| contract | upgradeable by |
|---|---|
| PoolAddressesProvider | not upgradeable |
| Pool | Governance |
| PoolConfigurator | Governance |
| GHOFlashMinter | not upgradeable |
| AaveOracle | not upgradeable |
| Collector | Governance |
| RewardsController | Governance |
| WrappedTokenGatewayV3 | not upgradeable |
| ParaSwapLiquiditySwapAdapter | not upgradeable |
| ParaSwapRepayAdapter | not upgradeable |
| EmissionManager | not upgradeable |
| PoolAddressesProviderRegistry | not upgradeable |
| ProxyAdmin | not upgradeable |
| ProxyAdminLong | not upgradeable |
| ACLManager | not upgradeable |
| CapPlusRiskSteward | not upgradeable |
| FreezeSteward | not upgradeable |
| AaveMerkleDistributor | not upgradeable |
| AavePolEthBridge | not upgradeable |
| Manual AGRS | not upgradeable |
| Aave a/v/s tokens | Governance |
| GranularGuardian | not upgradeable |
| AaveGovernanceV3 | Governance |
| PayloadsController | Governance |
| VotingMachine | not upgradeable |
| VotingPortal_Eth_Eth | not upgradeable |
| VotingPortal_Eth_Avax | not upgradeable |
| VotingPortal_Eth_Pol | not upgradeable |
| Executor_lvl1 | not upgradeable |
| Executor_lvl2 | not upgradeable |
| EmergencyRegistry | not upgradeable |
| CCIP adapter | not upgradeable |
| Polygon native adapter | not upgradeable |
| LayerZero adapter | not upgradeable |
| Hyperlane adapter | not upgradeable |
| CrossChainController | Governance |
| type | can be executed by |
|---|---|
| updateReserveBorrowSettings | Governance |
| configureProtocolFees | Governance |
| updateReserveCaps | Governance,Multi-sig,External Contract |
| updateReserveSettings | Governance |
| configureCollateral | Governance |
| upgradeAaveTokens (a/v/s) | Governance |
| upgradeAaveOracles | Governance |
| reserveUpgradeability | Governance |
| pausePool | Governance,Multi-sig |
| pauseAndFreezeReserve | Governance,Multi-sig,External Contract |
| reserveListing | Governance |
| adminsConfiguration | Governance |
| protocolUpgradeablity | Governance |
| adiConfigurations | Governance |
| retryAndInvalidateMessages | Multi-sig,Governance |
| configureGovernance | Governance |
| cancelProposal | Multi-sig |
| updateRiskParameters | Multi-sig |
| contract | proxyAdmin | modifier | permission owner | functions |
|---|---|---|---|---|
| PoolAddressesProvider | - | onlyOwner | Executor_lvl1 | setMarketId, setAddress, setAddressAsProxy, setPoolImpl, setPoolConfiguratorImpl, setPriceOracle, setACLManager, setACLAdmin, setPriceOracleSentinel, setPoolDataProvider |
| Pool | PoolAddressesProvider | onlyPoolConfigurator | PoolConfigurator | initReserve, dropReserve, setReserveInterestRateStrategyAddress, setConfiguration, updateBridgeProtocolFee, updateFlashloanPremiums, configureEModeCategory, resetIsolationModeTotalDebt |
| Pool | PoolAddressesProvider | onlyPoolAdmin | Executor_lvl1 | rescueTokens |
| Pool | PoolAddressesProvider | onlyBridge | mintUnbacked, backUnbacked | |
| PoolConfigurator | PoolAddressesProvider | onlyPoolAdmin | Executor_lvl1 | dropReserve, dropReserve, updateAToken, updateStableDebtToken, updateVariableDebtToken, setReserveActive, updateBridgeProtocolFee, updateFlashloanPremiumTotal, updateFlashloanPremiumToProtocol |
| PoolConfigurator | PoolAddressesProvider | onlyAssetListingOrPoolAdmins | Executor_lvl1 | initReserves |
| PoolConfigurator | PoolAddressesProvider | onlyRiskOrPoolAdmins | Executor_lvl1, CapPlusRiskSteward, FreezeSteward, 0xFEb4e54591660F42288312AE8eB59e9f2B746b66, Manual AGRS | setReserveBorrowing, setReserveBorrowing, configureReserveAsCollateral, setReserveStableRateBorrowing, setBorrowableInIsolation, setReserveFactor, setDebtCeiling, setSiloedBorrowing, setBorrowCap, setSupplyCap, setLiquidationProtocolFee, setEModeCategory, setAssetEModeCategory, setUnbackedMintCap, setReserveInterestRateStrategyAddress, setReserveFlashLoaning |
| PoolConfigurator | PoolAddressesProvider | onlyRiskOrPoolOrEmergencyAdmins | Executor_lvl1, CapPlusRiskSteward, FreezeSteward, 0xFEb4e54591660F42288312AE8eB59e9f2B746b66, Manual AGRS, Aave Protocol Guardian Ethereum | setReserveFreeze |
| PoolConfigurator | PoolAddressesProvider | onlyEmergencyOrPoolAdmin | Executor_lvl1, Aave Protocol Guardian Ethereum | setPoolPause, setReservePause |
| GHOFlashMinter | - | onlyPoolAdmin | Executor_lvl1 | updateFee, updateGhoTreasury |
| AaveOracle | - | onlyAssetListingOrPoolAdmins | Executor_lvl1 | setAssetSources, setFallbackOracle |
| Collector | ProxyAdmin | onlyFundsAdmin | Executor_lvl1 | approve, transfer, setFundsAdmin, createStream |
| Collector | ProxyAdmin | onlyAdminOrRecipient | ProxyAdmin, Executor_lvl1 | withdrawFromStream, cancelStream |
| RewardsController | PoolAddressesProvider | onlyEmissionManager | EmissionManager | configureAssets, setTransferStrategy, setRewardOracle, setClaimer |
| WrappedTokenGatewayV3 | - | onlyOwner | Executor_lvl1 | emergencyTokenTransfer, emergencyEtherTransfer |
| ParaSwapLiquiditySwapAdapter | - | onlyOwner | Executor_lvl1 | rescueTokens |
| ParaSwapRepayAdapter | - | onlyOwner | Executor_lvl1 | rescueTokens |
| EmissionManager | - | onlyOwner | Executor_lvl1 | setClaimer, setEmissionAdmin, setRewardsController |
| PoolAddressesProviderRegistry | - | onlyOwner | Executor_lvl1 | registerAddressesProvider, unregisterAddressesProvider |
| ProxyAdmin | - | onlyOwner | Executor_lvl1 | changeProxyAdmin, upgrade, upgradeAndCall |
| ProxyAdminLong | - | onlyOwner | Executor_lvl2 | changeProxyAdmin, upgrade, upgradeAndCall |
| ACLManager | - | onlyRole | Executor_lvl1 | setRoleAdmin |
| CapPlusRiskSteward | - | onlyRiskCouncil | Risk Council | updateCaps |
| FreezeSteward | - | onlyEmergencyAdmin | Aave Protocol Guardian Ethereum | setFreeze |
| AaveMerkleDistributor | - | onlyOwner | Executor_lvl1 | addDistributions, emergencyTokenTransfer, emergencyEtherTransfer |
| AavePolEthBridge | - | onlyOwner | Executor_lvl1 | bridge |
| AavePolEthBridge | - | onlyRescueGuardian | Executor_lvl1 | emergencyTokenTransfer, emergencyEtherTransfer |
| Manual AGRS | - | onlyOwner | Executor_lvl1 | setRiskConfig, setAddressRestricted |
| Manual AGRS | - | onlyRiskCouncil | Risk Council | updateCaps, updateRates, updateCollateralSide, updateLstPriceCaps, updateStablePriceCaps |
| contract | proxyAdmin | modifier | permission owner | functions |
|---|---|---|---|---|
| GranularGuardian | - | onlyRetryGuardian | BGD | retryEnvelope, retryTransaction |
| GranularGuardian | - | onlyEmergencyGuardian | Aave Governance Guardian Ethereum | solveEmergency |
| GranularGuardian | - | onlyDefaultAdmin | Executor_lvl1 | updateGuardian |
| AaveGovernanceV3 | ProxyAdminLong | onlyOwner | Executor_lvl1 | updateGasLimit, addVotingPortals, removeVotingPortals, setVotingConfigs, setPowerStrategy |
| AaveGovernanceV3 | ProxyAdminLong | onlyGuardian | Aave Governance Guardian Ethereum | rescueVotingPortal, cancelProposal |
| AaveGovernanceV3 | ProxyAdminLong | onlyOwnerOrGuardian | Aave Governance Guardian Ethereum, Executor_lvl1 | updateGuardian |
| PayloadsController | ProxyAdmin | onlyOwner | Executor_lvl1 | updateExecutors |
| PayloadsController | ProxyAdmin | onlyGuardian | Aave Governance Guardian Ethereum | cancelPayload |
| PayloadsController | ProxyAdmin | onlyOwnerOrGuardian | Aave Governance Guardian Ethereum, Executor_lvl1 | updateGuardian |
| PayloadsController | ProxyAdmin | onlyRescueGuardian | Executor_lvl1 | emergencyTokenTransfer, emergencyEtherTransfer |
| VotingMachine | - | onlyOwner | Executor_lvl1 | updateGasLimit |
| VotingPortal_Eth_Eth | - | onlyOwner | Executor_lvl1 | setStartVotingGasLimit, setVoteViaPortalGasLimit |
| VotingPortal_Eth_Avax | - | onlyOwner | Executor_lvl1 | setStartVotingGasLimit, setVoteViaPortalGasLimit |
| VotingPortal_Eth_Pol | - | onlyOwner | Executor_lvl1 | setStartVotingGasLimit, setVoteViaPortalGasLimit |
| Executor_lvl1 | - | onlyOwner | PayloadsController | executeTransaction |
| Executor_lvl2 | - | onlyOwner | PayloadsController | executeTransaction |
| EmergencyRegistry | - | onlyOwner | Executor_lvl1 | setEmergency |
| CCIP adapter | - | trustedRemote | CrossChainController(Pol), CrossChainController(Avax) | receiveMessage |
| Polygon native adapter | - | trustedRemote | CrossChainController(Pol) | receiveMessage |
| LayerZero adapter | - | trustedRemote | CrossChainController(Pol), CrossChainController(Avax) | receiveMessage |
| Hyperlane adapter | - | trustedRemote | CrossChainController(Pol), CrossChainController(Avax) | receiveMessage |
| CrossChainController | ProxyAdmin | onlyOwner | Executor_lvl1 | approveSenders, removeSenders, enableBridgeAdapters, disableBridgeAdapters, updateMessagesValidityTimestamp, allowReceiverBridgeAdapters, disallowReceiverBridgeAdapters |
| CrossChainController | ProxyAdmin | onlyOwnerOrGuardian | BGD, Executor_lvl1 | retryEnvelope, retryTransaction, updateGuardian |
| CrossChainController | ProxyAdmin | onlyRescueGuardian | Executor_lvl1 | emergencyTokenTransfer, emergencyEtherTransfer |
| CrossChainController | ProxyAdmin | onlyApprovedSenders | AaveGovernanceV3, VotingMachine, VotingPortal_Eth_Eth, VotingPortal_Eth_Avax, VotingPortal_Eth_Pol | forwardMessage |
| CrossChainController | ProxyAdmin | onlyApprovedBridges | CCIP adapter, Polygon native adapter, LayerZero adapter, Hyperlane adapter | receiveCrossChainMessage |
| Role | Contract |
|---|---|
| DEFAULT_ADMIN | Executor_lvl1 |
| SOLVE_EMERGENCY_ROLE | Aave Governance Guardian Ethereum |
| RETRY_ROLE | BGD |