KMS contexts (immediately invalidating them for decryption), retune thresholds of any live context (context-scoped events), and disable/enable/remove host chains. Coprocessor updates now require InputVerification to be paused. - KMSGeneration v0.4.0 -> v0.5.0: now view-only; all key/CRS/PRSS/resharing workflows were removed from the gateway after their move to Ethereum (getActiveKeyId/getActiveCrsId are gone). - InputVerification v0.3.0 -> v0.4.0 and CiphertextCommits v0.3.0 -> v0.4.0: minor; both now reject requests/handles from disabled host chains, and CiphertextCommits dropped its KMSGeneration reference. - a Polygon host chain (chainId 137) is now registered in GatewayConfig. ### [2026-08-04 11:55 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=012462c7) (5 changes) ZamaGovMultisigB executed a proposal rotating two ZamaGovMultisigA members while preserving its 9-of-17 threshold. ### [2026-07-23 14:08 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=3a509885) (7 changes) The Safe signer set changed from 2-of-3 to 3-of-5, removing two signers and adding four. ### [2026-07-13 07:29 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=a657d096) (high severity, 112 changes) Introduces KMS signer set rotation on Ethereum and the Gateway: each signer set is called a context and is valid and retains all permissions until specifically invalidated ('destroyed'). HCULimit adds per-transaction and per-block caps plus a bypass whitelist. ### [2026-06-29 15:19 UTC](https://l2beat.com/privacy/projects/zama-confidential-tokens?update=6378d3a6) (37 changes) Initial discovery. ## Permissions Explore these contracts and permissions in Disco, L2BEAT's contract explorer: https://disco.l2beat.com/ui/p/zama-cw ### Ethereum #### Actors ##### ZamaGovMultisigB Addresses: [0xBc860b6a4C860C5424B84A056E53ACFb2C99a38F](https://etherscan.io/address/0xBc860b6a4C860C5424B84A056E53ACFb2C99a38F) A Multisig with 3/6 threshold. Aragon multisig plugin for creating proposals and collecting approvals against a configurable threshold. - Can upgrade **with no delay** - ConfidentialSteakUSDTWrapper [via: ZamaGovCore] - ConfidentialArmUSDCpWrapper [via: ZamaGovCore] - HCULimit [via: ZamaGovCore] - ConfidentialRoxUSDCyWrapper [via: ZamaGovCore] - ConfidentialBbqUSDCWrapper [via: ZamaGovCore] - ConfidentialArmUSDTpWrapper [via: ZamaGovCore] - ConfidentialSteakcUSDCWrapper [via: ZamaGovCore] - Staking (Coprocessor) [via: ZamaGovCore] - ConfidentialXAUTWrapper [via: ZamaGovCore] - ConfidentialFAUSDeWrapper [via: ZamaGovCore] - KMSVerifier [via: ZamaGovCore] - ConfidentialArmUSDCsWrapper [via: ZamaGovCore] - ConfidentialBbqUSDTWrapper [via: ZamaGovCore] - ConfidentialZAMAWrapper [via: ZamaGovCore] - ConfidentialBRONWrapper [via: ZamaGovCore] - ConfidentialPENDLEWrapper [via: ZamaGovCore] - ConfidentialPAPYWrapper [via: ZamaGovCore] - ConfidentialFcUSDTWrapper [via: ZamaGovCore] - ConfidentialTGBPWrapper [via: ZamaGovCore] - ConfidentialUSDTWrapper [via: ZamaGovCore] - ConfidentialRoxcUSDCWrapper [via: ZamaGovCore] - ZamaGovCore [via: ZamaGovCore] - ConfidentialPendleUSDCWrapper [via: ZamaGovCore] - ConfidentialBbqTGBPWrapper [via: ZamaGovCore] - ConfidentialArmUSDTsWrapper [via: ZamaGovCore] - ACL [via: ZamaGovCore] - InputVerifier [via: ZamaGovCore] - ProtocolConfig [via: ZamaGovCore] - FHEVMExecutor [via: ZamaGovCore] - ConfidentialWBTCWrapper [via: ZamaGovCore] - ConfidentialWETHWrapper [via: ZamaGovCore] - ConfidentialUSDCWrapper [via: ZamaGovCore] - Staking (KMS) [via: ZamaGovCore] - ConfidentialAUSDWrapper [via: ZamaGovCore] - ConfidentialTokenWrappersRegistry [via: ZamaGovCore] - KMSGeneration [via: ZamaGovCore] - ConfidentialArmcWBTCWrapper [via: ZamaGovCore] - Can interact with ConfidentialSteakUSDTWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialArmUSDCpWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with HCULimit - change the per-block and per-transaction HCU limits and manage callers that bypass the per-block limit [via: ZamaGovCore] - Can interact with ConfidentialRoxUSDCyWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialBbqUSDCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialArmUSDTpWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialSteakcUSDCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with Staking (Coprocessor) - grant and revoke manager accounts, transfer or renounce the default admin role, and change the default admin transfer delay [via: ZamaGovCore] - set the reward rate, set the unstake cooldown period, and add or remove reward-eligible staking accounts [via: ZamaGovCore] - Can interact with ConfidentialXAUTWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialFAUSDeWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialArmUSDCsWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialBbqUSDTWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialZAMAWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialBRONWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialPENDLEWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialPAPYWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialFcUSDTWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialTGBPWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialUSDTWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialRoxcUSDCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ZamaGovCore - change multisig plugin settings [via: ZamaGovCore - or - acting directly] - change multisig plugin target execution configuration [via: ZamaGovCore - or - acting directly] - grant and revoke permissions in this contract [via: ZamaGovCore] - Can interact with ConfidentialPendleUSDCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialBbqTGBPWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialArmUSDTsWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with PauserSet - add, remove, or swap accounts that can pause the ACL [via: ZamaGovCore] - Can interact with ACL - transfer ACL ownership, unpause the ACL, block or unblock accounts, and manage PauserSet membership [via: ZamaGovCore] - Can interact with InputVerifier - set the coprocessor signer set and signature threshold used for encrypted input verification [via: ZamaGovCore] - Can interact with ProtocolConfig - create KMS contexts with arbitrary node sets and thresholds that immediately become the default verifier authority, destroy non-current contexts, and retune the per-context thresholds (public decryption, user decryption, key generation, MPC) of any live context including the current one. A malicious context or lowered threshold can attest an inflated unwrap amount and drain pooled wrapper backing [via: ZamaGovCore] - Can interact with ConfidentialWBTCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialWETHWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialUSDCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with Staking (KMS) - grant and revoke manager accounts, transfer or renounce the default admin role, and change the default admin transfer delay [via: ZamaGovCore] - set the reward rate, set the unstake cooldown period, and add or remove reward-eligible staking accounts [via: ZamaGovCore] - Can interact with ConfidentialAUSDWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialTokenWrappersRegistry - manage addresses in the registry [via: ZamaGovCore] - Can interact with KMSGeneration - trigger and abort FHE key and CRS generation rounds executed by the KMS nodes [via: ZamaGovCore] - Can interact with ConfidentialArmcWBTCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] Participants (6): [0x9b828219ad863491eb9b5225aE2d133eEDEa9B71](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-7) (EOA 7), [0xf299Cd189498D7d0F0FfACd4DdC94166f614fBBE](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-70) (EOA 70), [0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-35) (EOA 35), [0x8edFb885a32C72aF32943D4db13D319181d18CB8](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-36-and-EOA-37) (EOA 37), [0x705380c013c13B4ce62338ab1F012036BAC802b3](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-36-and-EOA-37) (EOA 36), [0x8aA8D71520d88a1Ed2B4257348134b94e00A9978](https://etherscan.io/address/0x8aA8D71520d88a1Ed2B4257348134b94e00A9978) ##### ZamaGovMultisigA Addresses: [0xE43c73aAb2b6aBBad6d0461997ce1cfea5ABe66f](https://etherscan.io/address/0xE43c73aAb2b6aBBad6d0461997ce1cfea5ABe66f) A Multisig with 9/17 threshold. Aragon multisig plugin for creating proposals and collecting approvals against a configurable threshold. - Can upgrade **with no delay** - ConfidentialSteakUSDTWrapper [via: ZamaGovCore] - ConfidentialArmUSDCpWrapper [via: ZamaGovCore] - HCULimit [via: ZamaGovCore] - ConfidentialRoxUSDCyWrapper [via: ZamaGovCore] - ConfidentialBbqUSDCWrapper [via: ZamaGovCore] - ConfidentialArmUSDTpWrapper [via: ZamaGovCore] - ConfidentialSteakcUSDCWrapper [via: ZamaGovCore] - Staking (Coprocessor) [via: ZamaGovCore] - ConfidentialXAUTWrapper [via: ZamaGovCore] - ConfidentialFAUSDeWrapper [via: ZamaGovCore] - KMSVerifier [via: ZamaGovCore] - ConfidentialArmUSDCsWrapper [via: ZamaGovCore] - ConfidentialBbqUSDTWrapper [via: ZamaGovCore] - ConfidentialZAMAWrapper [via: ZamaGovCore] - ConfidentialBRONWrapper [via: ZamaGovCore] - ConfidentialPENDLEWrapper [via: ZamaGovCore] - ConfidentialPAPYWrapper [via: ZamaGovCore] - ConfidentialFcUSDTWrapper [via: ZamaGovCore] - ConfidentialTGBPWrapper [via: ZamaGovCore] - ConfidentialUSDTWrapper [via: ZamaGovCore] - ConfidentialRoxcUSDCWrapper [via: ZamaGovCore] - ZamaGovCore [via: ZamaGovCore] - ConfidentialPendleUSDCWrapper [via: ZamaGovCore] - ConfidentialBbqTGBPWrapper [via: ZamaGovCore] - ConfidentialArmUSDTsWrapper [via: ZamaGovCore] - ACL [via: ZamaGovCore] - InputVerifier [via: ZamaGovCore] - ProtocolConfig [via: ZamaGovCore] - FHEVMExecutor [via: ZamaGovCore] - ConfidentialWBTCWrapper [via: ZamaGovCore] - ConfidentialWETHWrapper [via: ZamaGovCore] - ConfidentialUSDCWrapper [via: ZamaGovCore] - Staking (KMS) [via: ZamaGovCore] - ConfidentialAUSDWrapper [via: ZamaGovCore] - ConfidentialTokenWrappersRegistry [via: ZamaGovCore] - KMSGeneration [via: ZamaGovCore] - ConfidentialArmcWBTCWrapper [via: ZamaGovCore] - Can interact with ConfidentialSteakUSDTWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialArmUSDCpWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with HCULimit - change the per-block and per-transaction HCU limits and manage callers that bypass the per-block limit [via: ZamaGovCore] - Can interact with ConfidentialRoxUSDCyWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialBbqUSDCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialArmUSDTpWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialSteakcUSDCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with Staking (Coprocessor) - grant and revoke manager accounts, transfer or renounce the default admin role, and change the default admin transfer delay [via: ZamaGovCore] - set the reward rate, set the unstake cooldown period, and add or remove reward-eligible staking accounts [via: ZamaGovCore] - Can interact with ConfidentialXAUTWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialFAUSDeWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialArmUSDCsWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialBbqUSDTWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialZAMAWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialBRONWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialPENDLEWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialPAPYWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialFcUSDTWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialTGBPWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialUSDTWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialRoxcUSDCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ZamaGovCore - change multisig plugin settings [via: ZamaGovCore - or - acting directly] - change multisig plugin target execution configuration [via: ZamaGovCore - or - acting directly] - grant and revoke permissions in this contract [via: ZamaGovCore] - Can interact with ConfidentialPendleUSDCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialBbqTGBPWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialArmUSDTsWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with PauserSet - add, remove, or swap accounts that can pause the ACL [via: ZamaGovCore] - Can interact with ACL - transfer ACL ownership, unpause the ACL, block or unblock accounts, and manage PauserSet membership [via: ZamaGovCore] - Can interact with InputVerifier - set the coprocessor signer set and signature threshold used for encrypted input verification [via: ZamaGovCore] - Can interact with ProtocolConfig - create KMS contexts with arbitrary node sets and thresholds that immediately become the default verifier authority, destroy non-current contexts, and retune the per-context thresholds (public decryption, user decryption, key generation, MPC) of any live context including the current one. A malicious context or lowered threshold can attest an inflated unwrap amount and drain pooled wrapper backing [via: ZamaGovCore] - Can interact with ConfidentialWBTCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialWETHWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialUSDCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with Staking (KMS) - grant and revoke manager accounts, transfer or renounce the default admin role, and change the default admin transfer delay [via: ZamaGovCore] - set the reward rate, set the unstake cooldown period, and add or remove reward-eligible staking accounts [via: ZamaGovCore] - Can interact with ConfidentialAUSDWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] - Can interact with ConfidentialTokenWrappersRegistry - manage addresses in the registry [via: ZamaGovCore] - Can interact with KMSGeneration - trigger and abort FHE key and CRS generation rounds executed by the KMS nodes [via: ZamaGovCore] - Can interact with ConfidentialArmcWBTCWrapper - block and unblock users, add and remove observers (wildcard decryption access to all balances of this wrapper), set the pauser and the underlying denylist selector, unpause, and transfer ownership [via: ZamaGovCore] Participants (17): [0x31bBD7a242A38372DE92CA304fE29C12C90A382C](https://etherscan.io/address/0x31bBD7a242A38372DE92CA304fE29C12C90A382C) (ZamaDeFiGovCore), [0x644f248299FA8E1DE46C97A72C36F354Ccdb8a1e](https://etherscan.io/address/0x644f248299FA8E1DE46C97A72C36F354Ccdb8a1e), [0x0321a4Ee7E843A83Fa314f4e76E756864CBdE62e](https://etherscan.io/address/0x0321a4Ee7E843A83Fa314f4e76E756864CBdE62e), [0x0f81fd435d44Cc49f90BB74bF4BdE0e9A0554ae6](https://etherscan.io/address/0x0f81fd435d44Cc49f90BB74bF4BdE0e9A0554ae6), [0x931FB6Ec104dDc9bc556983032b5b85b671db000](https://etherscan.io/address/0x931FB6Ec104dDc9bc556983032b5b85b671db000), [0xc2e5960EDa1E8D801b19e96D886B946Dfb4bE709](https://etherscan.io/address/0xc2e5960EDa1E8D801b19e96D886B946Dfb4bE709), [0x8c0E2c46F96756C49DBd6723F4C57a03a254B4B0](https://etherscan.io/address/0x8c0E2c46F96756C49DBd6723F4C57a03a254B4B0) (Safe), [0x23Cd5e0f3bd1543CBCc5d05bB55e5446be4AD96b](https://etherscan.io/address/0x23Cd5e0f3bd1543CBCc5d05bB55e5446be4AD96b), [0x4a4962275DF8C60a80d3a25faEc5AA7De116A746](https://etherscan.io/address/0x4a4962275DF8C60a80d3a25faEc5AA7De116A746) (Conduit Multisig 1), [0x69E55790880d0ABa56E48Ee1f7fc3834b0F5c223](https://etherscan.io/address/0x69E55790880d0ABa56E48Ee1f7fc3834b0F5c223) (Safe), [0x8edFb885a32C72aF32943D4db13D319181d18CB8](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-36-and-EOA-37) (EOA 37), [0x705380c013c13B4ce62338ab1F012036BAC802b3](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-36-and-EOA-37) (EOA 36), [0x97E18544e156724E4076945F10c288ecBBC94e54](https://etherscan.io/address/0x97E18544e156724E4076945F10c288ecBBC94e54) (Safe), [0xE9AAc45091bF5d52AD7BC109497DAA7cD0245BdB](https://etherscan.io/address/0xE9AAc45091bF5d52AD7BC109497DAA7cD0245BdB), [0xD92e1C1Ec65aBe6C6891EcE56a00c6b79A09C8AE](https://etherscan.io/address/0xD92e1C1Ec65aBe6C6891EcE56a00c6b79A09C8AE), [0xc49376C4D044011eEce6eE69eFAe06f0Cc2bd008](https://etherscan.io/address/0xc49376C4D044011eEce6eE69eFAe06f0Cc2bd008), [0x27B1c34F2aeEc91F9704BD1CE288E5c667F29045](https://etherscan.io/address/0x27B1c34F2aeEc91F9704BD1CE288E5c667F29045) ##### ZamaDeFiMultisig Addresses: [0x37c8bfa303f173350eefCB6D4a995E68FFbdF3FD](https://etherscan.io/address/0x37c8bfa303f173350eefCB6D4a995E68FFbdF3FD) A Multisig with 3/6 threshold. Aragon multisig plugin for creating proposals and collecting approvals against a configurable threshold. - Can upgrade **with no delay** - ZamaDeFiGovCore [via: ZamaDeFiGovCore] - ConfidentialSwap [via: ZamaDeFiGovCore] - Can interact with RoxcUSDCDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with PendleUSDCDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with ArmUSDCpRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with RoxUSDCyDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with BbqTGBPRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with ZamaDeFiGovCore - change multisig plugin settings [via: ZamaDeFiGovCore - or - acting directly] - change multisig plugin target execution configuration [via: ZamaDeFiGovCore - or - acting directly] - grant and revoke permissions in this contract [via: ZamaDeFiGovCore] - Can interact with BbqUSDCDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with SteakcUSDCDepositBatcherV1 - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with SteakcUSDCRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with RoxcUSDCRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with SteakcUSDCRedeemBatcherV2 - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with ArmUSDCsRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with PAPYRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with SteakcUSDCDepositBatcherV2 - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with ArmUSDTsDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with SteakUSDTDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with ArmUSDTsRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with SteakUSDTRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with BbqUSDCRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with ArmcWBTCRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with ArmUSDCsDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with ConfidentialSwap - grant and revoke market makers and pausers, curate asset pairs and fees, set the maker gateway, reveal per-asset swap volume and unpause [via: ZamaDeFiGovCore] - pause intent creation, quoting, settlement and reclaims [via: ZamaDeFiGovCore] - Can interact with SteakcUSDCRedeemBatcherV1 - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with ArmUSDTpRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with SteakcUSDCDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with ArmcWBTCDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with FAUSDeDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with FcUSDTDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with ArmUSDCpDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with FcUSDTRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with PendleUSDCRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with BbqUSDTDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with PAPYDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with FAUSDeRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with RoxUSDCyRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with ArmUSDTpDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with BbqUSDTRedeemBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] - Can interact with BbqTGBPDepositBatcher - pause joins and dispatches, and set the minimum batch age, the callback deadline and the slippage limit [via: ZamaDeFiGovCore] Participants (6): [0x9b828219ad863491eb9b5225aE2d133eEDEa9B71](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-7) (EOA 7), [0xf299Cd189498D7d0F0FfACd4DdC94166f614fBBE](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-70) (EOA 70), [0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-35) (EOA 35), [0x8edFb885a32C72aF32943D4db13D319181d18CB8](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-36-and-EOA-37) (EOA 37), [0x705380c013c13B4ce62338ab1F012036BAC802b3](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-36-and-EOA-37) (EOA 36), [0x8aA8D71520d88a1Ed2B4257348134b94e00A9978](https://etherscan.io/address/0x8aA8D71520d88a1Ed2B4257348134b94e00A9978) ##### Safe Addresses: [0xE53e32a669357Ab0360103d8f294812B914AF9e4](https://etherscan.io/address/0xE53e32a669357Ab0360103d8f294812B914AF9e4) A Multisig with 1/2 threshold. Participants (2): [0xBdBA7b00A4b2dd3d3382a4217e82C5930791E2aA](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-72-and-EOA-73) (EOA 73), [0x6681101780Fb503591535B36bB3F15781f01EAAF](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-72-and-EOA-73) (EOA 72) ##### EOA 7 Addresses: [0x9b828219ad863491eb9b5225aE2d133eEDEa9B71](https://etherscan.io/address/0x9b828219ad863491eb9b5225aE2d133eEDEa9B71) Member of ZamaDeFiMultisig, ZamaGovMultisigB. - Can interact with ConfidentialSwap - decrypt the real order, amounts and minimum output of every swap intent, every quote and every settled amount - pause intent creation, quoting, settlement and reclaims - Can interact with PauserSet - pause the ACL ##### EOA 35 Addresses: [0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874](https://etherscan.io/address/0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874) Member of ZamaDeFiMultisig, ZamaGovMultisigB. - Can interact with ConfidentialSwap - pause intent creation, quoting, settlement and reclaims - Can interact with PauserSet - pause the ACL ##### 2 EOAs (0x7053…02b3) Addresses: [0x705380c013c13B4ce62338ab1F012036BAC802b3](https://etherscan.io/address/0x705380c013c13B4ce62338ab1F012036BAC802b3) (EOA 36), [0x8edFb885a32C72aF32943D4db13D319181d18CB8](https://etherscan.io/address/0x8edFb885a32C72aF32943D4db13D319181d18CB8) (EOA 37) Member of ZamaDeFiMultisig, ZamaGovMultisigB, ZamaGovMultisigA. - Can interact with ConfidentialSwap - pause intent creation, quoting, settlement and reclaims - Can interact with PauserSet - pause the ACL ##### 13 EOAs (0x0e25…E31D) Addresses: [0x0e25B8DB74c754C8275C0B219ba2A6CD7c59E31D](https://etherscan.io/address/0x0e25B8DB74c754C8275C0B219ba2A6CD7c59E31D) (EOA 38), [0x43e4c21cf9d24Dc5b4e00031349EC213A2ba8340](https://etherscan.io/address/0x43e4c21cf9d24Dc5b4e00031349EC213A2ba8340) (EOA 42), [0x487e41623b7FeB464ff79F7326DCa791c9a1c5EC](https://etherscan.io/address/0x487e41623b7FeB464ff79F7326DCa791c9a1c5EC) (EOA 43), [0x4eC7200E392B97913cbD6d8160B011406EB019F1](https://etherscan.io/address/0x4eC7200E392B97913cbD6d8160B011406EB019F1) (EOA 44), [0x577Fd21e4BC7D644A4177C4B89146e1Ab394De04](https://etherscan.io/address/0x577Fd21e4BC7D644A4177C4B89146e1Ab394De04) (EOA 45), [0x711EBE8aA590f9C9904ff279239E89dB2eFbC890](https://etherscan.io/address/0x711EBE8aA590f9C9904ff279239E89dB2eFbC890) (EOA 51), [0x74a1E2e87a4026b7B8b5252c747E514159515e9a](https://etherscan.io/address/0x74a1E2e87a4026b7B8b5252c747E514159515e9a) (EOA 52), [0xB4CE988D382425F64c99A352375F72A5f1cf6FFB](https://etherscan.io/address/0xB4CE988D382425F64c99A352375F72A5f1cf6FFB) (EOA 57), [0xbaac6F9DD84bFB303F05B4DE45A88Eec86855BD0](https://etherscan.io/address/0xbaac6F9DD84bFB303F05B4DE45A88Eec86855BD0) (EOA 59), [0xbcF4943A856497FB2345409D35f4d1eae9A0363E](https://etherscan.io/address/0xbcF4943A856497FB2345409D35f4d1eae9A0363E) (EOA 60), [0xC105B5933446658D226582f7A112F49a70b54364](https://etherscan.io/address/0xC105B5933446658D226582f7A112F49a70b54364) (EOA 62), [0xD227C4B573800EdA3bAdA6DAC872E9134E012e6D](https://etherscan.io/address/0xD227C4B573800EdA3bAdA6DAC872E9134E012e6D) (EOA 63), [0xEd1D622bd59d657580aBAc65312b40B4B2dA6236](https://etherscan.io/address/0xEd1D622bd59d657580aBAc65312b40B4B2dA6236) (EOA 69) - Can interact with ProtocolConfig - submit KMS key- and CRS-generation responses to KMSGeneration ##### 5 EOAs Addresses: [0x2e809E897AA8046Ff6e936502b6275F0B8993456](https://etherscan.io/address/0x2e809E897AA8046Ff6e936502b6275F0B8993456) (EOA 39), [0x373E36A8684A3344E177C5894179845Cbe57AE44](https://etherscan.io/address/0x373E36A8684A3344E177C5894179845Cbe57AE44) (EOA 40), [0x679953d556e71F62673F38EE4775d6E7CCb23E64](https://etherscan.io/address/0x679953d556e71F62673F38EE4775d6E7CCb23E64) (EOA 48), [0x68EDabe2F16CcC37cB2Bb05F1D1EDad3e1Eecbd7](https://etherscan.io/address/0x68EDabe2F16CcC37cB2Bb05F1D1EDad3e1Eecbd7) (EOA 49), [0xF6ee37de6bDaB31597E90ED70448B92073cD9634](https://etherscan.io/address/0xF6ee37de6bDaB31597E90ED70448B92073cD9634) (EOA 71) - Can interact with InputVerifier - sign encrypted input verification bundles accepted by the InputVerifier ##### 13 EOAs (0x41b1…5905) Addresses: [0x41b19EB4585450db79ac03ba9503106EC7895905](https://etherscan.io/address/0x41b19EB4585450db79ac03ba9503106EC7895905) (EOA 41), [0x5d0e7033774dD43eE546D49b72Bd0B561E52f7C8](https://etherscan.io/address/0x5d0e7033774dD43eE546D49b72Bd0B561E52f7C8) (EOA 46), [0x6016DCA5e91e62826e3FEA1Fb0a763602dc1E385](https://etherscan.io/address/0x6016DCA5e91e62826e3FEA1Fb0a763602dc1E385) (EOA 47), [0x6e5f02Cd4B33f0Cf4ED5326ac9eE25e5aA8c4921](https://etherscan.io/address/0x6e5f02Cd4B33f0Cf4ED5326ac9eE25e5aA8c4921) (EOA 50), [0x7C17BE232e5968BDa9516478B798b9E90D013fCC](https://etherscan.io/address/0x7C17BE232e5968BDa9516478B798b9E90D013fCC) (EOA 53), [0x7C5Eeb4D8CED0101799B8Cc212eE874097364F58](https://etherscan.io/address/0x7C5Eeb4D8CED0101799B8Cc212eE874097364F58) (EOA 54), [0x915055c5F05C0d88BCdf1e3DfBA18aBD2a18350f](https://etherscan.io/address/0x915055c5F05C0d88BCdf1e3DfBA18aBD2a18350f) (EOA 55), [0x966188a1f697F6A1B5cfA51495DD8A8A7b5CdB8D](https://etherscan.io/address/0x966188a1f697F6A1B5cfA51495DD8A8A7b5CdB8D) (EOA 56), [0xB7978e602D2AF68258dA614AF949E014BF0DE0eb](https://etherscan.io/address/0xB7978e602D2AF68258dA614AF949E014BF0DE0eb) (EOA 58), [0xbf05c17BEB0BF2F2c78Cd491A53a148e035279C3](https://etherscan.io/address/0xbf05c17BEB0BF2F2c78Cd491A53a148e035279C3) (EOA 61), [0xdC472efa1642D5afB684aAaa546E22FB24AAB965](https://etherscan.io/address/0xdC472efa1642D5afB684aAaa546E22FB24AAB965) (EOA 65), [0xDFc9Dcb3D206AA164770874f36a4B5AD2EE5194f](https://etherscan.io/address/0xDFc9Dcb3D206AA164770874f36a4B5AD2EE5194f) (EOA 66), [0xe9f7ecfF21a2e0Ca58eA26ae869FEF38ab49ed6f](https://etherscan.io/address/0xe9f7ecfF21a2e0Ca58eA26ae869FEF38ab49ed6f) (EOA 68) - Can interact with ProtocolConfig - sign public decryption results accepted by the KMSVerifier and key- and CRS-generation responses accepted by KMSGeneration ##### EOA 64 Addresses: [0xD87298Dde09403C68fF5c1FFa2aE02704CF930fe](https://etherscan.io/address/0xD87298Dde09403C68fF5c1FFa2aE02704CF930fe) - Can interact with ConfidentialSwap - decrypt the candidate amounts of every new intent, quote on them and settle the intents it wins ##### EOA 67 Addresses: [0xe6EeB6aD4DC458A7A630a733FBfba49dC08072a8](https://etherscan.io/address/0xe6EeB6aD4DC458A7A630a733FBfba49dC08072a8) - Can interact with ConfidentialSwap - pause intent creation, quoting, settlement and reclaims ##### EOA 70 Addresses: [0xf299Cd189498D7d0F0FfACd4DdC94166f614fBBE](https://etherscan.io/address/0xf299Cd189498D7d0F0FfACd4DdC94166f614fBBE) Member of ZamaDeFiMultisig, ZamaGovMultisigB. - Can interact with ConfidentialSwap - pause intent creation, quoting, settlement and reclaims ##### 2 EOAs (0x6681…EAAF) Addresses: [0x6681101780Fb503591535B36bB3F15781f01EAAF](https://etherscan.io/address/0x6681101780Fb503591535B36bB3F15781f01EAAF) (EOA 72), [0xBdBA7b00A4b2dd3d3382a4217e82C5930791E2aA](https://etherscan.io/address/0xBdBA7b00A4b2dd3d3382a4217e82C5930791E2aA) (EOA 73) Member of Safe. - Can interact with PauserSet - pause the ACL [via: Safe] ### Zama Gateway #### Actors ##### SafeL2 Addresses: [0x5f0F86BcEad6976711C9B131bCa5D30E767fe2bE](https://explorer.mainnet.zama.org/address/0x5f0F86BcEad6976711C9B131bCa5D30E767fe2bE) A Multisig with 3/5 threshold. Gateway owner Safe. Its LayerZero governance module is outside the Zama Gateway protocol surface covered here. - Can upgrade **with no delay** - MultichainACL - Decryption - KMSGeneration - ProtocolPayment - InputVerification - CiphertextCommits - GatewayConfig - Can interact with Decryption - unpause Decryption - Can interact with GatewayPauserSet - add, remove, or swap gateway pausers - Can interact with ProtocolPayment - set gateway fee prices for input verification, public decryption, and user decryption - Can interact with InputVerification - unpause InputVerification - Can interact with GatewayConfig - create KMS contexts that immediately become current, destroy historical KMS contexts, update thresholds of any live context, manage coprocessors, custodians and host chains, set or remove the priority coprocessor that alone finalizes coprocessor consensus, transfer ownership, and unpause gateway workflow contracts Participants (5): [0x9b828219ad863491eb9b5225aE2d133eEDEa9B71](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-74,-EOA-75,-EOA-76-and-EOA-77) (EOA 77), [0xf299Cd189498D7d0F0FfACd4DdC94166f614fBBE](https://explorer.mainnet.zama.org/address/0xf299Cd189498D7d0F0FfACd4DdC94166f614fBBE), [0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-74,-EOA-75,-EOA-76-and-EOA-77) (EOA 74), [0x8edFb885a32C72aF32943D4db13D319181d18CB8](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-74,-EOA-75,-EOA-76-and-EOA-77) (EOA 76), [0x705380c013c13B4ce62338ab1F012036BAC802b3](https://l2beat.com/privacy/projects/zama-confidential-tokens#EOA-74,-EOA-75,-EOA-76-and-EOA-77) (EOA 75) ##### EOA 1 Addresses: [0x0000000000000000000000000000000000000000](https://explorer.mainnet.zama.org/address/0x0000000000000000000000000000000000000000) - Can upgrade **with no delay** - MultichainACL - Decryption - KMSGeneration - ProtocolPayment - InputVerification - CiphertextCommits - Can interact with InputVerification - finalize encrypted input proof verification or rejection in InputVerification alone while priority mode is active - Can interact with CiphertextCommits - commit ciphertext and SNS ciphertext digests to CiphertextCommits alone while priority mode is active - Can interact with GatewayConfig - accept GatewayConfig ownership - finalize coprocessor consensus alone for encrypted input proofs and ciphertext material commitments while priority mode is active ##### 5 EOAs Addresses: [0x2e809E897AA8046Ff6e936502b6275F0B8993456](https://explorer.mainnet.zama.org/address/0x2e809E897AA8046Ff6e936502b6275F0B8993456) (EOA 2), [0x373E36A8684A3344E177C5894179845Cbe57AE44](https://explorer.mainnet.zama.org/address/0x373E36A8684A3344E177C5894179845Cbe57AE44) (EOA 3), [0x679953d556e71F62673F38EE4775d6E7CCb23E64](https://explorer.mainnet.zama.org/address/0x679953d556e71F62673F38EE4775d6E7CCb23E64) (EOA 4), [0x68EDabe2F16CcC37cB2Bb05F1D1EDad3e1Eecbd7](https://explorer.mainnet.zama.org/address/0x68EDabe2F16CcC37cB2Bb05F1D1EDad3e1Eecbd7) (EOA 5), [0xF6ee37de6bDaB31597E90ED70448B92073cD9634](https://explorer.mainnet.zama.org/address/0xF6ee37de6bDaB31597E90ED70448B92073cD9634) (EOA 6) - Can interact with MultichainACL - submit public-decryption allowances, account handle allowances, and user-decryption delegation or revocation messages to MultichainACL - Can interact with InputVerification - sign encrypted input proof verification responses accepted by InputVerification - submit coprocessor proof verification and rejection responses to InputVerification - Can interact with CiphertextCommits - submit ciphertext and SNS ciphertext digests to CiphertextCommits - Can interact with GatewayConfig - sign encrypted input proof verification responses accepted by the gateway - submit coprocessor responses, ACL mirror updates, and ciphertext material commitments to gateway contracts ##### EOA 8 Addresses: [0x0000000000000000000000000000000000000001](https://explorer.mainnet.zama.org/address/0x0000000000000000000000000000000000000001) - Can interact with GatewayConfig - participate in gateway key custody workflows - sign gateway key custody material ##### 13 EOAs (0x0e25…E31D) Addresses: [0x0e25B8DB74c754C8275C0B219ba2A6CD7c59E31D](https://explorer.mainnet.zama.org/address/0x0e25B8DB74c754C8275C0B219ba2A6CD7c59E31D) (EOA 9), [0x43e4c21cf9d24Dc5b4e00031349EC213A2ba8340](https://explorer.mainnet.zama.org/address/0x43e4c21cf9d24Dc5b4e00031349EC213A2ba8340) (EOA 11), [0x487e41623b7FeB464ff79F7326DCa791c9a1c5EC](https://explorer.mainnet.zama.org/address/0x487e41623b7FeB464ff79F7326DCa791c9a1c5EC) (EOA 12), [0x4eC7200E392B97913cbD6d8160B011406EB019F1](https://explorer.mainnet.zama.org/address/0x4eC7200E392B97913cbD6d8160B011406EB019F1) (EOA 13), [0x577Fd21e4BC7D644A4177C4B89146e1Ab394De04](https://explorer.mainnet.zama.org/address/0x577Fd21e4BC7D644A4177C4B89146e1Ab394De04) (EOA 14), [0x711EBE8aA590f9C9904ff279239E89dB2eFbC890](https://explorer.mainnet.zama.org/address/0x711EBE8aA590f9C9904ff279239E89dB2eFbC890) (EOA 18), [0x74a1E2e87a4026b7B8b5252c747E514159515e9a](https://explorer.mainnet.zama.org/address/0x74a1E2e87a4026b7B8b5252c747E514159515e9a) (EOA 19), [0xB4CE988D382425F64c99A352375F72A5f1cf6FFB](https://explorer.mainnet.zama.org/address/0xB4CE988D382425F64c99A352375F72A5f1cf6FFB) (EOA 24), [0xbaac6F9DD84bFB303F05B4DE45A88Eec86855BD0](https://explorer.mainnet.zama.org/address/0xbaac6F9DD84bFB303F05B4DE45A88Eec86855BD0) (EOA 26), [0xbcF4943A856497FB2345409D35f4d1eae9A0363E](https://explorer.mainnet.zama.org/address/0xbcF4943A856497FB2345409D35f4d1eae9A0363E) (EOA 27), [0xC105B5933446658D226582f7A112F49a70b54364](https://explorer.mainnet.zama.org/address/0xC105B5933446658D226582f7A112F49a70b54364) (EOA 29), [0xD227C4B573800EdA3bAdA6DAC872E9134E012e6D](https://explorer.mainnet.zama.org/address/0xD227C4B573800EdA3bAdA6DAC872E9134E012e6D) (EOA 30), [0xEd1D622bd59d657580aBAc65312b40B4B2dA6236](https://explorer.mainnet.zama.org/address/0xEd1D622bd59d657580aBAc65312b40B4B2dA6236) (EOA 34) - Can interact with Decryption - submit KMS decryption responses to Decryption - Can interact with GatewayConfig - submit KMS decryption responses to gateway contracts ##### 13 EOAs (0x41b1…5905) Addresses: [0x41b19EB4585450db79ac03ba9503106EC7895905](https://explorer.mainnet.zama.org/address/0x41b19EB4585450db79ac03ba9503106EC7895905) (EOA 10), [0x5d0e7033774dD43eE546D49b72Bd0B561E52f7C8](https://explorer.mainnet.zama.org/address/0x5d0e7033774dD43eE546D49b72Bd0B561E52f7C8) (EOA 15), [0x6016DCA5e91e62826e3FEA1Fb0a763602dc1E385](https://explorer.mainnet.zama.org/address/0x6016DCA5e91e62826e3FEA1Fb0a763602dc1E385) (EOA 16), [0x6e5f02Cd4B33f0Cf4ED5326ac9eE25e5aA8c4921](https://explorer.mainnet.zama.org/address/0x6e5f02Cd4B33f0Cf4ED5326ac9eE25e5aA8c4921) (EOA 17), [0x7C17BE232e5968BDa9516478B798b9E90D013fCC](https://explorer.mainnet.zama.org/address/0x7C17BE232e5968BDa9516478B798b9E90D013fCC) (EOA 20), [0x7C5Eeb4D8CED0101799B8Cc212eE874097364F58](https://explorer.mainnet.zama.org/address/0x7C5Eeb4D8CED0101799B8Cc212eE874097364F58) (EOA 21), [0x915055c5F05C0d88BCdf1e3DfBA18aBD2a18350f](https://explorer.mainnet.zama.org/address/0x915055c5F05C0d88BCdf1e3DfBA18aBD2a18350f) (EOA 22), [0x966188a1f697F6A1B5cfA51495DD8A8A7b5CdB8D](https://explorer.mainnet.zama.org/address/0x966188a1f697F6A1B5cfA51495DD8A8A7b5CdB8D) (EOA 23), [0xB7978e602D2AF68258dA614AF949E014BF0DE0eb](https://explorer.mainnet.zama.org/address/0xB7978e602D2AF68258dA614AF949E014BF0DE0eb) (EOA 25), [0xbf05c17BEB0BF2F2c78Cd491A53a148e035279C3](https://explorer.mainnet.zama.org/address/0xbf05c17BEB0BF2F2c78Cd491A53a148e035279C3) (EOA 28), [0xdC472efa1642D5afB684aAaa546E22FB24AAB965](https://explorer.mainnet.zama.org/address/0xdC472efa1642D5afB684aAaa546E22FB24AAB965) (EOA 31), [0xDFc9Dcb3D206AA164770874f36a4B5AD2EE5194f](https://explorer.mainnet.zama.org/address/0xDFc9Dcb3D206AA164770874f36a4B5AD2EE5194f) (EOA 32), [0xe9f7ecfF21a2e0Ca58eA26ae869FEF38ab49ed6f](https://explorer.mainnet.zama.org/address/0xe9f7ecfF21a2e0Ca58eA26ae869FEF38ab49ed6f) (EOA 33) - Can interact with Decryption - sign public decryption results and user decryption shares accepted by Decryption - Can interact with GatewayConfig - sign KMS decryption material accepted by gateway contracts ##### 4 EOAs Addresses: [0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874](https://explorer.mainnet.zama.org/address/0x6dd470B50BbC1Ec03bf2B13B30c7d864F2025874) (EOA 74), [0x705380c013c13B4ce62338ab1F012036BAC802b3](https://explorer.mainnet.zama.org/address/0x705380c013c13B4ce62338ab1F012036BAC802b3) (EOA 75), [0x8edFb885a32C72aF32943D4db13D319181d18CB8](https://explorer.mainnet.zama.org/address/0x8edFb885a32C72aF32943D4db13D319181d18CB8) (EOA 76), [0x9b828219ad863491eb9b5225aE2d133eEDEa9B71](https://explorer.mainnet.zama.org/address/0x9b828219ad863491eb9b5225aE2d133eEDEa9B71) (EOA 77) Member of SafeL2. - Can interact with GatewayPauserSet - pause GatewayConfig and pausable gateway workflow contracts ## Smart contracts Explore these contracts and permissions in Disco, L2BEAT's contract explorer: https://disco.l2beat.com/ui/p/zama-cw ### Ethereum #### RoxcUSDCDepositBatcher Addresses: [0x084fd3a517D6DaE1f8E3E5481b65107fd7e5eEc1](https://etherscan.io/address/0x084fd3a517D6DaE1f8E3E5481b65107fd7e5eEc1#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### VaultBatcherConfidentialRouter Addresses: [0x11c6Acfd368DDFAB97d15649eB8043C0197fac4C](https://etherscan.io/address/0x11c6Acfd368DDFAB97d15649eB8043C0197fac4C#code) Ownerless router that splits one confidential deposit or redemption across several vault batchers. It accepts only wrappers listed in the ConfidentialTokenWrappersRegistry. #### PendleUSDCDepositBatcher Addresses: [0x1B731EC615165094Ec4d695b0a1c8eE31366Cf84](https://etherscan.io/address/0x1B731EC615165094Ec4d695b0a1c8eE31366Cf84#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialSteakUSDTWrapper Addresses: [0x1F6A937119c0c34Db0a2c4F000386a3BfD4A9e73](https://etherscan.io/address/0x1F6A937119c0c34Db0a2c4F000386a3BfD4A9e73#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 18:43 UTC, deployment of [ConfidentialSteakUSDTWrapper](https://etherscan.io/address/0x1F6A937119c0c34Db0a2c4F000386a3BfD4A9e73#code): transaction [0xe9f33dc7a110fea67894ef7f3ef9254918eaabeb7ad01facde7cefb240395b4d](https://etherscan.io/tx/0xe9f33dc7a110fea67894ef7f3ef9254918eaabeb7ad01facde7cefb240395b4d), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ArmUSDCpRedeemBatcher Addresses: [0x2B5eB25dA24dcd00A825487c60401F9736091006](https://etherscan.io/address/0x2B5eB25dA24dcd00A825487c60401F9736091006#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### RoxUSDCyDepositBatcher Addresses: [0x2dEAFB36F3B118d434CDE4708e8350eae918724d](https://etherscan.io/address/0x2dEAFB36F3B118d434CDE4708e8350eae918724d#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialArmUSDCpWrapper Addresses: [0x2ebBd099f66b0ca94DD82B4c06fe3eEf6AFf853c](https://etherscan.io/address/0x2ebBd099f66b0ca94DD82B4c06fe3eEf6AFf853c#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 18:19 UTC, deployment of [ConfidentialArmUSDCpWrapper](https://etherscan.io/address/0x2ebBd099f66b0ca94DD82B4c06fe3eEf6AFf853c#code): transaction [0xd55cc3a9346ae5156efdfbbb3d628e8d93de08f419e3f0ec55ae90bde92e28c0](https://etherscan.io/tx/0xd55cc3a9346ae5156efdfbbb3d628e8d93de08f419e3f0ec55ae90bde92e28c0), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### BbqTGBPRedeemBatcher Addresses: [0x2FB51a8fe20D9cc830b9CA5251f8d845eb5BAAa7](https://etherscan.io/address/0x2FB51a8fe20D9cc830b9CA5251f8d845eb5BAAa7#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### BbqUSDCDepositBatcher Addresses: [0x321C9AaB1390100f6e7fE1735a928ec0F16252f0](https://etherscan.io/address/0x321C9AaB1390100f6e7fE1735a928ec0F16252f0#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### SteakcUSDCDepositBatcherV1 Addresses: [0x324EA89FD3784036673BfE6Ffee2334A088F40Cc](https://etherscan.io/address/0x324EA89FD3784036673BfE6Ffee2334A088F40Cc#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### SteakcUSDCRedeemBatcher Addresses: [0x3a906d6509EB4171Ee9fC71D083fb1638BaF083D](https://etherscan.io/address/0x3a906d6509EB4171Ee9fC71D083fb1638BaF083D#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### HCULimit Addresses: [0x3b4da65e45Fda2CAa0285A735ab4361a44F171E2](https://etherscan.io/address/0x3b4da65e45Fda2CAa0285A735ab4361a44F171E2#code), [0x69A91389006443448d8E90Fd84B6bDF5ae253837](https://etherscan.io/address/0x69A91389006443448d8E90Fd84B6bDF5ae253837#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://etherscan.io/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: 3, Last upgrade: 2mo 14d ago, Avg upgrade interval: 2mo 24d) - 2026-08-10 11:50 UTC, upgrade of [HCULimit](https://etherscan.io/address/0x3b4da65e45Fda2CAa0285A735ab4361a44F171E2#code): transaction [0x3a73cbfe82d45d522aafa83acbc4a44dd89a2b409530e3a52d0076009a036c78](https://etherscan.io/tx/0x3a73cbfe82d45d522aafa83acbc4a44dd89a2b409530e3a52d0076009a036c78), implementations: [0x69A91389006443448d8E90Fd84B6bDF5ae253837](https://etherscan.io/address/0x69A91389006443448d8E90Fd84B6bDF5ae253837#code) ([diff](https://disco.l2beat.com/diff/eth:0x0F2B7e8F19ADc874F21e27ADAA4B22FC00a0B442/eth:0x69A91389006443448d8E90Fd84B6bDF5ae253837)) - 2026-07-10 08:34 UTC, upgrade of [HCULimit](https://etherscan.io/address/0x3b4da65e45Fda2CAa0285A735ab4361a44F171E2#code): transaction [0xec2212fb2d35b72388507e5fe9c218c97512b943b5f28cedbfba35b7ac9bd224](https://etherscan.io/tx/0xec2212fb2d35b72388507e5fe9c218c97512b943b5f28cedbfba35b7ac9bd224), implementations: [0x0F2B7e8F19ADc874F21e27ADAA4B22FC00a0B442](https://etherscan.io/address/0x0F2B7e8F19ADc874F21e27ADAA4B22FC00a0B442#code) ([diff](https://disco.l2beat.com/diff/eth:0x4E4329F10f7EE88a5dDB13716B8bE00c077CBeb6/eth:0x0F2B7e8F19ADc874F21e27ADAA4B22FC00a0B442)) - 2025-11-19 10:54 UTC, upgrade of [HCULimit](https://etherscan.io/address/0x3b4da65e45Fda2CAa0285A735ab4361a44F171E2#code): transaction [0xb5ab1dbab2a11947fad8475b643fb3ecf7710a1d09bf250038635a0198c7fc0d](https://etherscan.io/tx/0xb5ab1dbab2a11947fad8475b643fb3ecf7710a1d09bf250038635a0198c7fc0d), implementations: [0x4E4329F10f7EE88a5dDB13716B8bE00c077CBeb6](https://etherscan.io/address/0x4E4329F10f7EE88a5dDB13716B8bE00c077CBeb6#code) ([diff](https://disco.l2beat.com/diff/eth:0xC94790325C61A7D98e90d835ea89777d64b17492/eth:0x4E4329F10f7EE88a5dDB13716B8bE00c077CBeb6)) - 2025-11-19 10:52 UTC, deployment of [HCULimit](https://etherscan.io/address/0x3b4da65e45Fda2CAa0285A735ab4361a44F171E2#code): transaction [0xfd792abe94dd6c945b787284045ee8a66684985e48834872cc4452705e8ab27d](https://etherscan.io/tx/0xfd792abe94dd6c945b787284045ee8a66684985e48834872cc4452705e8ab27d), implementations: [0xC94790325C61A7D98e90d835ea89777d64b17492](https://etherscan.io/address/0xC94790325C61A7D98e90d835ea89777d64b17492#code) Tracks and enforces per-transaction and per-block homomorphic computation unit limits for FHEVM operation requests. v0.3.0 adds pricing for the fheSum and fheIsIn operations. - Roles: - **lOwner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### RoxcUSDCRedeemBatcher Addresses: [0x43e8f7B280B19637d2A7e3008657282AaF2C0E4b](https://etherscan.io/address/0x43e8f7B280B19637d2A7e3008657282AaF2C0E4b#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### SteakcUSDCRedeemBatcherV2 Addresses: [0x4Ad6368aD783644F1BB780F0A0F00cD77ca06400](https://etherscan.io/address/0x4Ad6368aD783644F1BB780F0A0F00cD77ca06400#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ArmUSDCsRedeemBatcher Addresses: [0x4f555b54842E609bA62843E0Ab4Ff184A436772e](https://etherscan.io/address/0x4f555b54842E609bA62843E0Ab4Ff184A436772e#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialRoxUSDCyWrapper Addresses: [0x4FCCF8046FB7FB7AB76321BD39C27453e396B88f](https://etherscan.io/address/0x4FCCF8046FB7FB7AB76321BD39C27453e396B88f#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 19:19 UTC, deployment of [ConfidentialRoxUSDCyWrapper](https://etherscan.io/address/0x4FCCF8046FB7FB7AB76321BD39C27453e396B88f#code): transaction [0x7a7eadb1e667732e52a0064b3a1f253a562fb35d34d1bc96663bbdf0f95a8f1a](https://etherscan.io/tx/0x7a7eadb1e667732e52a0064b3a1f253a562fb35d34d1bc96663bbdf0f95a8f1a), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialBbqUSDCWrapper Addresses: [0x501b014f86a73A7199E00cB31C0e9565Ac51e51B](https://etherscan.io/address/0x501b014f86a73A7199E00cB31C0e9565Ac51e51B#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 18:57 UTC, deployment of [ConfidentialBbqUSDCWrapper](https://etherscan.io/address/0x501b014f86a73A7199E00cB31C0e9565Ac51e51B#code): transaction [0x889469791190aaf6a60a02c423bd1080bf1dd4bfb768f778521e3ca927690d59](https://etherscan.io/tx/0x889469791190aaf6a60a02c423bd1080bf1dd4bfb768f778521e3ca927690d59), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### PAPYRedeemBatcher Addresses: [0x52FfC3Aa2372D42d1cB413C0E36659ffF1e58EC1](https://etherscan.io/address/0x52FfC3Aa2372D42d1cB413C0E36659ffF1e58EC1#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialArmUSDTpWrapper Addresses: [0x63a60aCC304b84eF829b263f28e7b636Bf77d45A](https://etherscan.io/address/0x63a60aCC304b84eF829b263f28e7b636Bf77d45A#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 19:02 UTC, deployment of [ConfidentialArmUSDTpWrapper](https://etherscan.io/address/0x63a60aCC304b84eF829b263f28e7b636Bf77d45A#code): transaction [0x46e9abc4237bb9560dc0595f6f18dd84cc984a09adfac882e44c84b37fcb23f0](https://etherscan.io/tx/0x46e9abc4237bb9560dc0595f6f18dd84cc984a09adfac882e44c84b37fcb23f0), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialSteakcUSDCWrapper Addresses: [0x66Bf74E96900D1a19c7070D939D124f2F565C458](https://etherscan.io/address/0x66Bf74E96900D1a19c7070D939D124f2F565C458#code), [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: 2, Last upgrade: 1mo 29d ago, Avg upgrade interval: 1mo 12d) - 2026-08-25 15:59 UTC, upgrade of [ConfidentialSteakcUSDCWrapper](https://etherscan.io/address/0x66Bf74E96900D1a19c7070D939D124f2F565C458#code): transaction [0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0](https://etherscan.io/tx/0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0), implementations: [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) ([diff](https://disco.l2beat.com/diff/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5/eth:0x2ABad2203Eba104b52cf040cCcFA100Df15687F8)) - 2026-06-22 10:55 UTC, upgrade of [ConfidentialSteakcUSDCWrapper](https://etherscan.io/address/0x66Bf74E96900D1a19c7070D939D124f2F565C458#code): transaction [0x78c56acfe7e477612beb8536dc51fe47a0531b0e71ca194fe1b449bfd4f110c2](https://etherscan.io/tx/0x78c56acfe7e477612beb8536dc51fe47a0531b0e71ca194fe1b449bfd4f110c2), implementations: [0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5](https://etherscan.io/address/0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5#code) ([diff](https://disco.l2beat.com/diff/eth:0xAea1d2cc69aF93CA0fdd34426E74Ad7cB19E9745/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5)) - 2026-06-19 14:01 UTC, deployment of [ConfidentialSteakcUSDCWrapper](https://etherscan.io/address/0x66Bf74E96900D1a19c7070D939D124f2F565C458#code): transaction [0x295406f3a8a3481eb9e33e25b9b9967a9b833244b76e39e91fe05424b7f14beb](https://etherscan.io/tx/0x295406f3a8a3481eb9e33e25b9b9967a9b833244b76e39e91fe05424b7f14beb), implementations: [0xAea1d2cc69aF93CA0fdd34426E74Ad7cB19E9745](https://etherscan.io/address/0xAea1d2cc69aF93CA0fdd34426E74Ad7cB19E9745#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### SteakcUSDCDepositBatcherV2 Addresses: [0x6e05F3bE50c7890Ba10B30e9492b20683d5cC707](https://etherscan.io/address/0x6e05F3bE50c7890Ba10B30e9492b20683d5cC707#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ArmUSDTsDepositBatcher Addresses: [0x7320830992a924e6D2f3D3E9A74fbd103E9A20AE](https://etherscan.io/address/0x7320830992a924e6D2f3D3E9A74fbd103E9A20AE#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### SteakUSDTDepositBatcher Addresses: [0x737F4558c0cC7C29b56dd13c34B68e967C91E399](https://etherscan.io/address/0x737F4558c0cC7C29b56dd13c34B68e967C91E399#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialXAUTWrapper Addresses: [0x73cc9aF9d6BEFdb3c3fAf8a5E8c05Cb95FdaEEf1](https://etherscan.io/address/0x73cc9aF9d6BEFdb3c3fAf8a5E8c05Cb95FdaEEf1#code), [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: 3, Last upgrade: 1mo 29d ago, Avg upgrade interval: 1mo 29d) - 2026-08-25 15:59 UTC, upgrade of [ConfidentialXAUTWrapper](https://etherscan.io/address/0x73cc9aF9d6BEFdb3c3fAf8a5E8c05Cb95FdaEEf1#code): transaction [0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0](https://etherscan.io/tx/0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0), implementations: [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) ([diff](https://disco.l2beat.com/diff/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5/eth:0x2ABad2203Eba104b52cf040cCcFA100Df15687F8)) - 2026-06-01 13:52 UTC, upgrade of [ConfidentialXAUTWrapper](https://etherscan.io/address/0x73cc9aF9d6BEFdb3c3fAf8a5E8c05Cb95FdaEEf1#code): transaction [0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4](https://etherscan.io/tx/0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4), implementations: [0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5](https://etherscan.io/address/0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5#code) ([diff](https://disco.l2beat.com/diff/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5)) - 2026-05-12 07:42 UTC, upgrade of [ConfidentialXAUTWrapper](https://etherscan.io/address/0x73cc9aF9d6BEFdb3c3fAf8a5E8c05Cb95FdaEEf1#code): transaction [0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32](https://etherscan.io/tx/0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32), implementations: [0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413](https://etherscan.io/address/0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413#code) ([diff](https://disco.l2beat.com/diff/eth:0x9CFdA0290EdeF98D0539e5747bea9Bd889a08BaB/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413)) - 2026-02-26 14:28 UTC, deployment of [ConfidentialXAUTWrapper](https://etherscan.io/address/0x73cc9aF9d6BEFdb3c3fAf8a5E8c05Cb95FdaEEf1#code): transaction [0x6824019fdc0404c3517600959f4e8dec43ae218dac150e63db45f2cb4b22360a](https://etherscan.io/tx/0x6824019fdc0404c3517600959f4e8dec43ae218dac150e63db45f2cb4b22360a), implementations: [0x9CFdA0290EdeF98D0539e5747bea9Bd889a08BaB](https://etherscan.io/address/0x9CFdA0290EdeF98D0539e5747bea9Bd889a08BaB#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialFAUSDeWrapper Addresses: [0x76A3f985315aAc9789Cb5BF8A5bb83BFF55FD5a6](https://etherscan.io/address/0x76A3f985315aAc9789Cb5BF8A5bb83BFF55FD5a6#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 17:39 UTC, deployment of [ConfidentialFAUSDeWrapper](https://etherscan.io/address/0x76A3f985315aAc9789Cb5BF8A5bb83BFF55FD5a6#code): transaction [0x7eef71a0892e61b5b1db77cc9443cf2951497ef28c483823b22b69bf623c5f24](https://etherscan.io/tx/0x7eef71a0892e61b5b1db77cc9443cf2951497ef28c483823b22b69bf623c5f24), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### KMSVerifier Addresses: [0x77627828a55156b04Ac0DC0eb30467f1a552BB03](https://etherscan.io/address/0x77627828a55156b04Ac0DC0eb30467f1a552BB03#code), [0x390683dEa46a61786f4F0807bf3559038Cf43Fa4](https://etherscan.io/address/0x390683dEa46a61786f4F0807bf3559038Cf43Fa4#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://etherscan.io/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: 3, Last upgrade: 2mo 14d ago, Avg upgrade interval: 2mo 24d) - 2026-08-10 11:50 UTC, upgrade of [KMSVerifier](https://etherscan.io/address/0x77627828a55156b04Ac0DC0eb30467f1a552BB03#code): transaction [0x3a73cbfe82d45d522aafa83acbc4a44dd89a2b409530e3a52d0076009a036c78](https://etherscan.io/tx/0x3a73cbfe82d45d522aafa83acbc4a44dd89a2b409530e3a52d0076009a036c78), implementations: [0x390683dEa46a61786f4F0807bf3559038Cf43Fa4](https://etherscan.io/address/0x390683dEa46a61786f4F0807bf3559038Cf43Fa4#code) ([diff](https://disco.l2beat.com/diff/eth:0xd0d0C7E1bc1E2F6Cd00E3b4B1083DdD9969155FD/eth:0x390683dEa46a61786f4F0807bf3559038Cf43Fa4)) - 2026-07-10 08:34 UTC, upgrade of [KMSVerifier](https://etherscan.io/address/0x77627828a55156b04Ac0DC0eb30467f1a552BB03#code): transaction [0xec2212fb2d35b72388507e5fe9c218c97512b943b5f28cedbfba35b7ac9bd224](https://etherscan.io/tx/0xec2212fb2d35b72388507e5fe9c218c97512b943b5f28cedbfba35b7ac9bd224), implementations: [0xd0d0C7E1bc1E2F6Cd00E3b4B1083DdD9969155FD](https://etherscan.io/address/0xd0d0C7E1bc1E2F6Cd00E3b4B1083DdD9969155FD#code) ([diff](https://disco.l2beat.com/diff/eth:0x8210A6c69FAc2e9856C7a19Ee70b26cFa3A4F0E2/eth:0xd0d0C7E1bc1E2F6Cd00E3b4B1083DdD9969155FD)) - 2025-11-19 10:53 UTC, upgrade of [KMSVerifier](https://etherscan.io/address/0x77627828a55156b04Ac0DC0eb30467f1a552BB03#code): transaction [0x7e4b4f2daadb3e6752b8c1fc896cba229da788a227041dfdc2660122ca1a7568](https://etherscan.io/tx/0x7e4b4f2daadb3e6752b8c1fc896cba229da788a227041dfdc2660122ca1a7568), implementations: [0x8210A6c69FAc2e9856C7a19Ee70b26cFa3A4F0E2](https://etherscan.io/address/0x8210A6c69FAc2e9856C7a19Ee70b26cFa3A4F0E2#code) ([diff](https://disco.l2beat.com/diff/eth:0xC94790325C61A7D98e90d835ea89777d64b17492/eth:0x8210A6c69FAc2e9856C7a19Ee70b26cFa3A4F0E2)) - 2025-11-19 10:51 UTC, deployment of [KMSVerifier](https://etherscan.io/address/0x77627828a55156b04Ac0DC0eb30467f1a552BB03#code): transaction [0x06d02641ad92aa250ac4fc62db0f221916bef24bbabbf3b4d0b70f6688abd2c4](https://etherscan.io/tx/0x06d02641ad92aa250ac4fc62db0f221916bef24bbabbf3b4d0b70f6688abd2c4), implementations: [0xC94790325C61A7D98e90d835ea89777d64b17492](https://etherscan.io/address/0xC94790325C61A7D98e90d835ea89777d64b17492#code) Ethereum host-chain verifier for public decryption results produced through the Zama Gateway Decryption contract. Since v0.3.0 it is a stateless proof checker: KMS signer sets and thresholds are read from the ProtocolConfig contract, and confidential token wrappers accept a decrypted value when it is signed by the threshold of the current or any explicitly selected non-destroyed KMS context. - Roles: - **lOwner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialArmUSDCsWrapper Addresses: [0x77F8207ee451441336538bA07a2F425780dED8DB](https://etherscan.io/address/0x77F8207ee451441336538bA07a2F425780dED8DB#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 18:30 UTC, deployment of [ConfidentialArmUSDCsWrapper](https://etherscan.io/address/0x77F8207ee451441336538bA07a2F425780dED8DB#code): transaction [0x96d24e2718e693259e6f30d476fc2a1157018ee8b4978f224807e2ecb06f6c56](https://etherscan.io/tx/0x96d24e2718e693259e6f30d476fc2a1157018ee8b4978f224807e2ecb06f6c56), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ArmUSDTsRedeemBatcher Addresses: [0x79e621c35B93329bbB6F06D9635981B9a5f4a255](https://etherscan.io/address/0x79e621c35B93329bbB6F06D9635981B9a5f4a255#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### SteakUSDTRedeemBatcher Addresses: [0x7Afb2CD6D41C379e3d8B46f206346b63A67F4d43](https://etherscan.io/address/0x7Afb2CD6D41C379e3d8B46f206346b63A67F4d43#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### BbqUSDCRedeemBatcher Addresses: [0x807C367dA7B9228643b06390e199E33ccA7Cc533](https://etherscan.io/address/0x807C367dA7B9228643b06390e199E33ccA7Cc533#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialBbqUSDTWrapper Addresses: [0x80Ae7dbCe3c1696d3eeD04Ec8348c3C432322273](https://etherscan.io/address/0x80Ae7dbCe3c1696d3eeD04Ec8348c3C432322273#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 18:51 UTC, deployment of [ConfidentialBbqUSDTWrapper](https://etherscan.io/address/0x80Ae7dbCe3c1696d3eeD04Ec8348c3C432322273#code): transaction [0x015d053c281a8ebb13d7170b1f91cdbac616e0aff901335a9cdb542dd15137dd](https://etherscan.io/tx/0x015d053c281a8ebb13d7170b1f91cdbac616e0aff901335a9cdb542dd15137dd), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialZAMAWrapper Addresses: [0x80CB147Fd86dC6dEe3Eee7e4Cee33d1397d98071](https://etherscan.io/address/0x80CB147Fd86dC6dEe3Eee7e4Cee33d1397d98071#code), [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: 3, Last upgrade: 1mo 29d ago, Avg upgrade interval: 2mo 15d) - 2026-08-25 15:59 UTC, upgrade of [ConfidentialZAMAWrapper](https://etherscan.io/address/0x80CB147Fd86dC6dEe3Eee7e4Cee33d1397d98071#code): transaction [0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0](https://etherscan.io/tx/0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0), implementations: [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) ([diff](https://disco.l2beat.com/diff/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5/eth:0x2ABad2203Eba104b52cf040cCcFA100Df15687F8)) - 2026-06-01 13:52 UTC, upgrade of [ConfidentialZAMAWrapper](https://etherscan.io/address/0x80CB147Fd86dC6dEe3Eee7e4Cee33d1397d98071#code): transaction [0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4](https://etherscan.io/tx/0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4), implementations: [0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5](https://etherscan.io/address/0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5#code) ([diff](https://disco.l2beat.com/diff/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5)) - 2026-05-12 07:42 UTC, upgrade of [ConfidentialZAMAWrapper](https://etherscan.io/address/0x80CB147Fd86dC6dEe3Eee7e4Cee33d1397d98071#code): transaction [0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32](https://etherscan.io/tx/0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32), implementations: [0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413](https://etherscan.io/address/0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413#code) ([diff](https://disco.l2beat.com/diff/eth:0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413)) - 2025-12-26 12:07 UTC, deployment of [ConfidentialZAMAWrapper](https://etherscan.io/address/0x80CB147Fd86dC6dEe3Eee7e4Cee33d1397d98071#code): transaction [0x45633b2aab6c5c6315c172eae43ecc3d3d41644a6bbfdea0f06d98c2c399c43a](https://etherscan.io/tx/0x45633b2aab6c5c6315c172eae43ecc3d3d41644a6bbfdea0f06d98c2c399c43a), implementations: [0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38](https://etherscan.io/address/0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ArmcWBTCRedeemBatcher Addresses: [0x83540Af3adFc4d3133139D57D4BAB17828902F05](https://etherscan.io/address/0x83540Af3adFc4d3133139D57D4BAB17828902F05#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialBRONWrapper Addresses: [0x85dE671c3bec1aDeD752c3Cea943521181C826bc](https://etherscan.io/address/0x85dE671c3bec1aDeD752c3Cea943521181C826bc#code), [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: 3, Last upgrade: 1mo 29d ago, Avg upgrade interval: 2mo 15d) - 2026-08-25 15:59 UTC, upgrade of [ConfidentialBRONWrapper](https://etherscan.io/address/0x85dE671c3bec1aDeD752c3Cea943521181C826bc#code): transaction [0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0](https://etherscan.io/tx/0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0), implementations: [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) ([diff](https://disco.l2beat.com/diff/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5/eth:0x2ABad2203Eba104b52cf040cCcFA100Df15687F8)) - 2026-06-01 13:52 UTC, upgrade of [ConfidentialBRONWrapper](https://etherscan.io/address/0x85dE671c3bec1aDeD752c3Cea943521181C826bc#code): transaction [0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4](https://etherscan.io/tx/0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4), implementations: [0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5](https://etherscan.io/address/0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5#code) ([diff](https://disco.l2beat.com/diff/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5)) - 2026-05-12 07:42 UTC, upgrade of [ConfidentialBRONWrapper](https://etherscan.io/address/0x85dE671c3bec1aDeD752c3Cea943521181C826bc#code): transaction [0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32](https://etherscan.io/tx/0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32), implementations: [0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413](https://etherscan.io/address/0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413#code) ([diff](https://disco.l2beat.com/diff/eth:0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413)) - 2025-12-26 12:07 UTC, deployment of [ConfidentialBRONWrapper](https://etherscan.io/address/0x85dE671c3bec1aDeD752c3Cea943521181C826bc#code): transaction [0xa779010ac9c5e5117b225f1ad387c33747a27ae91c429b8004ecb55643bfe0c5](https://etherscan.io/tx/0xa779010ac9c5e5117b225f1ad387c33747a27ae91c429b8004ecb55643bfe0c5), implementations: [0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38](https://etherscan.io/address/0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ArmUSDCsDepositBatcher Addresses: [0x87356ade88315aed3aC61B42caCC3a263730B1BD](https://etherscan.io/address/0x87356ade88315aed3aC61B42caCC3a263730B1BD#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialPENDLEWrapper Addresses: [0x8900123F7e17709C1D80eda1E611A9503Cf1B3df](https://etherscan.io/address/0x8900123F7e17709C1D80eda1E611A9503Cf1B3df#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 18:23 UTC, deployment of [ConfidentialPENDLEWrapper](https://etherscan.io/address/0x8900123F7e17709C1D80eda1E611A9503Cf1B3df#code): transaction [0x81bc67cd541d90df6904fd05608b64880b98be74fb5c1c0f5e4f17a0ec779561](https://etherscan.io/tx/0x81bc67cd541d90df6904fd05608b64880b98be74fb5c1c0f5e4f17a0ec779561), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialSwap Addresses: [0x8Fe22dC7e624c02b1805d41E09741490E1018C01](https://etherscan.io/address/0x8Fe22dC7e624c02b1805d41E09741490E1018C01#code), [0xf675538991Bc8Dacd4CEA94eff33e38A164DDF10](https://etherscan.io/address/0xf675538991Bc8Dacd4CEA94eff33e38A164DDF10#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://etherscan.io/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-12 09:37 UTC, deployment of [ConfidentialSwap](https://etherscan.io/address/0x8Fe22dC7e624c02b1805d41E09741490E1018C01#code): transaction [0xa698f4d5ff06ce1274a28b745e9bb3eea1fcfb99b375c816e1ed4f9d693195e1](https://etherscan.io/tx/0xa698f4d5ff06ce1274a28b745e9bb3eea1fcfb99b375c816e1ed4f9d693195e1), implementations: [0xf675538991Bc8Dacd4CEA94eff33e38A164DDF10](https://etherscan.io/address/0xf675538991Bc8Dacd4CEA94eff33e38A164DDF10#code) Request-for-quote protocol for swaps between confidential tokens. A maker escrows an encrypted intent that hides the real order among candidate orders, whitelisted market makers quote every candidate in a sealed-bid auction, and the revealed winner settles within the settlement window or the maker reclaims the escrow. - Roles: - **complianceAddress**: EOA 7 - **defaultAdmin**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig - **marketMaker**: EOA 64 - **pauser**: EOA 35, EOA 36, EOA 37, EOA 67, EOA 7, EOA 70, ZamaDeFiGovCore; ultimately ZamaDeFiMultisig Can be upgraded by: ZamaDeFiMultisig with no delay #### SteakcUSDCRedeemBatcherV1 Addresses: [0x96Cd3Faa7483783Ac2Eb715f6333361500F1eec9](https://etherscan.io/address/0x96Cd3Faa7483783Ac2Eb715f6333361500F1eec9#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ArmUSDTpRedeemBatcher Addresses: [0x99384d982399a9D890873E402EC04DEE7dad8737](https://etherscan.io/address/0x99384d982399a9D890873E402EC04DEE7dad8737#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialPAPYWrapper Addresses: [0x9ABb8f3dC2863B1F108DeD7ea41902fEF6732A8c](https://etherscan.io/address/0x9ABb8f3dC2863B1F108DeD7ea41902fEF6732A8c#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 18:39 UTC, deployment of [ConfidentialPAPYWrapper](https://etherscan.io/address/0x9ABb8f3dC2863B1F108DeD7ea41902fEF6732A8c#code): transaction [0xeb2532285d2ac5d8939481a8bfa78ddd8fc0418d031cfc525d97bf7201939a66](https://etherscan.io/tx/0xeb2532285d2ac5d8939481a8bfa78ddd8fc0418d031cfc525d97bf7201939a66), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### SteakcUSDCDepositBatcher Addresses: [0xA07c00A3b955B805B3Ea76b086f95a3e793715D5](https://etherscan.io/address/0xA07c00A3b955B805B3Ea76b086f95a3e793715D5#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialFcUSDTWrapper Addresses: [0xA28A369Df348ac232E4DAF7B0Ef90280d8707D7F](https://etherscan.io/address/0xA28A369Df348ac232E4DAF7B0Ef90280d8707D7F#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-14 12:22 UTC, deployment of [ConfidentialFcUSDTWrapper](https://etherscan.io/address/0xA28A369Df348ac232E4DAF7B0Ef90280d8707D7F#code): transaction [0xac60b0c2440232297fb1e4b7aabe445e32b69cc56d0d7be02bef6f4bba219ff9](https://etherscan.io/tx/0xac60b0c2440232297fb1e4b7aabe445e32b69cc56d0d7be02bef6f4bba219ff9), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialTGBPWrapper Addresses: [0xa873750ccBafD5ec7Dd13bfD5237d7129832eDD9](https://etherscan.io/address/0xa873750ccBafD5ec7Dd13bfD5237d7129832eDD9#code), [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: 3, Last upgrade: 1mo 29d ago, Avg upgrade interval: 2mo 14d) - 2026-08-25 15:59 UTC, upgrade of [ConfidentialTGBPWrapper](https://etherscan.io/address/0xa873750ccBafD5ec7Dd13bfD5237d7129832eDD9#code): transaction [0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0](https://etherscan.io/tx/0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0), implementations: [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) ([diff](https://disco.l2beat.com/diff/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5/eth:0x2ABad2203Eba104b52cf040cCcFA100Df15687F8)) - 2026-06-01 13:52 UTC, upgrade of [ConfidentialTGBPWrapper](https://etherscan.io/address/0xa873750ccBafD5ec7Dd13bfD5237d7129832eDD9#code): transaction [0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4](https://etherscan.io/tx/0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4), implementations: [0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5](https://etherscan.io/address/0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5#code) ([diff](https://disco.l2beat.com/diff/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5)) - 2026-05-12 07:42 UTC, upgrade of [ConfidentialTGBPWrapper](https://etherscan.io/address/0xa873750ccBafD5ec7Dd13bfD5237d7129832eDD9#code): transaction [0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32](https://etherscan.io/tx/0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32), implementations: [0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413](https://etherscan.io/address/0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413#code) ([diff](https://disco.l2beat.com/diff/eth:0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413)) - 2025-12-29 09:34 UTC, deployment of [ConfidentialTGBPWrapper](https://etherscan.io/address/0xa873750ccBafD5ec7Dd13bfD5237d7129832eDD9#code): transaction [0x7bee57213dda8d8b4c15cccef163e7b8767989deb0181b855dc98bf00e0b46ec](https://etherscan.io/tx/0x7bee57213dda8d8b4c15cccef163e7b8767989deb0181b855dc98bf00e0b46ec), implementations: [0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38](https://etherscan.io/address/0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ArmcWBTCDepositBatcher Addresses: [0xAC82e75FBA31122c1FEb575ebc371aA2EF78604D](https://etherscan.io/address/0xAC82e75FBA31122c1FEb575ebc371aA2EF78604D#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialUSDTWrapper Addresses: [0xAe0207C757Aa2B4019Ad96edD0092ddc63EF0c50](https://etherscan.io/address/0xAe0207C757Aa2B4019Ad96edD0092ddc63EF0c50#code), [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: 3, Last upgrade: 1mo 29d ago, Avg upgrade interval: 2mo 15d) - 2026-08-25 15:59 UTC, upgrade of [ConfidentialUSDTWrapper](https://etherscan.io/address/0xAe0207C757Aa2B4019Ad96edD0092ddc63EF0c50#code): transaction [0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0](https://etherscan.io/tx/0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0), implementations: [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) ([diff](https://disco.l2beat.com/diff/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5/eth:0x2ABad2203Eba104b52cf040cCcFA100Df15687F8)) - 2026-06-01 13:52 UTC, upgrade of [ConfidentialUSDTWrapper](https://etherscan.io/address/0xAe0207C757Aa2B4019Ad96edD0092ddc63EF0c50#code): transaction [0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4](https://etherscan.io/tx/0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4), implementations: [0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5](https://etherscan.io/address/0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5#code) ([diff](https://disco.l2beat.com/diff/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5)) - 2026-05-12 07:42 UTC, upgrade of [ConfidentialUSDTWrapper](https://etherscan.io/address/0xAe0207C757Aa2B4019Ad96edD0092ddc63EF0c50#code): transaction [0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32](https://etherscan.io/tx/0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32), implementations: [0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413](https://etherscan.io/address/0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413#code) ([diff](https://disco.l2beat.com/diff/eth:0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413)) - 2025-12-26 12:07 UTC, deployment of [ConfidentialUSDTWrapper](https://etherscan.io/address/0xAe0207C757Aa2B4019Ad96edD0092ddc63EF0c50#code): transaction [0x2eeb06d478ab37699ab18bc2cd90248eaf67f3a05c9995808ca5e949b4d1f606](https://etherscan.io/tx/0x2eeb06d478ab37699ab18bc2cd90248eaf67f3a05c9995808ca5e949b4d1f606), implementations: [0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38](https://etherscan.io/address/0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### FAUSDeDepositBatcher Addresses: [0xae09d50C6B6E91D9FBE50D168eA6567759e930f8](https://etherscan.io/address/0xae09d50C6B6E91D9FBE50D168eA6567759e930f8#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialRoxcUSDCWrapper Addresses: [0xB1B18Ad1F16D744c470cb6B09Cb826AfFcc9EB30](https://etherscan.io/address/0xB1B18Ad1F16D744c470cb6B09Cb826AfFcc9EB30#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 19:12 UTC, deployment of [ConfidentialRoxcUSDCWrapper](https://etherscan.io/address/0xB1B18Ad1F16D744c470cb6B09Cb826AfFcc9EB30#code): transaction [0x3ef21251bb814e05e1ad9812ad70d000318e223d8655c395944d1ca345984f7a](https://etherscan.io/tx/0x3ef21251bb814e05e1ad9812ad70d000318e223d8655c395944d1ca345984f7a), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialPendleUSDCWrapper Addresses: [0xb6e5299fc56053DD5440104Fd6Fd2A3CD064edbC](https://etherscan.io/address/0xb6e5299fc56053DD5440104Fd6Fd2A3CD064edbC#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 18:14 UTC, deployment of [ConfidentialPendleUSDCWrapper](https://etherscan.io/address/0xb6e5299fc56053DD5440104Fd6Fd2A3CD064edbC#code): transaction [0x245c01d53b1793bf5bcdcc33260534472552aeb287fa76e0330648a25385f7f1](https://etherscan.io/tx/0x245c01d53b1793bf5bcdcc33260534472552aeb287fa76e0330648a25385f7f1), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialBbqTGBPWrapper Addresses: [0xBA4cFF6ED6F7Cb2A58776dECa4E984b498446762](https://etherscan.io/address/0xBA4cFF6ED6F7Cb2A58776dECa4E984b498446762#code), [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: 2, Last upgrade: 1mo 29d ago, Avg upgrade interval: 1mo 17d) - 2026-08-25 15:59 UTC, upgrade of [ConfidentialBbqTGBPWrapper](https://etherscan.io/address/0xBA4cFF6ED6F7Cb2A58776dECa4E984b498446762#code): transaction [0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0](https://etherscan.io/tx/0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0), implementations: [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) ([diff](https://disco.l2beat.com/diff/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5/eth:0x2ABad2203Eba104b52cf040cCcFA100Df15687F8)) - 2026-06-05 12:41 UTC, upgrade of [ConfidentialBbqTGBPWrapper](https://etherscan.io/address/0xBA4cFF6ED6F7Cb2A58776dECa4E984b498446762#code): transaction [0x88640fcae1f813a06ecd522d8baad4898ea1abeec37935d5280f0edec77717e4](https://etherscan.io/tx/0x88640fcae1f813a06ecd522d8baad4898ea1abeec37935d5280f0edec77717e4), implementations: [0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5](https://etherscan.io/address/0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5#code) ([diff](https://disco.l2beat.com/diff/eth:0xAea1d2cc69aF93CA0fdd34426E74Ad7cB19E9745/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5)) - 2026-06-04 14:57 UTC, deployment of [ConfidentialBbqTGBPWrapper](https://etherscan.io/address/0xBA4cFF6ED6F7Cb2A58776dECa4E984b498446762#code): transaction [0xf8f65cadc2879300e74e4bf02a727021a71732b6c122a9243f3445799ec12212](https://etherscan.io/tx/0xf8f65cadc2879300e74e4bf02a727021a71732b6c122a9243f3445799ec12212), implementations: [0xAea1d2cc69aF93CA0fdd34426E74Ad7cB19E9745](https://etherscan.io/address/0xAea1d2cc69aF93CA0fdd34426E74Ad7cB19E9745#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialArmUSDTsWrapper Addresses: [0xbaC6DeDf2C10D6D381F9DBd9EFd69D93FfCef50B](https://etherscan.io/address/0xbaC6DeDf2C10D6D381F9DBd9EFd69D93FfCef50B#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 18:09 UTC, deployment of [ConfidentialArmUSDTsWrapper](https://etherscan.io/address/0xbaC6DeDf2C10D6D381F9DBd9EFd69D93FfCef50B#code): transaction [0x0126561c5f1b610e7f7dac5a364b5e6122bf5c3cb86f56908b94a94893df33b5](https://etherscan.io/tx/0x0126561c5f1b610e7f7dac5a364b5e6122bf5c3cb86f56908b94a94893df33b5), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### FcUSDTDepositBatcher Addresses: [0xbEbee65445dAD2F31628ADd14535fd0B3fC915b4](https://etherscan.io/address/0xbEbee65445dAD2F31628ADd14535fd0B3fC915b4#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ACL Addresses: [0xcA2E8f1F656CD25C01F05d0b243Ab1ecd4a8ffb6](https://etherscan.io/address/0xcA2E8f1F656CD25C01F05d0b243Ab1ecd4a8ffb6#code), [0x9A017e0ba4c19A325D5a89f5dd2112e605E85418](https://etherscan.io/address/0x9A017e0ba4c19A325D5a89f5dd2112e605E85418#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: 4, Last upgrade: 2mo 14d ago, Avg upgrade interval: 2mo 7d) - 2026-08-10 11:50 UTC, upgrade of [ACL](https://etherscan.io/address/0xcA2E8f1F656CD25C01F05d0b243Ab1ecd4a8ffb6#code): transaction [0x3a73cbfe82d45d522aafa83acbc4a44dd89a2b409530e3a52d0076009a036c78](https://etherscan.io/tx/0x3a73cbfe82d45d522aafa83acbc4a44dd89a2b409530e3a52d0076009a036c78), implementations: [0x9A017e0ba4c19A325D5a89f5dd2112e605E85418](https://etherscan.io/address/0x9A017e0ba4c19A325D5a89f5dd2112e605E85418#code) ([diff](https://disco.l2beat.com/diff/eth:0x3F6D970d30E1FFE9657aa8072C82dA10eef1c3D6/eth:0x9A017e0ba4c19A325D5a89f5dd2112e605E85418)) - 2026-07-10 08:34 UTC, upgrade of [ACL](https://etherscan.io/address/0xcA2E8f1F656CD25C01F05d0b243Ab1ecd4a8ffb6#code): transaction [0xec2212fb2d35b72388507e5fe9c218c97512b943b5f28cedbfba35b7ac9bd224](https://etherscan.io/tx/0xec2212fb2d35b72388507e5fe9c218c97512b943b5f28cedbfba35b7ac9bd224), implementations: [0x3F6D970d30E1FFE9657aa8072C82dA10eef1c3D6](https://etherscan.io/address/0x3F6D970d30E1FFE9657aa8072C82dA10eef1c3D6#code) ([diff](https://disco.l2beat.com/diff/eth:0x96B171e4f8eCda0FFdD128b319Fa185b14f99D76/eth:0x3F6D970d30E1FFE9657aa8072C82dA10eef1c3D6)) - 2025-12-09 16:10 UTC, upgrade of [ACL](https://etherscan.io/address/0xcA2E8f1F656CD25C01F05d0b243Ab1ecd4a8ffb6#code): transaction [0x106ad2025c3f8b47cc0be8456e38f332345068a2c99ad8f12fc779c573676a05](https://etherscan.io/tx/0x106ad2025c3f8b47cc0be8456e38f332345068a2c99ad8f12fc779c573676a05), implementations: [0x96B171e4f8eCda0FFdD128b319Fa185b14f99D76](https://etherscan.io/address/0x96B171e4f8eCda0FFdD128b319Fa185b14f99D76#code) ([diff](https://disco.l2beat.com/diff/eth:0x4E35869D1e8106058d11b414876B735F62A325e2/eth:0x96B171e4f8eCda0FFdD128b319Fa185b14f99D76)) - 2025-11-19 10:53 UTC, upgrade of [ACL](https://etherscan.io/address/0xcA2E8f1F656CD25C01F05d0b243Ab1ecd4a8ffb6#code): transaction [0x99b4c55992ead5468d12e37b84c00ab6e7a9eb01380736586abab6300543faa0](https://etherscan.io/tx/0x99b4c55992ead5468d12e37b84c00ab6e7a9eb01380736586abab6300543faa0), implementations: [0x4E35869D1e8106058d11b414876B735F62A325e2](https://etherscan.io/address/0x4E35869D1e8106058d11b414876B735F62A325e2#code) ([diff](https://disco.l2beat.com/diff/eth:0xcD88EA408376C426308703e5808aa9f2e4cb09F2/eth:0x4E35869D1e8106058d11b414876B735F62A325e2)) - 2025-11-19 10:51 UTC, deployment of [ACL](https://etherscan.io/address/0xcA2E8f1F656CD25C01F05d0b243Ab1ecd4a8ffb6#code): transaction [0x858617542602611205744c3ae5f6905ac1bba19d3c08971de9c1a820a8a33f03](https://etherscan.io/tx/0x858617542602611205744c3ae5f6905ac1bba19d3c08971de9c1a820a8a33f03), implementations: [0xcD88EA408376C426308703e5808aa9f2e4cb09F2](https://etherscan.io/address/0xcD88EA408376C426308703e5808aa9f2e4cb09F2#code) Ethereum host-chain access-control registry for encrypted handles, storing handle allowances and delegation state for ciphertext references. Its public-decryption and user-delegation events are mirrored into the Gateway MultichainACL by coprocessor consensus. Since v0.4.0 users can delegate user decryption of their handles across all app contracts at once via a wildcard delegation. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### InputVerifier Addresses: [0xCe0FC2e05CFff1B719EFF7169f7D80Af770c8EA2](https://etherscan.io/address/0xCe0FC2e05CFff1B719EFF7169f7D80Af770c8EA2#code), [0xc4a1a1BaE73ca6aceb2FAa62ce08BfAbCd2323b6](https://etherscan.io/address/0xc4a1a1BaE73ca6aceb2FAa62ce08BfAbCd2323b6#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://etherscan.io/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: 1, Last upgrade: 11mo 8d ago, Avg upgrade interval: 5mo 19d) - 2025-11-19 10:54 UTC, upgrade of [InputVerifier](https://etherscan.io/address/0xCe0FC2e05CFff1B719EFF7169f7D80Af770c8EA2#code): transaction [0xd13b7d81bbe520a5184759a326747a536c47dd3d1d990754288f1e1ec325fc29](https://etherscan.io/tx/0xd13b7d81bbe520a5184759a326747a536c47dd3d1d990754288f1e1ec325fc29), implementations: [0xc4a1a1BaE73ca6aceb2FAa62ce08BfAbCd2323b6](https://etherscan.io/address/0xc4a1a1BaE73ca6aceb2FAa62ce08BfAbCd2323b6#code) ([diff](https://disco.l2beat.com/diff/eth:0xC94790325C61A7D98e90d835ea89777d64b17492/eth:0xc4a1a1BaE73ca6aceb2FAa62ce08BfAbCd2323b6)) - 2025-11-19 10:51 UTC, deployment of [InputVerifier](https://etherscan.io/address/0xCe0FC2e05CFff1B719EFF7169f7D80Af770c8EA2#code): transaction [0x4ca7637788e07eb8c1253055b3ce2e104c210fb289854b749c6cfedbd17b09cd](https://etherscan.io/tx/0x4ca7637788e07eb8c1253055b3ce2e104c210fb289854b749c6cfedbd17b09cd), implementations: [0xC94790325C61A7D98e90d835ea89777d64b17492](https://etherscan.io/address/0xC94790325C61A7D98e90d835ea89777d64b17492#code) Ethereum host-chain verifier for encrypted input attestations produced by the Zama Gateway InputVerification contract. The FHEVMExecutor calls it before accepting user-provided ciphertext handles. - Roles: - **getCoprocessorSigners**: EOA 39, EOA 40, EOA 48, EOA 49, EOA 71 - **lOwner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ArmUSDCpDepositBatcher Addresses: [0xd26F1546e7aFD5881F132967637957416802865A](https://etherscan.io/address/0xd26F1546e7aFD5881F132967637957416802865A#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### FcUSDTRedeemBatcher Addresses: [0xd2f3f554F995c12e2BfE5E155397cB6272643744](https://etherscan.io/address/0xd2f3f554F995c12e2BfE5E155397cB6272643744#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### PendleUSDCRedeemBatcher Addresses: [0xD671b562fdecE574da12295D1680F6a7a0af2963](https://etherscan.io/address/0xD671b562fdecE574da12295D1680F6a7a0af2963#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ProtocolConfig Addresses: [0xD8236B57394f90726b26aB25D38CeAC776E1a7C4](https://etherscan.io/address/0xD8236B57394f90726b26aB25D38CeAC776E1a7C4#code), [0x25c76298Fb4d15bFADce4798519a7B37ac0076E7](https://etherscan.io/address/0x25c76298Fb4d15bFADce4798519a7B37ac0076E7#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://etherscan.io/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: 1, Last upgrade: 2mo 14d ago, Avg upgrade interval: 1mo 9d) - 2026-08-10 11:50 UTC, upgrade of [ProtocolConfig](https://etherscan.io/address/0xD8236B57394f90726b26aB25D38CeAC776E1a7C4#code): transaction [0x3a73cbfe82d45d522aafa83acbc4a44dd89a2b409530e3a52d0076009a036c78](https://etherscan.io/tx/0x3a73cbfe82d45d522aafa83acbc4a44dd89a2b409530e3a52d0076009a036c78), implementations: [0x25c76298Fb4d15bFADce4798519a7B37ac0076E7](https://etherscan.io/address/0x25c76298Fb4d15bFADce4798519a7B37ac0076E7#code) ([diff](https://disco.l2beat.com/diff/eth:0xC94790325C61A7D98e90d835ea89777d64b17492/eth:0x25c76298Fb4d15bFADce4798519a7B37ac0076E7)) - 2026-08-05 14:50 UTC, deployment of [ProtocolConfig](https://etherscan.io/address/0xD8236B57394f90726b26aB25D38CeAC776E1a7C4#code): transaction [0x2b75b644a4fc5c175242df9efb03c0aa3f2be2c67cae2560e9ffc5333316c468](https://etherscan.io/tx/0x2b75b644a4fc5c175242df9efb03c0aa3f2be2c67cae2560e9ffc5333316c468), implementations: [0xC94790325C61A7D98e90d835ea89777d64b17492](https://etherscan.io/address/0xC94790325C61A7D98e90d835ea89777d64b17492#code) Ethereum host-chain registry of KMS node sets, per-context thresholds, and context lifecycle, introduced in the v0.3.0 KMSVerifier upgrade. A KMS context snapshots node transaction senders and signers; the four per-context thresholds (public decryption, user decryption, key generation, MPC) can be retuned by the ACL owner for any live context, including the current one. A newly created context becomes current immediately; older contexts remain selectable for public decryption proofs until destroyed. - Roles: - **currentKmsTxSenders**: EOA 38, EOA 42, EOA 43, EOA 44, EOA 45, EOA 51, EOA 52, EOA 57, EOA 59, EOA 60, EOA 62, EOA 63, EOA 69 - **getKmsSigners**: EOA 41, EOA 46, EOA 47, EOA 50, EOA 53, EOA 54, EOA 55, EOA 56, EOA 58, EOA 61, EOA 65, EOA 66, EOA 68 - **lOwner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### FHEVMExecutor Addresses: [0xD82385dADa1ae3E969447f20A3164F6213100e75](https://etherscan.io/address/0xD82385dADa1ae3E969447f20A3164F6213100e75#code), [0x0675c7BFA34aF170C49e6590A2cBf845c3029d7B](https://etherscan.io/address/0x0675c7BFA34aF170C49e6590A2cBf845c3029d7B#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://etherscan.io/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: 5, Last upgrade: 18d 16h ago, Avg upgrade interval: 1mo 26d) - 2026-10-05 16:11 UTC, upgrade of [FHEVMExecutor](https://etherscan.io/address/0xD82385dADa1ae3E969447f20A3164F6213100e75#code): transaction [0x63594740e6849980ffeecf14392b8b7f3e1e382c2e1ea023eb7a3df345f61328](https://etherscan.io/tx/0x63594740e6849980ffeecf14392b8b7f3e1e382c2e1ea023eb7a3df345f61328), implementations: [0x0675c7BFA34aF170C49e6590A2cBf845c3029d7B](https://etherscan.io/address/0x0675c7BFA34aF170C49e6590A2cBf845c3029d7B#code) ([diff](https://disco.l2beat.com/diff/eth:0xf444B2B5e45cD07F1E735122F53A2d70A8c81dB5/eth:0x0675c7BFA34aF170C49e6590A2cBf845c3029d7B)) - 2026-08-10 11:50 UTC, upgrade of [FHEVMExecutor](https://etherscan.io/address/0xD82385dADa1ae3E969447f20A3164F6213100e75#code): transaction [0x3a73cbfe82d45d522aafa83acbc4a44dd89a2b409530e3a52d0076009a036c78](https://etherscan.io/tx/0x3a73cbfe82d45d522aafa83acbc4a44dd89a2b409530e3a52d0076009a036c78), implementations: [0xf444B2B5e45cD07F1E735122F53A2d70A8c81dB5](https://etherscan.io/address/0xf444B2B5e45cD07F1E735122F53A2d70A8c81dB5#code) ([diff](https://disco.l2beat.com/diff/eth:0xC38aAfCBB73Fd4bd6f995275079C4Add9C1687E5/eth:0xf444B2B5e45cD07F1E735122F53A2d70A8c81dB5)) - 2026-07-10 08:34 UTC, upgrade of [FHEVMExecutor](https://etherscan.io/address/0xD82385dADa1ae3E969447f20A3164F6213100e75#code): transaction [0xec2212fb2d35b72388507e5fe9c218c97512b943b5f28cedbfba35b7ac9bd224](https://etherscan.io/tx/0xec2212fb2d35b72388507e5fe9c218c97512b943b5f28cedbfba35b7ac9bd224), implementations: [0xC38aAfCBB73Fd4bd6f995275079C4Add9C1687E5](https://etherscan.io/address/0xC38aAfCBB73Fd4bd6f995275079C4Add9C1687E5#code) ([diff](https://disco.l2beat.com/diff/eth:0xde3624dA8d9c45B57674cA0AcAC40630682211bb/eth:0xC38aAfCBB73Fd4bd6f995275079C4Add9C1687E5)) - 2026-03-21 08:53 UTC, upgrade of [FHEVMExecutor](https://etherscan.io/address/0xD82385dADa1ae3E969447f20A3164F6213100e75#code): transaction [0xc43696e8168a63f43cf6aa8bee9651d3170d311fd07fd6dda6e4e51e18fd2b44](https://etherscan.io/tx/0xc43696e8168a63f43cf6aa8bee9651d3170d311fd07fd6dda6e4e51e18fd2b44), implementations: [0xde3624dA8d9c45B57674cA0AcAC40630682211bb](https://etherscan.io/address/0xde3624dA8d9c45B57674cA0AcAC40630682211bb#code) ([diff](https://disco.l2beat.com/diff/eth:0x9a2886431fDd00449D4B02e3aF9C04a2608162e6/eth:0xde3624dA8d9c45B57674cA0AcAC40630682211bb)) - 2025-11-19 10:53 UTC, upgrade of [FHEVMExecutor](https://etherscan.io/address/0xD82385dADa1ae3E969447f20A3164F6213100e75#code): transaction [0xcf5069f2c6b06734e6a866122d122be50d2b3f0251cd8833cca13d6a5b5c1076](https://etherscan.io/tx/0xcf5069f2c6b06734e6a866122d122be50d2b3f0251cd8833cca13d6a5b5c1076), implementations: [0x9a2886431fDd00449D4B02e3aF9C04a2608162e6](https://etherscan.io/address/0x9a2886431fDd00449D4B02e3aF9C04a2608162e6#code) ([diff](https://disco.l2beat.com/diff/eth:0xC94790325C61A7D98e90d835ea89777d64b17492/eth:0x9a2886431fDd00449D4B02e3aF9C04a2608162e6)) - 2025-11-19 10:51 UTC, deployment of [FHEVMExecutor](https://etherscan.io/address/0xD82385dADa1ae3E969447f20A3164F6213100e75#code): transaction [0x43a0b2d4811549a09d7c1de5fd980ec9751343bb0b8babc3dcaf39a72cb10389](https://etherscan.io/tx/0x43a0b2d4811549a09d7c1de5fd980ec9751343bb0b8babc3dcaf39a72cb10389), implementations: [0xC94790325C61A7D98e90d835ea89777d64b17492](https://etherscan.io/address/0xC94790325C61A7D98e90d835ea89777d64b17492#code) FHEVM executor that accepts encrypted operation requests, accounts for computation usage, and stores ciphertext handles for operation results. v0.5.0 rejects plaintext scalar operands and trivial-encryption inputs that do not fit their FHE type, checks division by zero in the shared binary-operation path, and adds a checkHandleType view that asserts the type of an initialized handle. - Roles: - **lOwner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialWBTCWrapper Addresses: [0xd86aE89C089B380f064Fe01899B4071F1eb6Bb3d](https://etherscan.io/address/0xd86aE89C089B380f064Fe01899B4071F1eb6Bb3d#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 17:34 UTC, deployment of [ConfidentialWBTCWrapper](https://etherscan.io/address/0xd86aE89C089B380f064Fe01899B4071F1eb6Bb3d#code): transaction [0x2542e4587e213e5d97c9589fb98ce80648043a69f8e55417b045677f64bac13e](https://etherscan.io/tx/0x2542e4587e213e5d97c9589fb98ce80648043a69f8e55417b045677f64bac13e), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialWETHWrapper Addresses: [0xda9396b82634Ea99243cE51258B6A5Ae512D4893](https://etherscan.io/address/0xda9396b82634Ea99243cE51258B6A5Ae512D4893#code), [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: 3, Last upgrade: 1mo 29d ago, Avg upgrade interval: 2mo 15d) - 2026-08-25 15:59 UTC, upgrade of [ConfidentialWETHWrapper](https://etherscan.io/address/0xda9396b82634Ea99243cE51258B6A5Ae512D4893#code): transaction [0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0](https://etherscan.io/tx/0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0), implementations: [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) ([diff](https://disco.l2beat.com/diff/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5/eth:0x2ABad2203Eba104b52cf040cCcFA100Df15687F8)) - 2026-06-01 13:52 UTC, upgrade of [ConfidentialWETHWrapper](https://etherscan.io/address/0xda9396b82634Ea99243cE51258B6A5Ae512D4893#code): transaction [0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4](https://etherscan.io/tx/0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4), implementations: [0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5](https://etherscan.io/address/0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5#code) ([diff](https://disco.l2beat.com/diff/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5)) - 2026-05-12 07:42 UTC, upgrade of [ConfidentialWETHWrapper](https://etherscan.io/address/0xda9396b82634Ea99243cE51258B6A5Ae512D4893#code): transaction [0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32](https://etherscan.io/tx/0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32), implementations: [0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413](https://etherscan.io/address/0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413#code) ([diff](https://disco.l2beat.com/diff/eth:0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413)) - 2025-12-26 12:07 UTC, deployment of [ConfidentialWETHWrapper](https://etherscan.io/address/0xda9396b82634Ea99243cE51258B6A5Ae512D4893#code): transaction [0xf1d8c691a4db0974cbfb6d5e638ae9204d19a1733b65e6e41e934d9acf50e921](https://etherscan.io/tx/0xf1d8c691a4db0974cbfb6d5e638ae9204d19a1733b65e6e41e934d9acf50e921), implementations: [0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38](https://etherscan.io/address/0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### BbqUSDTDepositBatcher Addresses: [0xe1Bc291CF6fD71173dB73D58f1b25fC371B9Aa6D](https://etherscan.io/address/0xe1Bc291CF6fD71173dB73D58f1b25fC371B9Aa6D#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### PAPYDepositBatcher Addresses: [0xe396FD82a7Aa2F89C16505c1AD46e91F3bc7d3b0](https://etherscan.io/address/0xe396FD82a7Aa2F89C16505c1AD46e91F3bc7d3b0#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### FAUSDeRedeemBatcher Addresses: [0xE7761e3864b077728cafE4E18e9c8C23B6F896D0](https://etherscan.io/address/0xE7761e3864b077728cafE4E18e9c8C23B6F896D0#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialUSDCWrapper Addresses: [0xe978F22157048E5DB8E5d07971376e86671672B2](https://etherscan.io/address/0xe978F22157048E5DB8E5d07971376e86671672B2#code), [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: 3, Last upgrade: 1mo 29d ago, Avg upgrade interval: 2mo 15d) - 2026-08-25 15:59 UTC, upgrade of [ConfidentialUSDCWrapper](https://etherscan.io/address/0xe978F22157048E5DB8E5d07971376e86671672B2#code): transaction [0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0](https://etherscan.io/tx/0x55c55172da4c231406a41da3838bff87dc9b361c62f208fe0e60994a1b82b0b0), implementations: [0x2ABad2203Eba104b52cf040cCcFA100Df15687F8](https://etherscan.io/address/0x2ABad2203Eba104b52cf040cCcFA100Df15687F8#code) ([diff](https://disco.l2beat.com/diff/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5/eth:0x2ABad2203Eba104b52cf040cCcFA100Df15687F8)) - 2026-06-01 13:52 UTC, upgrade of [ConfidentialUSDCWrapper](https://etherscan.io/address/0xe978F22157048E5DB8E5d07971376e86671672B2#code): transaction [0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4](https://etherscan.io/tx/0x468f9a1433f795da68b88d6adb33f7180e86937d3f3437ec001173c52e7f35f4), implementations: [0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5](https://etherscan.io/address/0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5#code) ([diff](https://disco.l2beat.com/diff/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413/eth:0x5226fe30Fa7Bf20C1Cd33F125f77D0c42d3c23b5)) - 2026-05-12 07:42 UTC, upgrade of [ConfidentialUSDCWrapper](https://etherscan.io/address/0xe978F22157048E5DB8E5d07971376e86671672B2#code): transaction [0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32](https://etherscan.io/tx/0x5a09940b75c7fb272ce47bef53ac0282740b3278b3c0ce520240f10c90018f32), implementations: [0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413](https://etherscan.io/address/0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413#code) ([diff](https://disco.l2beat.com/diff/eth:0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38/eth:0xFF9e1Db30031Cb2B1b82E138beC70d7DE70d8413)) - 2025-12-26 12:06 UTC, deployment of [ConfidentialUSDCWrapper](https://etherscan.io/address/0xe978F22157048E5DB8E5d07971376e86671672B2#code): transaction [0xc4795dcb1554d8e2dd718bca62c2107f346954973072ad781bab27147f6a1664](https://etherscan.io/tx/0xc4795dcb1554d8e2dd718bca62c2107f346954973072ad781bab27147f6a1664), implementations: [0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38](https://etherscan.io/address/0x0309b4308A6AC121B9b3A960aC7Bc9bd8256cf38#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialAUSDWrapper Addresses: [0xEa9A15A29DD180c40442142CaeEfC491d37bfDB2](https://etherscan.io/address/0xEa9A15A29DD180c40442142CaeEfC491d37bfDB2#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 17:11 UTC, deployment of [ConfidentialAUSDWrapper](https://etherscan.io/address/0xEa9A15A29DD180c40442142CaeEfC491d37bfDB2#code): transaction [0x696d006e217f5ccda05c1bf61a575622009037f45ec832dac617dbce7edaf677](https://etherscan.io/tx/0x696d006e217f5ccda05c1bf61a575622009037f45ec832dac617dbce7edaf677), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ConfidentialTokenWrappersRegistry Addresses: [0xeb5015fF021DB115aCe010f23F55C2591059bBA0](https://etherscan.io/address/0xeb5015fF021DB115aCe010f23F55C2591059bBA0#code), [0xA989D32d7348e0Da8145C6282E839dfC4DB8954f](https://etherscan.io/address/0xA989D32d7348e0Da8145C6282E839dfC4DB8954f#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2025-12-26 11:58 UTC, deployment of [ConfidentialTokenWrappersRegistry](https://etherscan.io/address/0xeb5015fF021DB115aCe010f23F55C2591059bBA0#code): transaction [0x01110836e21dfbb28a25ebf7be8dd6e95b7f09ef006c10f4a108a60ec5cf0f69](https://etherscan.io/tx/0x01110836e21dfbb28a25ebf7be8dd6e95b7f09ef006c10f4a108a60ec5cf0f69), implementations: [0xA989D32d7348e0Da8145C6282E839dfC4DB8954f](https://etherscan.io/address/0xA989D32d7348e0Da8145C6282E839dfC4DB8954f#code) Registry for Zama confidential token wrappers. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### KMSGeneration Addresses: [0xf102cC9A9D2174630c394f5b7B7D63104E348daa](https://etherscan.io/address/0xf102cC9A9D2174630c394f5b7B7D63104E348daa#code), [0x5DD95e97287672b5d86dd3a427E855099E5AC940](https://etherscan.io/address/0x5DD95e97287672b5d86dd3a427E855099E5AC940#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://etherscan.io/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: 1, Last upgrade: 2mo 14d ago, Avg upgrade interval: 1mo 9d) - 2026-08-10 11:50 UTC, upgrade of [KMSGeneration](https://etherscan.io/address/0xf102cC9A9D2174630c394f5b7B7D63104E348daa#code): transaction [0x3a73cbfe82d45d522aafa83acbc4a44dd89a2b409530e3a52d0076009a036c78](https://etherscan.io/tx/0x3a73cbfe82d45d522aafa83acbc4a44dd89a2b409530e3a52d0076009a036c78), implementations: [0x5DD95e97287672b5d86dd3a427E855099E5AC940](https://etherscan.io/address/0x5DD95e97287672b5d86dd3a427E855099E5AC940#code) ([diff](https://disco.l2beat.com/diff/eth:0xC94790325C61A7D98e90d835ea89777d64b17492/eth:0x5DD95e97287672b5d86dd3a427E855099E5AC940)) - 2026-08-05 14:50 UTC, deployment of [KMSGeneration](https://etherscan.io/address/0xf102cC9A9D2174630c394f5b7B7D63104E348daa#code): transaction [0x4a00d0e3d19c4a81c0edc5272cbdad53572ac78d7ddc602cde1bfadb358209cd](https://etherscan.io/tx/0x4a00d0e3d19c4a81c0edc5272cbdad53572ac78d7ddc602cde1bfadb358209cd), implementations: [0xC94790325C61A7D98e90d835ea89777d64b17492](https://etherscan.io/address/0xC94790325C61A7D98e90d835ea89777d64b17492#code) Orchestrates FHE key and CRS generation on the Ethereum host chain, taking over the workflows removed from the Gateway KMSGeneration in v0.5.0. The ACL owner triggers and aborts generations; KMS node transaction senders registered in ProtocolConfig submit EIP-712-signed responses that activate a key or CRS once the ProtocolConfig key-generation threshold is reached. - Roles: - **lOwner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### RoxUSDCyRedeemBatcher Addresses: [0xf18Ad9F94a7EA994FdCbC5fD5C5Da326a341d8a8](https://etherscan.io/address/0xf18Ad9F94a7EA994FdCbC5fD5C5Da326a341d8a8#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ConfidentialArmcWBTCWrapper Addresses: [0xF921A5B0634f4236B21A4e948317abf9a2E86B6f](https://etherscan.io/address/0xF921A5B0634f4236B21A4e948317abf9a2E86B6f#code), [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-09-11 17:49 UTC, deployment of [ConfidentialArmcWBTCWrapper](https://etherscan.io/address/0xF921A5B0634f4236B21A4e948317abf9a2E86B6f#code): transaction [0xd938d016e57611121abc327202b921dc60afe8d505b7eaee1f0dd7dd67eca127](https://etherscan.io/tx/0xd938d016e57611121abc327202b921dc60afe8d505b7eaee1f0dd7dd67eca127), implementations: [0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD](https://etherscan.io/address/0x35E980f5Fe42BBA64C1ed0332AADACb98faBDDaD#code) ERC-20 wrapper that escrows an underlying token and issues confidential balances. It supports encrypted transfers, wrapping, unwrapping, local blocking, optional underlying-token denylist checks, owner-managed observers with wildcard decryption access, and pausing. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **owner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### ArmUSDTpDepositBatcher Addresses: [0xFb21951F291E742f24aB4F5c0c11e7BC8864142A](https://etherscan.io/address/0xFb21951F291E742f24aB4F5c0c11e7BC8864142A#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### BbqUSDTRedeemBatcher Addresses: [0xFc659Fa98AC62970cAe2C594Be32fe4F8b844Ea3](https://etherscan.io/address/0xFc659Fa98AC62970cAe2C594Be32fe4F8b844Ea3#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### BbqTGBPDepositBatcher Addresses: [0xfD899e481C7349d107005feFb1d19F33923b481A](https://etherscan.io/address/0xfD899e481C7349d107005feFb1d19F33923b481A#code) Batches confidential deposits into, or redemptions from, an ERC-4626 vault. Users join the current batch with an encrypted amount. A dispatched batch unwraps its total publicly, routes it through the vault and wraps the result, and each user claims an encrypted share of it. - Roles: - **owner**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig #### ZamaDeFiGovCore Addresses: [0x31bBD7a242A38372DE92CA304fE29C12C90A382C](https://etherscan.io/address/0x31bBD7a242A38372DE92CA304fE29C12C90A382C#code), [0x58C1F7Bc62Bb63fb137bc8F6d8ea6321a0501d29](https://etherscan.io/address/0x58C1F7Bc62Bb63fb137bc8F6d8ea6321a0501d29#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://etherscan.io/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2025-11-18 13:02 UTC, deployment of [ZamaDeFiGovCore](https://etherscan.io/address/0x31bBD7a242A38372DE92CA304fE29C12C90A382C#code): transaction [0x04ea5f577f53eb8c2b8aae76f2b3e3afe35a1f607a2fd21102b0463d047e8382](https://etherscan.io/tx/0x04ea5f577f53eb8c2b8aae76f2b3e3afe35a1f607a2fd21102b0463d047e8382), implementations: [0x58C1F7Bc62Bb63fb137bc8F6d8ea6321a0501d29](https://etherscan.io/address/0x58C1F7Bc62Bb63fb137bc8F6d8ea6321a0501d29#code) Aragon governance contract that stores permissions and executes action batches for whoever holds its execute permission. Member of ZamaGovMultisigA. - Roles: - **daoExecutors**: ZamaDeFiMultisig - **daoRootHolders**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig - **daoUpgraders**: ZamaDeFiGovCore; ultimately ZamaDeFiMultisig - **multisigSettingsAdmins**: ZamaDeFiGovCore, ZamaDeFiMultisig; ultimately ZamaDeFiMultisig - **multisigTargetConfigAdmins**: ZamaDeFiGovCore, ZamaDeFiMultisig; ultimately ZamaDeFiMultisig Can be upgraded by: ZamaDeFiMultisig with no delay Implementation used in: [Interfold CRISP](https://l2beat.com/privacy/projects/interfold-crisp#InterfoldGovCore) #### ZamaGovCore Addresses: [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code), [0x58C1F7Bc62Bb63fb137bc8F6d8ea6321a0501d29](https://etherscan.io/address/0x58C1F7Bc62Bb63fb137bc8F6d8ea6321a0501d29#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://etherscan.io/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2025-11-13 12:37 UTC, deployment of [ZamaGovCore](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code): transaction [0x98aff8abc8828132c15a9aa5d510766bc3358cb3a7ca98636306e94b0debefc1](https://etherscan.io/tx/0x98aff8abc8828132c15a9aa5d510766bc3358cb3a7ca98636306e94b0debefc1), implementations: [0x58C1F7Bc62Bb63fb137bc8F6d8ea6321a0501d29](https://etherscan.io/address/0x58C1F7Bc62Bb63fb137bc8F6d8ea6321a0501d29#code) Aragon governance contract that stores permissions and executes action batches for whoever holds its execute permission. - Roles: - **daoExecutors**: ZamaGovMultisigA, ZamaGovMultisigB - **daoRootHolders**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **daoUpgraders**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **multisigSettingsAdmins**: ZamaGovCore, ZamaGovMultisigA, ZamaGovMultisigB; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **multisigTargetConfigAdmins**: ZamaGovCore, ZamaGovMultisigA, ZamaGovMultisigB; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay Implementation used in: [Interfold CRISP](https://l2beat.com/privacy/projects/interfold-crisp#InterfoldGovCore) #### PauserSet Addresses: [0xbBfE1680b4a63ED05f7F80CE330BED7C992A586C](https://etherscan.io/address/0xbBfE1680b4a63ED05f7F80CE330BED7C992A586C#code) Maintains the pauser account set used in pause-control checks. - Roles: - **lOwner**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **pausers**: EOA 35, EOA 36, EOA 37, EOA 7, Safe; ultimately EOA 72, EOA 73 #### Staking (Coprocessor) Addresses: [0x7147485b892158f2B875f7aC5Ea48A9937C66AE8](https://etherscan.io/address/0x7147485b892158f2B875f7aC5Ea48A9937C66AE8#code), [0xeaBD906bE5E72F1a7949c8DC5E7Fb047Db7E7EAE](https://etherscan.io/address/0xeaBD906bE5E72F1a7949c8DC5E7Fb047Db7E7EAE#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-01-13 10:37 UTC, deployment of [Staking (Coprocessor)](https://etherscan.io/address/0x7147485b892158f2B875f7aC5Ea48A9937C66AE8#code): transaction [0x7d7fb37c635bb8e63cebe6d76e8b5e26a0f08cc4630f792b782d6a19f81a2cf2](https://etherscan.io/tx/0x7d7fb37c635bb8e63cebe6d76e8b5e26a0f08cc4630f792b782d6a19f81a2cf2), implementations: [0xeaBD906bE5E72F1a7949c8DC5E7Fb047Db7E7EAE](https://etherscan.io/address/0xeaBD906bE5E72F1a7949c8DC5E7Fb047Db7E7EAE#code) Staking contract that escrows ZAMA, issues non-transferable staked voting tokens, and mints protocol rewards to eligible stakers at a configurable reward rate. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **defaultAdmin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **managerRoleMembers**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay #### Staking (KMS) Addresses: [0xe9b176CCaA8840DC3b3567bb83e2cD2a6c36F4Ab](https://etherscan.io/address/0xe9b176CCaA8840DC3b3567bb83e2cD2a6c36F4Ab#code), [0xeaBD906bE5E72F1a7949c8DC5E7Fb047Db7E7EAE](https://etherscan.io/address/0xeaBD906bE5E72F1a7949c8DC5E7Fb047Db7E7EAE#code) (Implementation (Upgradable)), [0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3](https://etherscan.io/address/0xB6D69D5F334d8B97B194617B53c6aB62f8681Ef3#code) (Admin) **Past upgrades** (Count of upgrades: No upgrades, Last upgrade: N/A, Avg upgrade interval: N/A) - 2026-01-13 10:38 UTC, deployment of [Staking (KMS)](https://etherscan.io/address/0xe9b176CCaA8840DC3b3567bb83e2cD2a6c36F4Ab#code): transaction [0x049b7dbbe648f4de55b54b2950fadbb205342e8c99b3a9bf73333c8075033be3](https://etherscan.io/tx/0x049b7dbbe648f4de55b54b2950fadbb205342e8c99b3a9bf73333c8075033be3), implementations: [0xeaBD906bE5E72F1a7949c8DC5E7Fb047Db7E7EAE](https://etherscan.io/address/0xeaBD906bE5E72F1a7949c8DC5E7Fb047Db7E7EAE#code) Staking contract that escrows ZAMA, issues non-transferable staked voting tokens, and mints protocol rewards to eligible stakers at a configurable reward rate. - Roles: - **admin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **defaultAdmin**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB - **managerRoleMembers**: ZamaGovCore; ultimately ZamaGovMultisigA, ZamaGovMultisigB Can be upgraded by: ZamaGovMultisigB with no delay, ZamaGovMultisigA with no delay ### Zama Gateway #### MultichainACL Addresses: [0x055d9FD50a612A9027716ec8db663E7D68562468](https://explorer.mainnet.zama.org/address/0x055d9FD50a612A9027716ec8db663E7D68562468#code), [0x9B5bc299FC3C7AEFb6a215C1c156D5854B53b262](https://explorer.mainnet.zama.org/address/0x9B5bc299FC3C7AEFb6a215C1c156D5854B53b262#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://explorer.mainnet.zama.org/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: 2, Last upgrade: 10mo 18d ago, Avg upgrade interval: 3mo 23d) - 2025-12-09 14:48 UTC, upgrade of [MultichainACL](https://explorer.mainnet.zama.org/address/0x055d9FD50a612A9027716ec8db663E7D68562468#code): transaction [0x68ea8a8347f0b22ac7ddba487f9baeb69eeb393cb4aca98e86fed97a91a80cfa](https://explorer.mainnet.zama.org/tx/0x68ea8a8347f0b22ac7ddba487f9baeb69eeb393cb4aca98e86fed97a91a80cfa), implementations: [0x9B5bc299FC3C7AEFb6a215C1c156D5854B53b262](https://explorer.mainnet.zama.org/address/0x9B5bc299FC3C7AEFb6a215C1c156D5854B53b262#code) ([diff](https://disco.l2beat.com/diff/zama:0x55F101e2D2331119ceCD136A9f0E89643A163bB8/zama:0x9B5bc299FC3C7AEFb6a215C1c156D5854B53b262)) - 2025-11-18 22:28 UTC, upgrade of [MultichainACL](https://explorer.mainnet.zama.org/address/0x055d9FD50a612A9027716ec8db663E7D68562468#code): transaction [0x163e2453c6431119ace5b38c524f4e47892e7661bf0e08319785032654a31c05](https://explorer.mainnet.zama.org/tx/0x163e2453c6431119ace5b38c524f4e47892e7661bf0e08319785032654a31c05), implementations: [0x55F101e2D2331119ceCD136A9f0E89643A163bB8](https://explorer.mainnet.zama.org/address/0x55F101e2D2331119ceCD136A9f0E89643A163bB8#code) ([diff](https://disco.l2beat.com/diff/zama:0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500/zama:0x55F101e2D2331119ceCD136A9f0E89643A163bB8)) - 2025-11-18 22:27 UTC, deployment of [MultichainACL](https://explorer.mainnet.zama.org/address/0x055d9FD50a612A9027716ec8db663E7D68562468#code): transaction [0x9c8e29cac9aa9f2d93f9b00f8814d25c86565a296a7193be70ca554a4273d845](https://explorer.mainnet.zama.org/tx/0x9c8e29cac9aa9f2d93f9b00f8814d25c86565a296a7193be70ca554a4273d845), implementations: [0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500](https://explorer.mainnet.zama.org/address/0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500#code) Gateway-side ACL mirror that records coprocessor consensus for host-chain public decryption permissions, account handle allowances, and delegated user-decryption access. For Ethereum, it mirrors ACL events emitted by the L1 ACL contract registered in GatewayConfig. - Roles: - **admin**: EOA 1 - **gatewayCoprocessorTxSenders**: EOA 2, EOA 3, EOA 4, EOA 5, EOA 6 - **gatewayOwner**: SafeL2 Can be upgraded by: EOA 1 with no delay, SafeL2 with no delay #### Decryption Addresses: [0x0f6024a97684f7d90ddb0fAAD79cB15F2C888D24](https://explorer.mainnet.zama.org/address/0x0f6024a97684f7d90ddb0fAAD79cB15F2C888D24#code), [0x86F8e9626cCff3f2eB3dA248F33DfF43531DBFD8](https://explorer.mainnet.zama.org/address/0x86F8e9626cCff3f2eB3dA248F33DfF43531DBFD8#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://explorer.mainnet.zama.org/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: 4, Last upgrade: 2mo 18d ago, Avg upgrade interval: 2mo 7d) - 2026-08-06 17:11 UTC, upgrade of [Decryption](https://explorer.mainnet.zama.org/address/0x0f6024a97684f7d90ddb0fAAD79cB15F2C888D24#code): transaction [0x350755101263bed64dc377ef6f3ef07f95f97918b689967a60ee625d0d9e025c](https://explorer.mainnet.zama.org/tx/0x350755101263bed64dc377ef6f3ef07f95f97918b689967a60ee625d0d9e025c), implementations: [0x86F8e9626cCff3f2eB3dA248F33DfF43531DBFD8](https://explorer.mainnet.zama.org/address/0x86F8e9626cCff3f2eB3dA248F33DfF43531DBFD8#code) ([diff](https://disco.l2beat.com/diff/zama:0x943CEfD1A00d3ae5b298bB10D4EddA09B279C8B0/zama:0x86F8e9626cCff3f2eB3dA248F33DfF43531DBFD8)) - 2026-07-10 08:15 UTC, upgrade of [Decryption](https://explorer.mainnet.zama.org/address/0x0f6024a97684f7d90ddb0fAAD79cB15F2C888D24#code): transaction [0x5d63d8d9bf4790e7169cd1d6c440262aad29368190932f823377df311f389217](https://explorer.mainnet.zama.org/tx/0x5d63d8d9bf4790e7169cd1d6c440262aad29368190932f823377df311f389217), implementations: [0x943CEfD1A00d3ae5b298bB10D4EddA09B279C8B0](https://explorer.mainnet.zama.org/address/0x943CEfD1A00d3ae5b298bB10D4EddA09B279C8B0#code) ([diff](https://disco.l2beat.com/diff/zama:0xe691cE3d7a71E2eC9E96AF5bdD263FfEB124F8dE/zama:0x943CEfD1A00d3ae5b298bB10D4EddA09B279C8B0)) - 2025-12-09 14:39 UTC, upgrade of [Decryption](https://explorer.mainnet.zama.org/address/0x0f6024a97684f7d90ddb0fAAD79cB15F2C888D24#code): transaction [0x0dd6bc720fd0c2158c1720e26292d3df770b9ba6613ebcce2c292bfbcc1eff08](https://explorer.mainnet.zama.org/tx/0x0dd6bc720fd0c2158c1720e26292d3df770b9ba6613ebcce2c292bfbcc1eff08), implementations: [0xe691cE3d7a71E2eC9E96AF5bdD263FfEB124F8dE](https://explorer.mainnet.zama.org/address/0xe691cE3d7a71E2eC9E96AF5bdD263FfEB124F8dE#code) ([diff](https://disco.l2beat.com/diff/zama:0x99c454f6c59b66C5B39D85DEA99565A78e597b7c/zama:0xe691cE3d7a71E2eC9E96AF5bdD263FfEB124F8dE)) - 2025-11-18 22:28 UTC, upgrade of [Decryption](https://explorer.mainnet.zama.org/address/0x0f6024a97684f7d90ddb0fAAD79cB15F2C888D24#code): transaction [0xb69c7b64e7ed4ccacf621edd25059e062d63cdebd71a8a2f1dcc4fbe7dd0b6f4](https://explorer.mainnet.zama.org/tx/0xb69c7b64e7ed4ccacf621edd25059e062d63cdebd71a8a2f1dcc4fbe7dd0b6f4), implementations: [0x99c454f6c59b66C5B39D85DEA99565A78e597b7c](https://explorer.mainnet.zama.org/address/0x99c454f6c59b66C5B39D85DEA99565A78e597b7c#code) ([diff](https://disco.l2beat.com/diff/zama:0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500/zama:0x99c454f6c59b66C5B39D85DEA99565A78e597b7c)) - 2025-11-18 22:27 UTC, deployment of [Decryption](https://explorer.mainnet.zama.org/address/0x0f6024a97684f7d90ddb0fAAD79cB15F2C888D24#code): transaction [0x967e084e69cce0203af66ac59ebea6c1433877322f9c8a01da30b5fbf1ba5cb0](https://explorer.mainnet.zama.org/tx/0x967e084e69cce0203af66ac59ebea6c1433877322f9c8a01da30b5fbf1ba5cb0), implementations: [0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500](https://explorer.mainnet.zama.org/address/0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500#code) Gateway contract that orchestrates public and user decryption requests and checks committed ciphertext material. Each request pins a KMS context at request time (explicitly through extraData or the then-current context) and rejects unknown or destroyed contexts; responses must reference the pinned context. Requests recorded before v0.5.0 fall back to the context declared by each response. KMS nodes enforce host-chain ACL state offchain, and Ethereum KMSVerifier verifies public results against this contract's EIP-712 domain. - Roles: - **admin**: EOA 1 - **gatewayKmsSigners**: EOA 10, EOA 15, EOA 16, EOA 17, EOA 20, EOA 21, EOA 22, EOA 23, EOA 25, EOA 28, EOA 31, EOA 32, EOA 33 - **gatewayKmsTxSenders**: EOA 11, EOA 12, EOA 13, EOA 14, EOA 18, EOA 19, EOA 24, EOA 26, EOA 27, EOA 29, EOA 30, EOA 34, EOA 9 - **gatewayOwner**: SafeL2 Can be upgraded by: EOA 1 with no delay, SafeL2 with no delay #### KMSGeneration Addresses: [0x290947F9fed2d91fdB22f35E162aDfA744b7aEe3](https://explorer.mainnet.zama.org/address/0x290947F9fed2d91fdB22f35E162aDfA744b7aEe3#code), [0x68CEb7709aC1bcD60e36c4144a243A445A2cb076](https://explorer.mainnet.zama.org/address/0x68CEb7709aC1bcD60e36c4144a243A445A2cb076#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://explorer.mainnet.zama.org/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: 3, Last upgrade: 2mo 18d ago, Avg upgrade interval: 2mo 24d) - 2026-08-06 17:11 UTC, upgrade of [KMSGeneration](https://explorer.mainnet.zama.org/address/0x290947F9fed2d91fdB22f35E162aDfA744b7aEe3#code): transaction [0x350755101263bed64dc377ef6f3ef07f95f97918b689967a60ee625d0d9e025c](https://explorer.mainnet.zama.org/tx/0x350755101263bed64dc377ef6f3ef07f95f97918b689967a60ee625d0d9e025c), implementations: [0x68CEb7709aC1bcD60e36c4144a243A445A2cb076](https://explorer.mainnet.zama.org/address/0x68CEb7709aC1bcD60e36c4144a243A445A2cb076#code) ([diff](https://disco.l2beat.com/diff/zama:0x3d345DFc156381E6060Cdf652cDf7f92DF94fAFF/zama:0x68CEb7709aC1bcD60e36c4144a243A445A2cb076)) - 2025-12-09 14:44 UTC, upgrade of [KMSGeneration](https://explorer.mainnet.zama.org/address/0x290947F9fed2d91fdB22f35E162aDfA744b7aEe3#code): transaction [0xf37c1f04d35127d17f35fda57e53b68bc8063c1d3b08a05bdbbfec12eb7e447d](https://explorer.mainnet.zama.org/tx/0xf37c1f04d35127d17f35fda57e53b68bc8063c1d3b08a05bdbbfec12eb7e447d), implementations: [0x3d345DFc156381E6060Cdf652cDf7f92DF94fAFF](https://explorer.mainnet.zama.org/address/0x3d345DFc156381E6060Cdf652cDf7f92DF94fAFF#code) ([diff](https://disco.l2beat.com/diff/zama:0x24Aa237cE5FfD591059Bbd78014F8540cC4864a7/zama:0x3d345DFc156381E6060Cdf652cDf7f92DF94fAFF)) - 2025-11-18 22:28 UTC, upgrade of [KMSGeneration](https://explorer.mainnet.zama.org/address/0x290947F9fed2d91fdB22f35E162aDfA744b7aEe3#code): transaction [0xc25eaf0d69185160935a98ef009505fbeb16e04a46d7307abeccc1e06e3105be](https://explorer.mainnet.zama.org/tx/0xc25eaf0d69185160935a98ef009505fbeb16e04a46d7307abeccc1e06e3105be), implementations: [0x24Aa237cE5FfD591059Bbd78014F8540cC4864a7](https://explorer.mainnet.zama.org/address/0x24Aa237cE5FfD591059Bbd78014F8540cC4864a7#code) ([diff](https://disco.l2beat.com/diff/zama:0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500/zama:0x24Aa237cE5FfD591059Bbd78014F8540cC4864a7)) - 2025-11-18 22:27 UTC, deployment of [KMSGeneration](https://explorer.mainnet.zama.org/address/0x290947F9fed2d91fdB22f35E162aDfA744b7aEe3#code): transaction [0xf3172c87f8513e0f7215aaf0e61496e4fbf4e44c40f51562db8f48794771bd5f](https://explorer.mainnet.zama.org/tx/0xf3172c87f8513e0f7215aaf0e61496e4fbf4e44c40f51562db8f48794771bd5f), implementations: [0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500](https://explorer.mainnet.zama.org/address/0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500#code) View-only gateway contract retaining historical queries for previously generated FHE keys and CRS materials. All state-changing key-generation, CRS-generation, PRSS, and key-resharing workflows were removed in v0.5.0 after their move to Ethereum. - Roles: - **admin**: EOA 1 - **gatewayOwner**: SafeL2 Can be upgraded by: EOA 1 with no delay, SafeL2 with no delay #### ProtocolPayment Addresses: [0x7E179E45E5fe0a21015Be25185363B4F2F2F7e89](https://explorer.mainnet.zama.org/address/0x7E179E45E5fe0a21015Be25185363B4F2F2F7e89#code), [0xEbaC23dc56b1339558cdbdf7dEf245c80d727075](https://explorer.mainnet.zama.org/address/0xEbaC23dc56b1339558cdbdf7dEf245c80d727075#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://explorer.mainnet.zama.org/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: 1, Last upgrade: 10mo 18d ago, Avg upgrade interval: 5mo 9d) - 2025-12-09 14:17 UTC, upgrade of [ProtocolPayment](https://explorer.mainnet.zama.org/address/0x7E179E45E5fe0a21015Be25185363B4F2F2F7e89#code): transaction [0xf7acc60460f2adce48c4a1e3f7d630d9612d18008188ec4b95ebdfa2419cc792](https://explorer.mainnet.zama.org/tx/0xf7acc60460f2adce48c4a1e3f7d630d9612d18008188ec4b95ebdfa2419cc792), implementations: [0xEbaC23dc56b1339558cdbdf7dEf245c80d727075](https://explorer.mainnet.zama.org/address/0xEbaC23dc56b1339558cdbdf7dEf245c80d727075#code) ([diff](https://disco.l2beat.com/diff/zama:0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500/zama:0xEbaC23dc56b1339558cdbdf7dEf245c80d727075)) - 2025-12-09 14:15 UTC, deployment of [ProtocolPayment](https://explorer.mainnet.zama.org/address/0x7E179E45E5fe0a21015Be25185363B4F2F2F7e89#code): transaction [0xb922a7b5126ca4dff4364743c33110d5219d7f2978a815e20a72d6f0068a88bf](https://explorer.mainnet.zama.org/tx/0xb922a7b5126ca4dff4364743c33110d5219d7f2978a815e20a72d6f0068a88bf), implementations: [0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500](https://explorer.mainnet.zama.org/address/0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500#code) Gateway fee contract that charges ZAMA fees for encrypted input verification, public decryption, and user decryption requests, then forwards the collected fees to the configured fee burner sender. - Roles: - **admin**: EOA 1 - **gatewayOwner**: SafeL2 Can be upgraded by: EOA 1 with no delay, SafeL2 with no delay #### InputVerification Addresses: [0xcB1bB072f38bdAF0F328CdEf1Fc6eDa1DF029287](https://explorer.mainnet.zama.org/address/0xcB1bB072f38bdAF0F328CdEf1Fc6eDa1DF029287#code), [0xa9A3eA1cdD078a79bB31c3a284a4abA80bd0E8d8](https://explorer.mainnet.zama.org/address/0xa9A3eA1cdD078a79bB31c3a284a4abA80bd0E8d8#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://explorer.mainnet.zama.org/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: 4, Last upgrade: 15d 23h ago, Avg upgrade interval: 2mo 7d) - 2026-10-08 10:05 UTC, upgrade of [InputVerification](https://explorer.mainnet.zama.org/address/0xcB1bB072f38bdAF0F328CdEf1Fc6eDa1DF029287#code): transaction [0x2dc9ffacebc169a90ee746b5818b83d470bf7dbc5855c1ae05268b76caf604aa](https://explorer.mainnet.zama.org/tx/0x2dc9ffacebc169a90ee746b5818b83d470bf7dbc5855c1ae05268b76caf604aa), implementations: [0xa9A3eA1cdD078a79bB31c3a284a4abA80bd0E8d8](https://explorer.mainnet.zama.org/address/0xa9A3eA1cdD078a79bB31c3a284a4abA80bd0E8d8#code) ([diff](https://disco.l2beat.com/diff/zama:0xf9f0F5ef8301CF1573EBe0F45E13A4CabB621821/zama:0xa9A3eA1cdD078a79bB31c3a284a4abA80bd0E8d8)) - 2026-08-06 17:11 UTC, upgrade of [InputVerification](https://explorer.mainnet.zama.org/address/0xcB1bB072f38bdAF0F328CdEf1Fc6eDa1DF029287#code): transaction [0x350755101263bed64dc377ef6f3ef07f95f97918b689967a60ee625d0d9e025c](https://explorer.mainnet.zama.org/tx/0x350755101263bed64dc377ef6f3ef07f95f97918b689967a60ee625d0d9e025c), implementations: [0xf9f0F5ef8301CF1573EBe0F45E13A4CabB621821](https://explorer.mainnet.zama.org/address/0xf9f0F5ef8301CF1573EBe0F45E13A4CabB621821#code) ([diff](https://disco.l2beat.com/diff/zama:0xA08c4367eB984945da2dad5BF7d94D1B2863197A/zama:0xf9f0F5ef8301CF1573EBe0F45E13A4CabB621821)) - 2025-12-09 14:41 UTC, upgrade of [InputVerification](https://explorer.mainnet.zama.org/address/0xcB1bB072f38bdAF0F328CdEf1Fc6eDa1DF029287#code): transaction [0x1be878372ad005809903c742e7c3ea908bfcaa1f1e63ebac2eeb0834d499fcc7](https://explorer.mainnet.zama.org/tx/0x1be878372ad005809903c742e7c3ea908bfcaa1f1e63ebac2eeb0834d499fcc7), implementations: [0xA08c4367eB984945da2dad5BF7d94D1B2863197A](https://explorer.mainnet.zama.org/address/0xA08c4367eB984945da2dad5BF7d94D1B2863197A#code) ([diff](https://disco.l2beat.com/diff/zama:0x7bfF0c5aEF31a8AB7116594A492cBEe9a829fF74/zama:0xA08c4367eB984945da2dad5BF7d94D1B2863197A)) - 2025-11-18 22:28 UTC, upgrade of [InputVerification](https://explorer.mainnet.zama.org/address/0xcB1bB072f38bdAF0F328CdEf1Fc6eDa1DF029287#code): transaction [0x8d530fcff93bb112195829d27e90eedf65f122f4262b809a5d57fbd9fcc1ea19](https://explorer.mainnet.zama.org/tx/0x8d530fcff93bb112195829d27e90eedf65f122f4262b809a5d57fbd9fcc1ea19), implementations: [0x7bfF0c5aEF31a8AB7116594A492cBEe9a829fF74](https://explorer.mainnet.zama.org/address/0x7bfF0c5aEF31a8AB7116594A492cBEe9a829fF74#code) ([diff](https://disco.l2beat.com/diff/zama:0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500/zama:0x7bfF0c5aEF31a8AB7116594A492cBEe9a829fF74)) - 2025-11-18 22:27 UTC, deployment of [InputVerification](https://explorer.mainnet.zama.org/address/0xcB1bB072f38bdAF0F328CdEf1Fc6eDa1DF029287#code): transaction [0x880800809b7723cf723efc897cdeb0f9a560530317f1281a61601851f1ef0449](https://explorer.mainnet.zama.org/tx/0x880800809b7723cf723efc897cdeb0f9a560530317f1281a61601851f1ef0449), implementations: [0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500](https://explorer.mainnet.zama.org/address/0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500#code) Gateway contract that receives encrypted input verification requests from registered and enabled host chains, collects coprocessor responses, and emits a threshold-signed attestation once coprocessor consensus is reached. Since v0.5.0, if GatewayConfig designates a priority coprocessor, that coprocessor's single response finalizes verification or rejection and the attestation carries only its signature. Ethereum InputVerifier verifies attestations against this contract's EIP-712 domain. - Roles: - **admin**: EOA 1 - **gatewayCoprocessorSigners**: EOA 2, EOA 3, EOA 4, EOA 5, EOA 6 - **gatewayCoprocessorTxSenders**: EOA 2, EOA 3, EOA 4, EOA 5, EOA 6 - **gatewayOwner**: SafeL2 - **gatewayPriorityCoprocessorTxSender**: EOA 1 Can be upgraded by: EOA 1 with no delay, SafeL2 with no delay #### CiphertextCommits Addresses: [0xd82cF70FC102028cd01acB87D0E107780ae4F41F](https://explorer.mainnet.zama.org/address/0xd82cF70FC102028cd01acB87D0E107780ae4F41F#code), [0x81a6CBD6B1bb0296BfFd38AD8584918640F35948](https://explorer.mainnet.zama.org/address/0x81a6CBD6B1bb0296BfFd38AD8584918640F35948#code) (Implementation (Upgradable)), [0x0000000000000000000000000000000000000000](https://explorer.mainnet.zama.org/address/0x0000000000000000000000000000000000000000#code) (Admin) **Past upgrades** (Count of upgrades: 4, Last upgrade: 15d 23h ago, Avg upgrade interval: 2mo 7d) - 2026-10-08 10:05 UTC, upgrade of [CiphertextCommits](https://explorer.mainnet.zama.org/address/0xd82cF70FC102028cd01acB87D0E107780ae4F41F#code): transaction [0x2dc9ffacebc169a90ee746b5818b83d470bf7dbc5855c1ae05268b76caf604aa](https://explorer.mainnet.zama.org/tx/0x2dc9ffacebc169a90ee746b5818b83d470bf7dbc5855c1ae05268b76caf604aa), implementations: [0x81a6CBD6B1bb0296BfFd38AD8584918640F35948](https://explorer.mainnet.zama.org/address/0x81a6CBD6B1bb0296BfFd38AD8584918640F35948#code) ([diff](https://disco.l2beat.com/diff/zama:0xB373Ae42736E3C266D4A5D090c00c7f0Bda06622/zama:0x81a6CBD6B1bb0296BfFd38AD8584918640F35948)) - 2026-08-06 17:11 UTC, upgrade of [CiphertextCommits](https://explorer.mainnet.zama.org/address/0xd82cF70FC102028cd01acB87D0E107780ae4F41F#code): transaction [0x350755101263bed64dc377ef6f3ef07f95f97918b689967a60ee625d0d9e025c](https://explorer.mainnet.zama.org/tx/0x350755101263bed64dc377ef6f3ef07f95f97918b689967a60ee625d0d9e025c), implementations: [0xB373Ae42736E3C266D4A5D090c00c7f0Bda06622](https://explorer.mainnet.zama.org/address/0xB373Ae42736E3C266D4A5D090c00c7f0Bda06622#code) ([diff](https://disco.l2beat.com/diff/zama:0xC92f2dc7eF79728ed32e745020EF463270217e78/zama:0xB373Ae42736E3C266D4A5D090c00c7f0Bda06622)) - 2025-12-09 14:37 UTC, upgrade of [CiphertextCommits](https://explorer.mainnet.zama.org/address/0xd82cF70FC102028cd01acB87D0E107780ae4F41F#code): transaction [0x36d9d960dd681eff0022eac04f63b06c514b54296f7c248ea6041b785ef59977](https://explorer.mainnet.zama.org/tx/0x36d9d960dd681eff0022eac04f63b06c514b54296f7c248ea6041b785ef59977), implementations: [0xC92f2dc7eF79728ed32e745020EF463270217e78](https://explorer.mainnet.zama.org/address/0xC92f2dc7eF79728ed32e745020EF463270217e78#code) ([diff](https://disco.l2beat.com/diff/zama:0xd550654F0cD1B56e1C887569A5F7b5e643Fd3e47/zama:0xC92f2dc7eF79728ed32e745020EF463270217e78)) - 2025-11-18 22:28 UTC, upgrade of [CiphertextCommits](https://explorer.mainnet.zama.org/address/0xd82cF70FC102028cd01acB87D0E107780ae4F41F#code): transaction [0x23f1f4743b50b67226581c9755326253e470e0784661f65766f8a02f8db6e770](https://explorer.mainnet.zama.org/tx/0x23f1f4743b50b67226581c9755326253e470e0784661f65766f8a02f8db6e770), implementations: [0xd550654F0cD1B56e1C887569A5F7b5e643Fd3e47](https://explorer.mainnet.zama.org/address/0xd550654F0cD1B56e1C887569A5F7b5e643Fd3e47#code) ([diff](https://disco.l2beat.com/diff/zama:0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500/zama:0xd550654F0cD1B56e1C887569A5F7b5e643Fd3e47)) - 2025-11-18 22:27 UTC, deployment of [CiphertextCommits](https://explorer.mainnet.zama.org/address/0xd82cF70FC102028cd01acB87D0E107780ae4F41F#code): transaction [0xd9fa2324e7460bb03aab530a0aa72d0d9bd6e029b6dc4cba601584558184a475](https://explorer.mainnet.zama.org/tx/0xd9fa2324e7460bb03aab530a0aa72d0d9bd6e029b6dc4cba601584558184a475), implementations: [0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500](https://explorer.mainnet.zama.org/address/0x74adf0e5324Ba67d51872c27A025f1eEC0DaA500#code) Gateway contract that stores ciphertext and SNS ciphertext digests after coprocessor consensus, allowing decryption requests to reference committed ciphertext material. Digests referencing unregistered or disabled host chains are rejected. Since v0.5.0, if GatewayConfig designates a priority coprocessor, that coprocessor's single submission commits the material on its own. - Roles: - **admin**: EOA 1 - **gatewayCoprocessorTxSenders**: EOA 2, EOA 3, EOA 4, EOA 5, EOA 6 - **gatewayOwner**: SafeL2 - **gatewayPriorityCoprocessorTxSender**: EOA 1 Can be upgraded by: EOA 1 with no delay, SafeL2 with no delay #### GatewayConfig Addresses: [0xDE537Be194777A56f8B19d14079E6a78249390ab](https://explorer.mainnet.zama.org/address/0xDE537Be194777A56f8B19d14079E6a78249390ab#code), [0x94209410f6CAa4A8c6Fd7ED4AB67560eD8A3002C](https://explorer.mainnet.zama.org/address/0x94209410f6CAa4A8c6Fd7ED4AB67560eD8A3002C#code) (Implementation (Upgradable)), [0x5f0F86BcEad6976711C9B131bCa5D30E767fe2bE](https://explorer.mainnet.zama.org/address/0x5f0F86BcEad6976711C9B131bCa5D30E767fe2bE#code) (Admin) **Past upgrades** (Count of upgrades: 5, Last upgrade: 15d 23h ago, Avg upgrade interval: 1mo 26d) - 2026-10-08 10:05 UTC, upgrade of [GatewayConfig](https://explorer.mainnet.zama.org/address/0xDE537Be194777A56f8B19d14079E6a78249390ab#code): transaction [0x2dc9ffacebc169a90ee746b5818b83d470bf7dbc5855c1ae05268b76caf604aa](https://explorer.mainnet.zama.org/tx/0x2dc9ffacebc169a90ee746b5818b83d470bf7dbc5855c1ae05268b76caf604aa), implementations: [0x94209410f6CAa4A8c6Fd7ED4AB67560eD8A3002C](https://explorer.mainnet.zama.org/address/0x94209410f6CAa4A8c6Fd7ED4AB67560eD8A3002C#code) ([diff](https://disco.l2beat.com/diff/zama:0x1950aD98e834f6c07553365196d4CddeD179c536/zama:0x94209410f6CAa4A8c6Fd7ED4AB67560eD8A3002C)) - 2026-08-06 17:11 UTC, upgrade of [GatewayConfig](https://explorer.mainnet.zama.org/address/0xDE537Be194777A56f8B19d14079E6a78249390ab#code): transaction [0x350755101263bed64dc377ef6f3ef07f95f97918b689967a60ee625d0d9e025c](https://explorer.mainnet.zama.org/tx/0x350755101263bed64dc377ef6f3ef07f95f97918b689967a60ee625d0d9e025c), implementations: [0x1950aD98e834f6c07553365196d4CddeD179c536](https://explorer.mainnet.zama.org/address/0x1950aD98e834f6c07553365196d4CddeD179c536#code) ([diff](https://disco.l2beat.com/diff/zama:0x2294E3C211238Ae31E2824576CCd7f996CC7Dc00/zama:0x1950aD98e834f6c07553365196d4CddeD179c536)) - 2026-07-10 08:15 UTC, upgrade of [GatewayConfig](https://explorer.mainnet.zama.org/address/0xDE537Be194777A56f8B19d14079E6a78249390ab#code): transaction [0x5d63d8d9bf4790e7169cd1d6c440262aad29368190932f823377df311f389217](https://explorer.mainnet.zama.org/tx/0x5d63d8d9bf4790e7169cd1d6c440262aad29368190932f823377df311f389217), implementations: [0x2294E3C211238Ae31E2824576CCd7f996CC7Dc00](https://explorer.mainnet.zama.org/address/0x2294E3C211238Ae31E2824576CCd7f996CC7Dc00#code) ([diff](https://disco.l2beat.com/diff/zama:0xDa97dfc327349F7C1333610C80cc20971eD0eb0f/zama:0x2294E3C211238Ae31E2824576CCd7f996CC7Dc00)) - 2025-12-09 14:46 UTC, upgrade of [GatewayConfig](https://explorer.mainnet.zama.org/address/0xDE537Be194777A56f8B19d14079E6a78249390ab#code): transaction [0xd05685ebd7a7a76a93963ade6cabe69887f3e0f2160eb1a122abc9eb347550f5](https://explorer.mainnet.zama.org/tx/0xd05685ebd7a7a76a93963ade6cabe69887f3e0f2160eb1a122abc9eb347550f5), implementations: [0xDa97dfc327349F7C1333610C80cc20971eD0eb0f](https://explorer.mainnet.zama.org/address/0xDa97dfc327349F7C1333610C80cc20971eD0eb0f#code) ([diff](https://disco.l2beat.com/diff/zama:0x96C188a54E880Fe86741b8ef19C429234b72A9Af/zama:0xDa97dfc327349F7C1333610C80cc20971eD0eb0f)) - 2025-11-18 22:28 UTC, upgrade of [GatewayConfig](https://explorer.mainnet.zama.org/address/0xDE537Be194777A56f8B19d14079E6a78249390ab#code): transaction [0x30ac1d1808d4dfbad21cad05b50d62b861cf578cd97b43693488ad269287f608](https://explorer.mainnet.zama.org/tx/0x30ac1d1808d4dfbad21cad05b50d62b861cf578cd97b43693488ad269287f608), implementations: [0x96C188a54E880Fe86741b8ef19C429234b72A9Af](https://explorer.mainnet.zama.org/address/0x96C188a54E880Fe86741b8ef19C429234b72A9Af#code) ([diff](https://disco.l2beat.com/diff/zama:0xf0EfBe52c0a3B07718D5eEFfb9FCa9E442988BeF/zama:0x96C188a54E880Fe86741b8ef19C429234b72A9Af)) - 2025-11-18 22:27 UTC, deployment of [GatewayConfig](https://explorer.mainnet.zama.org/address/0xDE537Be194777A56f8B19d14079E6a78249390ab#code): transaction [0x716ebd474f8714fb9e32f2eec6bb28083e1fe7e0185494fab8ce0ca70a26339e](https://explorer.mainnet.zama.org/tx/0x716ebd474f8714fb9e32f2eec6bb28083e1fe7e0185494fab8ce0ca70a26339e), implementations: [0xf0EfBe52c0a3B07718D5eEFfb9FCa9E442988BeF](https://explorer.mainnet.zama.org/address/0xf0EfBe52c0a3B07718D5eEFfb9FCa9E442988BeF#code) Central configuration contract for the Zama Gateway. A KMS context snapshots node transaction senders, signers, and workflow thresholds; the owner can create new contexts, retune the thresholds of any live context, and destroy non-current contexts, which immediately invalidates them for decryption. Registered host chains can be disabled, re-enabled, or removed by the owner. Since v0.7.0 the owner can designate a priority coprocessor transaction sender whose single response finalizes coprocessor consensus in InputVerification and CiphertextCommits, making the coprocessor majority threshold inert, and coprocessor set and threshold updates are applied live without pausing InputVerification. - Roles: - **admin**: SafeL2 - **getCoprocessorSigners**: EOA 2, EOA 3, EOA 4, EOA 5, EOA 6 - **getCoprocessorTxSenders**: EOA 2, EOA 3, EOA 4, EOA 5, EOA 6 - **getCustodianSigners**: EOA 8 - **getCustodianTxSenders**: EOA 8 - **getKmsSigners**: EOA 10, EOA 15, EOA 16, EOA 17, EOA 20, EOA 21, EOA 22, EOA 23, EOA 25, EOA 28, EOA 31, EOA 32, EOA 33 - **getKmsTxSenders**: EOA 11, EOA 12, EOA 13, EOA 14, EOA 18, EOA 19, EOA 24, EOA 26, EOA 27, EOA 29, EOA 30, EOA 34, EOA 9 - **getPriorityCoprocessorTxSender**: EOA 1 - **owner**: SafeL2 - **pendingOwner**: EOA 1 Can be upgraded by: SafeL2 with no delay #### GatewayPauserSet Addresses: [0x571ecb596fCc5c840DA35CbeCA175580db50ac1b](https://explorer.mainnet.zama.org/address/0x571ecb596fCc5c840DA35CbeCA175580db50ac1b#code) Maintains the set of accounts allowed to pause gateway contracts. The set is managed by the GatewayConfig owner. - Roles: - **gatewayOwner**: SafeL2 - **pausers**: EOA 74, EOA 75, EOA 76, EOA 77