Access Control & Multisigs

All authorities are Gnosis Safe multisigs. Every safe is staffed by team members or external signers, all signing with hardware wallets and operating under strict signer discipline — every transaction is checked through a thorough internal verification process and simulated (e.g. via Tenderly) before it is signed.

Ethereum Mainnet:

Safe	Address	Threshold	Role
External Admin	0xb3696a817D01C8623E66D156B6798291fa10a46d	6-of-11 (incl. external signers)	Core DEFAULT_ADMIN_ROLE; recovery custody
Admin	0xb9577E83a6d9A6DE35047aa066E3758221FE0DA2	3-of-6	Owns the Admin-Safe ProxyAdmin
Manager	0xCbcdd778AA25476F203814214dD3E9b9c46829A1	3-of-6	Day-to-day operations
Pauser	0xb6AbB489aCA4583833230F10B3A7670114D09559	1-of-5	Pause only (unpause needs admin)

L2s: Each with 2 multisigs — an Admin multisig (3-of-6) and the Pauser multisig (1-of-5):

Network	Admin multisig (3-of-6)	Pauser multisig (1-of-5)
Arbitrum	0x96D97D66d4290C9182A09470a5775FF90DAf922c	0xb6AbB489aCA4583833230F10B3A7670114D09559
Base	0x7Da95539762Dd11005889F6B72a6674A4888B56d	0xb6AbB489aCA4583833230F10B3A7670114D09559
Linea	0xEe68dF9f661da6ED968Ea4cbF7EC68fcFE375bc6	0xb6AbB489aCA4583833230F10B3A7670114D09559
Ink	0x7a1112494843d0228BFFBa13eF3Ce57f4c35a461	0xb6AbB489aCA4583833230F10B3A7670114D09559
Mantle	0xfa3bA682f2210d05D087b331c71F5b34F16Cd3e9	0xb6AbB489aCA4583833230F10B3A7670114D09559

Note: The ProxyAdmins on Ethereum mainnet and L2s are owned by their timelocks, whose proposers are the respective admin multisigs.