Katana

The main system contract defining the katana Aggchain logic. This contract, based on the OP-Succinct L2OutputOracle, supports validity proofs and OP stack outputRoots (L2 state roots) are saved here.

• Roles:
  • aggchainManager: Polygon Multisig 2
  • aggchainSigners: EOA 2 optimisticMode is enabled by the optimisticModeManager
  • optimisticModeManager: Polygon Multisig 2

Stores the configuration of the OP stack components and proof system. Specifies which game type is used for state validation, which currently is the PermissionedDisputeGame. This contract is modified to disable asset bridging, but it allows forced transactions.

• Roles:
  • admin: ProxyAdmin; ultimately Polygon Multisig 2

Contains configuration parameters such as the Sequencer address, gas limit on this chain and the unsafe block signer address.

• Roles:
  • admin: ProxyAdmin; ultimately Polygon Multisig 2
  • batcherHash: EOA 1
  • owner: Polygon Multisig 2

A verifier gateway for pessimistic proofs. Manages a map of chains and their verifier keys and is used to route proofs based on the first 4 bytes of proofBytes data in a proof submission. The SP1 verifier is used for all proofs.

• Roles:
  • addPpRoute: Timelock; ultimately PolygonAdminMultisig
  • admin: SharedProxyAdmin; ultimately PolygonAdminMultisig
  • aggchainDefaultVKey: PolygonAdminMultisig
  • alMultisig: PolygonAdminMultisig
  • freezePpRoute: PolygonAdminMultisig

The shared bridge contract, escrowing user funds sent to Agglayer chains. It is usually mirrored on each chain and can be used to transfer both ERC20 assets and arbitrary messages.

• Roles:
  • admin: SharedProxyAdmin; ultimately PolygonAdminMultisig
  • proxiedTokensManager: Timelock; ultimately PolygonAdminMultisig

The central shared managing contract for Polygon Agglayer chains. This contract coordinates chain deployments and proof validation. All connected Layer 2s can be globally paused by activating the ‘Emergency State’. This can be done by the PolygonSecurityCouncil or by anyone after 1 week of inactive verifiers.

• Roles:
  • admin: SharedProxyAdmin; ultimately PolygonAdminMultisig
  • createRollup: PolygonAdminMultisig, PolygonCreateRollupMultisig
  • defaultAdmin: Timelock; ultimately PolygonAdminMultisig
  • emergencyCouncilAdmin: PolygonSecurityCouncil
  • trustedAggregator: EOA 4, EOA 5
  • tweakParameters: PolygonAdminMultisig

A merkle tree storage contract aggregating state roots of each participating Layer 2, thus creating a single global merkle root representing the global state of the Agglayer, the ‘global exit root’. The global exit root is synchronized to all connected Layer 2s to help with their interoperability.

• Roles:
  • admin: SharedProxyAdmin; ultimately PolygonAdminMultisig

A timelock with access control. In the case of an activated emergency state in the AgglayerManager, all transactions through this timelock are immediately executable. The current minimum delay is 3d.

• Roles:
  • timelockAdmin: PolygonAdminMultisig (no delay if in emergency state), Timelock (no delay if in emergency state); ultimately PolygonAdminMultisig (no delay if in emergency state)

This token contract uses a standard ‘vault bridge token’ implementation created by Agglayer CDK. It keeps deposited assets in a vault and issues an IOU token (Vault Bridge WBTC) which can be deposited to Agglayer. The underlying asset is generating yield, which does not accrue to the vbWBTC-IOU but is sent to Safe.

• Roles:
  • admin: ProxyAdmin; ultimately Katana vaultBridge Multisig 1

This token contract uses a standard ‘vault bridge token’ implementation created by Agglayer CDK. It keeps deposited assets in a vault and issues an IOU token (Vault Bridge ETH) which can be deposited to Agglayer. The underlying asset is generating yield, which does not accrue to the vbETH-IOU but is sent to Safe.

• Roles:
  • admin: ProxyAdmin; ultimately Katana vaultBridge Multisig 1

This token contract uses a standard ‘vault bridge token’ implementation created by Agglayer CDK. It keeps deposited assets in a vault and issues an IOU token (Vault Bridge USDS) which can be deposited to Agglayer. The underlying asset is generating yield, which does not accrue to the vbUSDS-IOU but is sent to Safe.

• Roles:
  • admin: ProxyAdmin; ultimately Katana vaultBridge Multisig 2

Helper contract for the vaultBridge tokens on Layer 2. If any vbTokens are minted ‘natively’ on Layer 2, this contract can receive the underlying assets and lock them in the Layer 1 vaults.

• Roles:
  • admin: ProxyAdmin; ultimately Polygon Labs Engineering/Security Multisig

This token contract uses a standard ‘vault bridge token’ implementation created by Agglayer CDK. It keeps deposited assets in a vault and issues an IOU token (Vault Bridge USDC) which can be deposited to Agglayer. The underlying asset is generating yield, which does not accrue to the vbUSDC-IOU but is sent to Safe.

• Roles:
  • admin: ProxyAdmin; ultimately Katana vaultBridge Multisig 3

This token contract uses a standard ‘vault bridge token’ implementation created by Agglayer CDK. It keeps deposited assets in a vault and issues an IOU token (Vault Bridge USDT) which can be deposited to Agglayer. The underlying asset is generating yield, which does not accrue to the vbUSDT-IOU but is sent to Safe.

• Roles:
  • admin: ProxyAdmin; ultimately Katana vaultBridge Multisig 1

• Roles:
  • owner: Katana vaultBridge Multisig 1

• Roles:
  • owner: Polygon Multisig 2

The PreimageOracle contract is used to load the required data from L1 for a dispute game.

• Roles:
  • owner: Polygon Labs Engineering/Security Multisig

• Roles:
  • owner: Katana vaultBridge Multisig 1

• Roles:
  • owner: Katana vaultBridge Multisig 1

The MIPS contract is used to execute the final step of the dispute game which objectively determines the winner of the dispute.

• Roles:
  • owner: Polygon Multisig 2

• Roles:
  • owner: Katana vaultBridge Multisig 3

Same as FaultDisputeGame, but only two permissioned addresses are designated as proposer and challenger.

Contains the latest confirmed state root that can be used as a starting point in a dispute game. It specifies which game type can be used for withdrawals, which currently is the PermissionedDisputeGame.

• Roles:
  • admin: ProxyAdmin; ultimately Polygon Multisig 2

Contract designed to hold the bonded ETH for each game. It is designed as a wrapper around WETH to allow an owner to function as a backstop if a game would incorrectly distribute funds.

• Roles:
  • admin: ProxyAdmin; ultimately Polygon Multisig 2

• Roles:
  • owner: Katana vaultBridge Multisig 2

Verifier contract for SP1 proofs (v5.0.0).

• Roles:
  • owner: Timelock

Extension contract of the AgglayerBridge for asset metadata…

Agglayer bridge contract. Supports interop with Ethereum and blockchains connected to Agglayer. Escrows all preminted ETH because it cannot mint on the L2. The globalExitRootManager is used as an oracle to validate bridge messages against.

• Roles:
  • admin: ProxyAdmin; ultimately GnosisSafeL2, SafeL2
  • bridgeManager: GnosisSafeL2
  • emergencyBridgePauser: GnosisSafeL2
  • emergencyBridgeUnpauser: GnosisSafeL2
  • getProxiedTokensManager: GnosisSafeL2

Manages Layer 2 and global merkle roots (exit roots). It stores exit roots written during bridge deposits, accepts imported global exit roots from a permissioned address, and manages historical roots.

• Roles:
  • admin: ProxyAdmin; ultimately GnosisSafeL2, SafeL2
  • globalExitRootRemover: GnosisSafeL2, GnosisSafeL2 if the bridge is paused
  • globalExitRootUpdater: EOA 3

A timelock with access control. The current minimum delay is 12h.

• Roles:
  • timelockAdmin: GnosisSafeL2 (no delay if in emergency state), SafeL2 (no delay if in emergency state)

• Roles:
  • owner: L2Timelock

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2

The L2CrossDomainMessenger (L2xDM) contract sends messages from L2 to L1, and relays messages from L1 onto L2 with a system tx. In the event that a message sent from L2 to L1 is rejected for exceeding the L1 gas limit, it can be resubmitted via this contract’s replay function.

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2

Provides the current gas price for L2 transactions.

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2

Collects the sequencer fees.

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2
  • recipient: SafeL2

Simple contract that returns the latest L1 block number.

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2

Simple contract that returns information about the latest L1 block, which is derived permissionlessly from the L1 chain.

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2

Contract used internally by the L2CrossDomainMessenger to send messages to L1. It can also be used directly as a low-level interface.

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2
  • owner: SafeL2

Collects EIP-1559 base fees

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2
  • recipient: SafeL2

Collects the L1 portion of the L2 transaction fees.

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2
  • recipient: SafeL2

Holds the ‘operator fees’ for the L2 network, which are part of the L2 fees that users pay.

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2

Contracts to register schemas for the Ethereum Attestation Service (EAS).

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2

Contract containing the main logic for the Ethereum Attestation Service (EAS).

• Roles:
  • admin: ProxyAdmin; ultimately SafeL2

Utility library contract for the AgglayerBridgeL2.

An ERC-20 implementation designed for cross-chain assets on the L2. It restricts token minting or burning strictly to the primary bridge contract.