Search

Search for projects by name

SummaryValue SecuredActivityOnchain costsMilestones & IncidentsRisk summaryRisk analysisRollup stageData availabilityState validationOperatorWithdrawalsOther considerationsPermissionsSmart contracts

Facet logoFacet

This project is under review.

Badges

About

Facet is a based rollup built on the OP stack. It uses FCT as its native gas token, which is mintable by spending gas on L1.

  • Total Value SecuredTVS
    $1.79 M5.30%
  • Past day UOPSDaily UOPS
    0.000.00%
  • Gas token
    FCT
  • Type
    Other
  • Purpose
    Universal
  • Chain ID
    1027303

    • Tokens breakdown

    Value secured breakdown

    View TVS breakdown
    Sequencer failureState validationData availabilityExit windowProposer failure
    Explore more in Discovery UI

    Badges

    About

    Facet is a based rollup built on the OP stack. It uses FCT as its native gas token, which is mintable by spending gas on L1.

    Why is the project listed in others?

    The proof system isn't fully functional

    Consequence: projects without a proper proof system fully rely on single entities to safely update the state. A malicious proposer can finalize an invalid state, which can cause loss of funds.

    Learn more about the recategorisation here.

    Value Secured

    2024 Dec 11 — 2025 Aug 08

    Total value securedTotal
    $1.79 M5.30%
    Canonically BridgedCanonically Bridged ValueCanonical
    $1.79 M5.30%
    Natively MintedNatively Minted TokensNative
    $0.000.00%
    Externally BridgedExternally Bridged ValueExternal
    $0.000.00%
    View TVS breakdown
    Activity

    2024 Dec 10 — 2025 Aug 07

    Onchain costs

    The section shows the operating costs that L2s pay to Ethereum.

    2024 Dec 11 — 2025 Aug 07

    1 year total cost
    $360.43
    Avg cost per L2 UOP
    $0.005017
    Avg cost per day
    $1.78
    Milestones & Incidents

    Mainnet Launch

    2024 Dec 10th

    Facet launches at Ethereum block 21373000.

    Learn more
    Risk summary
    Under Review

    The information in the section might be incomplete or outdated.
    The L2BEAT Team is working to research & validate the content before publishing.

    Funds can be stolen if

    1. a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL),
    2. an invalid state root is submitted to the system (CRITICAL).

    Funds can be lost if

    1. the fast bridge EOA operator signs an invalid withdrawal (CRITICAL).

    Funds can be frozen if

    1. the operator halts withdrawals (CRITICAL).
    Risk analysis
    Under Review

    The information in the section might be incomplete or outdated.
    The L2BEAT Team is working to research & validate the content before publishing.

    Sequencer failureState validationData availabilityExit windowProposer failure
    Sequencer failure
    Self sequence

    Users can self sequence transactions by sending them on L1. There is no privileged operator.

    State validation
    None

    Currently the system permits invalid state roots. More details in project overview.

    Data availability
    Onchain

    All of the data needed for proof construction is published on Ethereum L1.

    Exit window
    None

    There is no window for users to exit in case of an unwanted regular upgrade since contracts are instantly upgradable.

    Proposer failure
    Cannot withdraw

    Only the whitelisted proposers can publish state roots on L1, so in the event of failure the withdrawals are frozen.

    Rollup stage
    Under Review

    The information in the section might be incomplete or outdated.
    The L2BEAT Team is working to research & validate the content before publishing.

    Facet

    Facet's stage is currently

    IN REVIEW
    Data availability
    Under Review

    The information in the section might be incomplete or outdated.
    The L2BEAT Team is working to research & validate the content before publishing.

    All data required for proofs is published onchain

    All the data that is used to construct the system state is published onchain in the form of cheap calldata. This ensures that it will always be available when needed.

    1. Derivation: Batch submission - OP Mainnet specs
    2. BatchInbox - address
    3. OptimismPortal.sol - source code, depositTransaction function
    Learn more about the DA layer here: Ethereum logoEthereum
    State validation
    Under Review

    The information in the section might be incomplete or outdated.
    The L2BEAT Team is working to research & validate the content before publishing.

    No state validation

    OP Stack projects can use the OP fault proof system, already being deployed on some. This project though is not using fault proofs yet and is relying on the honesty of the permissioned Proposer and Challengers to ensure state correctness. The smart contract system permits invalid state roots.

    • Funds can be stolen if an invalid state root is submitted to the system (CRITICAL).

    1. L2OutputOracle.sol - source code, deleteL2Outputs function
    Operator
    Under Review

    The information in the section might be incomplete or outdated.
    The L2BEAT Team is working to research & validate the content before publishing.

    There is no central operator

    There is no privileged entity that sequences transactions or produces blocks. This activity is permissionless and open to anyone.

    Users can force any transaction

    Because the state of the system is based on transactions submitted on the underlying host chain and anyone can submit their transactions there it allows the users to circumvent censorship by interacting with the EOA inbox on the host chain directly.

    Withdrawals
    Under Review

    The information in the section might be incomplete or outdated.
    The L2BEAT Team is working to research & validate the content before publishing.

    Withdrawals are initiated on L1

    Users can initiate a withdrawal from the L1StandardBridge escrow by sending a transaction to the L1 contract, forcing the operator to either process it, halt all withdrawals or produce an invalid state transition. Deposits from the L1StandardBridge are disabled, and the use of the fast bridge is encouraged. There is no way to force the fast bridge operator (EOA) to process a withdrawal.

    • Funds can be lost if the fast bridge EOA operator signs an invalid withdrawal (CRITICAL).

    • Funds can be frozen if the operator halts withdrawals (CRITICAL).

    1. PausedL1StandardBridge.sol - Etherscan source code, disabled _initiateBridgeERC20 function
    Other considerations
    Under Review

    The information in the section might be incomplete or outdated.
    The L2BEAT Team is working to research & validate the content before publishing.

    EVM compatible smart contracts are supported

    OP stack chains are pursuing the EVM Equivalence model. No changes to smart contracts are required regardless of the language they are written in, i.e. anything deployed on L1 can be deployed on L2.

    1. Introducing EVM Equivalence
    Permissions
    Under Review

    The information in the section might be incomplete or outdated.
    The L2BEAT Team is working to research & validate the content before publishing.

    A dashboard to explore contracts and permissions
    Go to Disco
    Disco UI Banner
    Disco UI BannerExplore in Disco

    Ethereum

    Roles:

    Challenger 0x034B…7eE3

    Allowed to challenge or delete state roots proposed by a Proposer.

    Guardian Facet Multisig

    Allowed to pause withdrawals. In op stack systems with a proof system, the Guardian can also blacklist dispute games and set the respected game type (permissioned / permissionless).

    Proposer 0x034B…7eE3

    Allowed to post new state roots of the current layer to the host chain.

    Actors:

    Facet Multisig 0xb2B0…C525

    A Multisig with 2/3 threshold. It uses the following modules: FacetSafeModule (Module that allows the Safe to send Facet transactions), EthscriptionsSafeModule (Module that allows the Safe to interact with Ethscriptions).

    • Can upgrade with no delay
      • OptimismPortal
      • L1StandardBridge
      • L1CrossDomainMessenger
      • SystemConfig
      • L2OutputOracle
      • SuperchainConfig
    • Can interact with FacetEtherBridgeV6
      • can withdraw all funds from the bridge
    • Can interact with AddressManager
      • set and change address mappings
    • Can interact with SystemConfig
      • it can update the preconfer address, the batch submitter (Sequencer) address and the gas configuration of the system
    • A Guardian - acting directly

    Participants (3):

    0x7761…373C0xD66C…27a70x75de…6127
    EOA 2 0x314d…1006
    • Can interact with FacetEtherBridgeV6
      • can sign arbitrary withdrawals for users
    Smart contracts
    Under Review

    The information in the section might be incomplete or outdated.
    The L2BEAT Team is working to research & validate the content before publishing.

    A dashboard to explore contracts and permissions
    Go to Disco
    Disco UI Banner
    Disco UI BannerExplore in Disco
    A diagram of the smart contract architecture
    A diagram of the smart contract architecture

    Ethereum

    OptimismPortal 0x8649…1eDDImplementation (Upgradable)Admin

    The main entry point to deposit funds from host chain to this chain. It also allows to prove and finalize withdrawals.

    • Roles:
      • admin: ProxyAdmin; ultimately Facet Multisig
      • guardian: Facet Multisig
    • This contract stores the following tokens: ETH.
    Can be upgraded by:
    Facet Multisig with no delay
    SystemConfig 0xC1E9…534eImplementation (Upgradable)Admin
    • Roles:
      • admin: ProxyAdmin; ultimately Facet Multisig
      • owner: Facet Multisig
    Can be upgraded by:
    Facet Multisig with no delay
    L2OutputOracle 0xD1e4…C5A6Implementation (Upgradable)Admin

    Contains a list of proposed state roots which Proposers assert to be a result of block execution. Currently only the PROPOSER address can submit new state roots.

    • Roles:
      • admin: ProxyAdmin; ultimately Facet Multisig
      • challenger: EOA 1
      • proposer: EOA 1
    Can be upgraded by:
    Facet Multisig with no delay
    SuperchainConfig 0xec3a…EA59Implementation (Upgradable)Admin

    This is NOT the shared SuperchainConfig contract of the OP stack Superchain but rather a local fork. It manages the PAUSED_SLOT, a boolean value indicating whether the local chain is paused, and GUARDIAN_SLOT, the address of the guardian which can pause and unpause the system.

    • Roles:
      • admin: ProxyAdmin; ultimately Facet Multisig
      • guardian: Facet Multisig
    Can be upgraded by:
    Facet Multisig with no delay
    L1StandardBridge 0x8F75…2909Implementation (Upgradable)Admin

    The main entry point to deposit ERC20 tokens from host chain to this chain.

    • Roles:
      • admin: ProxyAdmin; ultimately Facet Multisig
    • This contract can store any token.
    Can be upgraded by:
    Facet Multisig with no delay
    L1CrossDomainMessenger 0xa123…70E8Implementation (Upgradable)Admin

    Sends messages from host chain to this chain, and relays messages back onto host chain. In the event that a message sent from host chain to this chain is rejected for exceeding this chain’s epoch gas limit, it can be resubmitted via this contract’s replay function.

    • Roles:
      • admin: ProxyAdmin; ultimately Facet Multisig
    Can be upgraded by:
    Facet Multisig with no delay
    FacetEtherBridgeV6 0x0000…Ce4CImplementation (Upgradable)Admin

    Official Facet implementation of the Ether Bridge.

    • Roles:
      • getAdmin: Facet Multisig
      • getSigner: EOA 2
    • This contract stores the following tokens: ETH.
    FacetSafeModule 0x3235…6BCF

    Module that allows the Safe to send Facet transactions.

    FacetSafeProxy 0xC9F2…4d25

    Helper of the Safe Module that allows to send Facet transactions.

    EthscriptionsSafeModule 0xDB86…22cE

    Module that allows the Safe to interact with Ethscriptions.

    ProxyAdmin 0xe2A3…997C
    • Roles:
      • owner: Facet Multisig
    EthscriptionsSafeProxy 0xeEd4…5095

    Helper of the Safe Module that allows to send Ethscriptions transactions.

    Value Secured is calculated based on these smart contracts and tokens:

    Generic escrow 0x8F75…2909Implementation (Upgradable)Admin

    Main entry point for users depositing ERC20 token that do not require custom gateway.

    Can be upgraded by:
    ProxyAdmin with no delay
    Escrow for ETH 0x8649…1eDDImplementation (Upgradable)Admin

    Main entry point for users depositing ETH.

    Can be upgraded by:
    ProxyAdmin with no delay

    The current deployment carries some associated risks:

    • Funds can be stolen if a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL).