Search

Search for projects by name or address

SummaryValue SecuredActivityOnchain costsLivenessRisk summaryRisk analysisData availabilityUpgrades & GovernanceUpdatesOperatorWithdrawalsPermissionsSmart contracts

Jovay logo
Jovay

This project is archived and no longer maintained.

There are impactful changes and part of the information might be outdated.

Badges

About

Jovay, by Ant Digital Technologies, is an Ethereum Layer 2 blockchain built for real-world assets and users.

  • Total Value SecuredTVS
    $7.28 K14.6%
  • Past day UOPSDaily UOPS
    0.028.49%
  • Gas token
    ETH
  • Type
    Other
  • Purposes
    Universal, RWA
  • Chain ID
    5734951

    • Tokens breakdown

    Sequencer failureState validationData availabilityExit windowProposer failure
    Explore more in Discovery UI

    About

    Jovay, by Ant Digital Technologies, is an Ethereum Layer 2 blockchain built for real-world assets and users.

    Why is the project listed in others?

    The proof system isn't fully functional

    Consequence: projects without a proper proof system fully rely on single entities to safely update the state. A malicious proposer can finalize an invalid state, which can cause loss of funds.

    Learn more about the recategorisation here.

    Value SecuredView TVS breakdown
    Total
    Canonically BridgedCanonically Bridged ValueCanonical
    Natively MintedNatively Minted TokensNative
    Externally BridgedExternally Bridged ValueExternal
    ETH & derivatives
    Stablecoins
    BTC & derivatives
    Other
    View TVS breakdown
    Activity

    2025 Sep 20 — 2026 Jun 09

    Past Day UOPS
    0.028.49%
    Past Day Ops count
    2.08 K
    Max. UOPS
    0.16
    2025 Nov 25
    Past day UOPS/TPS Ratio
    No data
    Onchain costs

    The section shows the operating costs that L2s pay to Ethereum.

    2025 Sep 22 — 2026 Jun 09

    Total cost
    $5.92 K
    Avg cost per L2 UOP
    $0.005536
    Avg cost per day
    $23.99
    Liveness

    This section shows how "live" the project's operators are by displaying how frequently they submit transactions of the selected type. It also highlights anomalies - significant deviations from their typical schedule.

    2025 Sep 22 — 2026 Jun 10

    Avg. tx data subs. interval
    1 hour
    Avg. state updates interval
    1 hour
    Risk summary
    This project includes unverified contracts.
    (CRITICAL)

    Funds can be stolen if

    1. a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL),
    2. the source code of unverified contracts contains malicious code (CRITICAL).

    Users can be censored if

    1. the operator is offline or refuses to process the queue.

    MEV can be extracted if

    1. the operator exploits their centralized position and frontruns user transactions.
    Risk analysis
    This project includes unverified contracts.
    (CRITICAL)
    Sequencer failureState validationData availabilityExit windowProposer failure
    Sequencer failure
    Enqueue via L1

    Users can submit transactions to an L1 queue, but can’t force them. The sequencers cannot selectively skip transactions but can stop processing the queue entirely. In other words, if the sequencers censor or are down, they are so for everyone.

    State validation
    TEE attestations

    State roots are accepted when attested by a permissioned TEE through the TEEVerifierProxy. There is no challenge mechanism and no validity proofs can be submitted.

    Data availability
    Onchain

    All of the data needed for proof construction is published on Ethereum L1.

    Exit window
    None

    There is no window for users to exit in case of an unwanted upgrade since contracts are instantly upgradable.

    Proposer failure
    Cannot withdraw

    Only the whitelisted proposers can publish state roots on L1, so in the event of failure the withdrawals are frozen.

    Data availability

    All data required for proofs is published on chain

    All the data that is used to construct the system state is published on chain in the form of cheap blobs or calldata. This ensures that it will be available for enough time.

    1. Rollup.sol - commitBatch stores calldata hashes for each batch
    2. L1Mailbox.sol - sendMsg enqueues transactions on Ethereum
    Learn more about the DA layer here: Ethereum logoEthereum
    Upgrades & Governance

    Past upgrades

    The metrics include upgrades on the currently used proxy contracts. Historical proxy contracts and changes of such are not included.

    Count of upgrades
    3
    Last upgrade
    8mo 18d ago
    Avg upgrade interval
    4mo 11d
    Updates
    2025 October 31, 10:51 UTC
    12changes

    First discovery.

    First discovery.

    Initial discovery

    + Status: CREATED
    contract DcapAttestationRouter (eth:0x238f4DaFC22013a864f85a54E276aC99975566fA)
    +++ description: The DcapAttestationRouter contract is used for routing and verifying Intel SGX/TDX DCAP attestation proofs. The contract sends each quote to the corresponding verification path (cache verifier vs. Automata DCAP contract, and SGX vs. TDX measurement checks).
    + Status: CREATED
    contract MeasurementDao (eth:0x359437E2763e9622DD4324D7904BbF7516332D4F)
    +++ description: The MeasurementDao contract is an onchain registry that allowlists SGX MR_ENCLAVE<->MR_SIGNER pairs and TDX RTMR3/MRTD values, and verifies DCAP quotes by matching quote fields to the stored measurements.
    + Status: CREATED
    contract TEEVerifierProxy (eth:0x371a8bda9a34d641B546883D6B5895d0A44AD46A)
    +++ description: The TEEVerifierProxy contract is used to verify L2 batches using TEE attestations. It delegates proof verification to the dcapAttestationRouter contract.
    + Status: CREATED
    contract DaimoP256Verifier (eth:0x783377992FCA09009eaD952D4fBa6519e25726b4)
    +++ description: None
    + Status: CREATED
    contract TEEVerifierProxyOwner (eth:0x79241BbE3646d8405849Cbe8608e77b82c402892)
    +++ description: None
    + Status: CREATED
    contract L1ETHBridge (eth:0x922248Db4A99bB542539ae7165FB9D7A546FB9F1)
    +++ description: The L1ETHBridge contract is used to bridge ETH between the L1 and L2.
    + Status: CREATED
    contract TEECacheVerifier (eth:0x9734CcA9304A4c7a5a27bCFac9eDa23e09cBAaF2)
    +++ description: A cache-enabled P-256 ECDSA verifier for Intel SGX/TDX DCAP quotes (v3/v4/v5) that authenticates local attestation data, extracts the 32-byte commitment, and lets the owner/authorized callers initialize, manage, and reuse cached attestation keys to skip repeat verifications.
    + Status: CREATED
    contract L1Mailbox (eth:0x9869A90FDAc287519E48aff4cCE329907a995162)
    +++ description: The L1Mailbox contract is used to send messages to the L2.
    + Status: CREATED
    contract AutomataDcapAttestationFee (eth:0xb3a96165caf30F8F7cE9BCfdaaAe99BA93C1A6F9)
    +++ description: Contract used to charge a configurable basis-point fee to verify Intel DCAP quotes. Currently set to 0 basis points.
    + Status: CREATED
    contract Rollup (eth:0xe0a28B8918a62edB825055221a1dF12c7C81Bac1)
    +++ description: The Rollup contract is used to submit and verify L2 batches.
    + Status: CREATED
    contract (eth:0xe2f33Bd70B301F53f61CB7b22D852bC8e3D95E2b)
    +++ description: None
    + Status: CREATED
    contract (eth:0xf2A2Bee383C2e4d75d9aE5953b3A6cFABb661a47)
    +++ description: None
    Operator

    The system has a centralized operator

    The operator is the only entity that can propose blocks. A live and trustworthy operator is vital to the health of the system.

    • MEV can be extracted if the operator exploits their centralized position and frontruns user transactions.

    1. Rollup.sol - addRelayer is restricted to the owner

    Users can enqueue transactions

    Users can submit transactions to an L1 queue, but can’t force them. The sequencer cannot selectively skip transactions but can stop processing the queue entirely. In other words, if the sequencer censors or is down, it is so for everyone.

    • Users can be censored if the operator is offline or refuses to process the queue.

    1. L1Mailbox.sol - sendMsg enqueues deposit transactions
    2. Rollup.sol - commitBatch function passes the totalL1MessagePopped as input parameter
    Withdrawals

    Regular messaging

    The user initiates L2->L1 messages by submitting a regular transaction on this chain. When the block containing that transaction is settled, the message becomes available for processing on L1.

    1. L1ETHBridge.sol - finalizeWithdraw executes ETH withdrawals
    2. L1Mailbox.sol - relayMsgWithProof verifies withdrawal proofs
    Permissions
    A dashboard to explore contracts and permissions
    Go to Disco
    Disco UI Banner
    Disco UI BannerExplore in Disco

    Ethereum

    Roles:

    ProposerEOA 1EOA 2

    Allowed to post new state roots of the current layer to the host chain.

    SequencerEOA 1EOA 2

    Allowed to commit transactions from the current layer to the host chain.

    Actors:

    0x4815…6B77
    • Can upgrade with no delay
      • L1ETHBridge
      • L1Mailbox
      • Rollup
    0x8308…3AD4
    • Can upgrade with no delay *
    0xf2A2…1a47
    • Can upgrade with no delay
      • TEEVerifierProxyOwner
    2 EOAs
    EOA 1EOA 2
    Smart contracts
    A dashboard to explore contracts and permissions
    Go to Disco
    Disco UI Banner
    Disco UI BannerExplore in Disco
    Note: Contracts presented in this section had their implementations updated since the last time our team looked at this project. The information presented may be inaccurate.
    A diagram of the smart contract architecture
    A diagram of the smart contract architecture

    Ethereum

    DcapAttestationRouter0x238f…66fA

    The DcapAttestationRouter contract is used for routing and verifying Intel SGX/TDX DCAP attestation proofs. The contract sends each quote to the corresponding verification path (cache verifier vs. Automata DCAP contract, and SGX vs. TDX measurement checks).

    MeasurementDao0x3594…2D4F

    The MeasurementDao contract is an onchain registry that allowlists SGX MR_ENCLAVE<->MR_SIGNER pairs and TDX RTMR3/MRTD values, and verifies DCAP quotes by matching quote fields to the stored measurements.

    TEEVerifierProxy0x371a…D46A

    The TEEVerifierProxy contract is used to verify L2 batches using TEE attestations. It delegates proof verification to the dcapAttestationRouter contract.

    DaimoP256Verifier0x7833…26b4
    TEEVerifierProxyOwner0x7924…2892Implementation (Upgradable)Admin
    • Roles:
      • admin: The source code of this contract is not verified on Etherscan.
    Can be upgraded by:
    with no delay
    TEECacheVerifier0x9734…AaF2

    A cache-enabled P-256 ECDSA verifier for Intel SGX/TDX DCAP quotes (v3/v4/v5) that authenticates local attestation data, extracts the 32-byte commitment, and lets the owner/authorized callers initialize, manage, and reuse cached attestation keys to skip repeat verifications.

    AutomataDcapAttestationFee0xb3a9…A6F9

    Contract used to charge a configurable basis-point fee to verify Intel DCAP quotes. Currently set to 0 basis points.

    ProxyAdmin0xe2f3…5E2b
    • Roles:
      • owner:
    There are impactful changes to the following contracts, and part of the information might be outdated.
    L1Mailbox0x9869…5162Implementation (Upgradable)Admin

    The L1Mailbox contract is used to send messages to the L2.

    • Roles:
      • admin: ProxyAdmin
    Can be upgraded by:
    with no delay
    Rollup0xe0a2…Bac1Implementation (Upgradable)Admin

    The Rollup contract is used to submit and verify L2 batches.

    • Roles:
      • admin: ProxyAdmin
      • relayer: EOA 1, EOA 2
    Can be upgraded by:
    with no delay
    L1ETHBridge0x9222…B9F1Implementation (Upgradable)Admin

    The L1ETHBridge contract is used to bridge ETH between the L1 and L2.

    • Roles:
      • admin: ProxyAdmin
    Can be upgraded by:
    with no delay

    The current deployment carries some associated risks:

    • Funds can be stolen if a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL).

    • Funds can be stolen if the source code of unverified contracts contains malicious code (CRITICAL).