{
"contracts": {
"addresses": {
"base": [
{
"name": "CrossChainERC20",
"isVerified": true,
"address": "base:0x0c39C78Dc31082187D8D7de9937bA46Ddba3c043",
"upgradeability": {
"proxyType": "immutable",
"admins": [],
"implementations": [],
"immutable": true
},
"chain": "base",
"description": "Implementation contract for the CrossChainERC20 tokens (beacon proxies) representing Solana-native assets on Base (e.g. SOL, JitoSOL). Only the Bridge can mint and burn them.\n",
"discoveryDrivenData": true
},
{
"name": "Bridge",
"isVerified": true,
"address": "base:0x3eff766C76a1be2Ce1aCF2B69c78bCae257D5188",
"upgradeability": {
"proxyType": "EIP1967 proxy",
"admins": [
"base:0xa966054731540a48b28990b63Dcf4f33d8aE57B2"
],
"implementations": [
"base:0x9b937e776cb00cE79036e58ff1dE777df8Ebde48"
]
},
"chain": "base",
"pastUpgrades": [],
"description": "Core contract of the Base <> Solana bridge on the Base side. Outgoing messages (token transfers and arbitrary Solana instructions) are appended to an onchain merkle mountain range accumulator that is consumed by offchain infrastructure and the bridge program on Solana. Incoming messages from Solana must first be attested in the BridgeValidator and can then be relayed permissionlessly: they mint CrossChainERC20 tokens, release escrowed Base-native assets or execute arbitrary calls through per-user Twin contracts. Base-native assets (ETH, ERC20s) that are bridged to Solana are escrowed in this contract.\n* Roles:\n * **admin**: EOA 10\n * **guardians**: EOA 2\n * **owner**: EOA 10",
"upgradableBy": [
{
"id": "EOA-10",
"name": "EOA 10",
"delay": "no"
}
],
"discoveryDrivenData": true
},
{
"name": "SignerRegistry",
"isVerified": true,
"address": "base:0x50Ea62F44f44C17d48390cc9fd235dac8E5e127a",
"upgradeability": {
"proxyType": "immutable",
"admins": [],
"implementations": [],
"immutable": true
},
"chain": "base",
"description": "Registry of the partner validator set that co-signs attestations of Solana -> Base messages for the BridgeValidator of the Base <> Solana bridge.\n* Roles:\n * **owner**: RBACTimelock\n * **signers**: EOA 1, EOA 11, EOA 12, EOA 13, EOA 3, EOA 4, EOA 5, EOA 6, EOA 7, EOA 9",
"discoveryDrivenData": true
},
{
"name": "BridgeValidator",
"isVerified": true,
"address": "base:0xAF24c1c24Ff3BF1e6D882518120fC25442d6794B",
"upgradeability": {
"proxyType": "EIP1967 proxy",
"admins": [
"base:0x0000000000000000000000000000000000000000"
],
"implementations": [
"base:0x8bb6C703e6928fc1A15132459C1eD3AdE9214b8a"
]
},
"chain": "base",
"pastUpgrades": [],
"description": "Attestation registry for messages passed from Solana to Base: batches of message hashes become valid for execution in the Bridge after being co-signed by at least 2 of 2 Base validators and 3 partner validators listed in the SignerRegistry. The validator set and thresholds are fixed at initialization: the contract exposes no functions to change them and its proxy has no admin.\n* Roles:\n * **baseValidators**: EOA 14, EOA 8",
"discoveryDrivenData": true
},
{
"name": "Twin",
"isVerified": true,
"address": "base:0xb0887e4793d944Cf7bA674B3b3FA5C15900ddaA7",
"upgradeability": {
"proxyType": "immutable",
"admins": [],
"implementations": [],
"immutable": true
},
"chain": "base",
"description": "Implementation contract for Twin accounts: each Solana address gets a deterministic Twin beacon proxy on Base that executes arbitrary calls on its behalf when instructed via bridge messages from Solana. Only the Bridge can call it.\n",
"discoveryDrivenData": true
},
{
"name": "TwinBeacon",
"isVerified": true,
"address": "base:0xb326c02150bb0De265Bb0eCeDA53531ab0163bf6",
"upgradeability": {
"proxyType": "immutable",
"admins": [],
"implementations": [],
"immutable": true
},
"chain": "base",
"description": "A beacon with an upgradeable implementation currently set as Twin. Beacon proxy contracts pointing to this beacon will all use its implementation.\n* Roles:\n * **owner**: EOA 10",
"discoveryDrivenData": true
},
{
"name": "CrossChainERC20Factory",
"isVerified": true,
"address": "base:0xDD56781d0509650f8C2981231B6C917f2d5d7dF2",
"upgradeability": {
"proxyType": "EIP1967 proxy",
"admins": [
"base:0x0000000000000000000000000000000000000000"
],
"implementations": [
"base:0x92Fc5119dC6a68eD161AFfBe59792AA04d8C375c"
]
},
"chain": "base",
"pastUpgrades": [],
"description": "Factory that permissionlessly deploys CrossChainERC20 token contracts (beacon proxies) representing Solana-native assets (SOL and SPL tokens) on Base. The deployed tokens are minted and burned by the Bridge.\n",
"discoveryDrivenData": true
},
{
"name": "CrossChainERC20Beacon",
"isVerified": true,
"address": "base:0xdDc41fdA4B758728d07F4686DbE7D1C75C6b2552",
"upgradeability": {
"proxyType": "immutable",
"admins": [],
"implementations": [],
"immutable": true
},
"chain": "base",
"description": "A beacon with an upgradeable implementation currently set as CrossChainERC20. Beacon proxy contracts pointing to this beacon will all use its implementation.\n* Roles:\n * **owner**: EOA 10",
"discoveryDrivenData": true
}
]
},
"risks": [
{
"category": "Funds can be stolen if",
"text": "a contract receives a malicious code upgrade. There is no delay on code upgrades.",
"isCritical": true
}
]
},
"description": "Base's native lock-and-mint token and message bridge between Base and Solana. Messages from Solana are verified on Base solely by signatures: 2-of-2 Base validators plus 3-of-10 partner signers managed by Chainlink's CCIP governance. The bridge escrow, all wrapped tokens and all Twin accounts are upgradable by a single EOA without delay.",
"detailedDescription": "# Architecture\n\nA central `Bridge` contract on Base combines an arbitrary message bridge and a lock-and-mint token bridge with Solana: Base-native assets (ETH, ERC20s) are escrowed in the `Bridge`, Solana-native assets (SOL, SPL tokens) are minted as `CrossChainERC20` tokens. Only the Base side is analyzed here; the Solana bridge program and its custody are out of scope.\n\n# Message lifecycle\n\nOutgoing messages escrow or burn the asset and are appended to an onchain merkle mountain range accumulator that offchain infrastructure relays to Solana. Incoming messages must first be attested in the `BridgeValidator`; anyone can then execute them via `Bridge.relayMessages()`, which mints or releases tokens, executes arbitrary calls through the sender's `Twin` account, or both. Failed executions can be retried permissionlessly.\n\n# Crosschain validation\n\nThere are no fraud proofs, validity proofs or light clients: message validity rests entirely on two signature quorums that must both be met — 2 of 2 \"Base validators\" and 3 of 10 partner signers listed in the `SignerRegistry`. If these two groups collude, they can mint unbacked tokens, drain the escrow, and act through any user's `Twin` account. The Base validator set and both thresholds are fixed (no setter functions, no proxy admin), while the partner signer set is managed by the same `RBACTimelock` (minimum delay 3h) that administers Chainlink's CCIP contracts on Base (tracked in our CCIP review).\n\n# Wrapped tokens and Twin accounts\n\n`CrossChainERC20` tokens are deployed permissionlessly through a factory as beacon proxies, minted and burned only by the `Bridge`. Each Solana address gets a deterministic `Twin` beacon proxy that executes arbitrary calls on its behalf on Base.\n\n# Pausing\n\n1 guardian account(s) can pause and unpause the bridge at any time, blocking outgoing messages, attestations and message execution.\n\n# Upgradeability and governance\n\nA single EOA is the admin of the `Bridge` proxy, the owner of the `Bridge` (managing guardians), and the owner of both beacons — it can upgrade the escrow and replace the code of every wrapped token and every `Twin` account without delay. The `BridgeValidator` and `CrossChainERC20Factory` proxies have no admin and cannot be upgraded.",
"permissions": {
"base": {
"roles": [],
"actors": [
{
"id": "RBACTimelock",
"name": "RBACTimelock",
"accounts": [
{
"address": "base:0x7B0328745A01634c32eFAf041d91432a075B308D",
"type": "Contract",
"isVerified": true,
"name": "0x7B03…308D",
"url": "https://basescan.org/address/0x7B0328745A01634c32eFAf041d91432a075B308D"
}
],
"chain": "base",
"description": "Role based timelock used to administer CCIP contracts.\n* Can interact with SignerRegistry\n * add, remove and rotate the partner validator signers (up to 20) that attest Solana -> Base messages in the BridgeValidator \n* Can interact with RBACTimelock\n * grant or revoke roles on this timelock ",
"discoveryDrivenData": true
},
{
"id": "EOA-1,-EOA-3,-EOA-4,-EOA-5,-EOA-6,-EOA-7,-EOA-9,-EOA-11,-EOA-12-and-EOA-13",
"name": "EOA 1, EOA 3, EOA 4, EOA 5, EOA 6, EOA 7, EOA 9, EOA 11, EOA 12 and EOA 13",
"accounts": [
{
"address": "base:0x1B23E9D34076EAe4C414b95Fc44728ee3F18E992",
"type": "EOA",
"isVerified": true,
"name": "0x1B23…E992",
"url": "https://basescan.org/address/0x1B23E9D34076EAe4C414b95Fc44728ee3F18E992",
"displayName": "EOA 1"
},
{
"address": "base:0x5cdd49FC6c34cA3075F3c959E99429eE2c8b83ad",
"type": "EOA",
"isVerified": true,
"name": "0x5cdd…83ad",
"url": "https://basescan.org/address/0x5cdd49FC6c34cA3075F3c959E99429eE2c8b83ad",
"displayName": "EOA 3"
},
{
"address": "base:0x675aeaCb0586E7B4F53cf087428ce4F67AB37A1F",
"type": "EOA",
"isVerified": true,
"name": "0x675a…7A1F",
"url": "https://basescan.org/address/0x675aeaCb0586E7B4F53cf087428ce4F67AB37A1F",
"displayName": "EOA 4"
},
{
"address": "base:0x77a7d8B04DB676496899a339c5D437b7711CFE02",
"type": "EOA",
"isVerified": true,
"name": "0x77a7…FE02",
"url": "https://basescan.org/address/0x77a7d8B04DB676496899a339c5D437b7711CFE02",
"displayName": "EOA 5"
},
{
"address": "base:0x994Ef538120DB2Ad4769a88A137C7D6F7c711509",
"type": "EOA",
"isVerified": true,
"name": "0x994E…1509",
"url": "https://basescan.org/address/0x994Ef538120DB2Ad4769a88A137C7D6F7c711509",
"displayName": "EOA 6"
},
{
"address": "base:0xa0c9e5CddD280370523A56c9866efaE85b36D5aE",
"type": "EOA",
"isVerified": true,
"name": "0xa0c9…D5aE",
"url": "https://basescan.org/address/0xa0c9e5CddD280370523A56c9866efaE85b36D5aE",
"displayName": "EOA 7"
},
{
"address": "base:0xa379f170d6461365E720cAE4B6512Ec8657875c4",
"type": "EOA",
"isVerified": true,
"name": "0xa379…75c4",
"url": "https://basescan.org/address/0xa379f170d6461365E720cAE4B6512Ec8657875c4",
"displayName": "EOA 9"
},
{
"address": "base:0xbAB7077c1a5b2071A32554A14d2D688dCdA01b70",
"type": "EOA",
"isVerified": true,
"name": "0xbAB7…1b70",
"url": "https://basescan.org/address/0xbAB7077c1a5b2071A32554A14d2D688dCdA01b70",
"displayName": "EOA 11"
},
{
"address": "base:0xC2ea57E68D59bB32299Fd6902D06B70Ca84c5D48",
"type": "EOA",
"isVerified": true,
"name": "0xC2ea…5D48",
"url": "https://basescan.org/address/0xC2ea57E68D59bB32299Fd6902D06B70Ca84c5D48",
"displayName": "EOA 12"
},
{
"address": "base:0xDD7D52578cf811aC63Ec3e0142315eCc633a8C93",
"type": "EOA",
"isVerified": true,
"name": "0xDD7D…8C93",
"url": "https://basescan.org/address/0xDD7D52578cf811aC63Ec3e0142315eCc633a8C93",
"displayName": "EOA 13"
}
],
"chain": "base",
"description": "* Can interact with SignerRegistry\n * attest messages passed from Solana to Base by co-signing message batches for the BridgeValidator (the partner validator threshold defined there is required, alongside the Base validator signatures). Attested messages are executable on the Bridge without further verification ",
"discoveryDrivenData": true
},
{
"id": "EOA-2",
"name": "EOA 2",
"accounts": [
{
"address": "base:0x25646667cD30e52c0b458bAAcCB9fAdA7046f167",
"type": "EOA",
"isVerified": true,
"name": "0x2564…f167",
"url": "https://basescan.org/address/0x25646667cD30e52c0b458bAAcCB9fAdA7046f167",
"displayName": "EOA 2"
}
],
"chain": "base",
"description": "* Can interact with Bridge\n * pause and unpause the Bridge, which blocks outgoing messages, incoming relays and new message attestations in the BridgeValidator ",
"discoveryDrivenData": true
},
{
"id": "EOA-8-and-EOA-14",
"name": "EOA 8 and EOA 14",
"accounts": [
{
"address": "base:0xa0F80e237Be74A580cCAEd06236075C17f1fEc69",
"type": "EOA",
"isVerified": true,
"name": "0xa0F8…Ec69",
"url": "https://basescan.org/address/0xa0F80e237Be74A580cCAEd06236075C17f1fEc69",
"displayName": "EOA 8"
},
{
"address": "base:0xe018748703F74b806399dd1ECe608453578DDE79",
"type": "EOA",
"isVerified": true,
"name": "0xe018…DE79",
"url": "https://basescan.org/address/0xe018748703F74b806399dd1ECe608453578DDE79",
"displayName": "EOA 14"
}
],
"chain": "base",
"description": "* Can interact with BridgeValidator\n * attest messages passed from Solana to Base by co-signing message batches (2 of 2 signatures required, alongside 3 partner validator signatures). Attested messages are executable on the Bridge without further verification ",
"discoveryDrivenData": true
},
{
"id": "EOA-10",
"name": "EOA 10",
"accounts": [
{
"address": "base:0xa966054731540a48b28990b63Dcf4f33d8aE57B2",
"type": "EOA",
"isVerified": true,
"name": "0xa966…57B2",
"url": "https://basescan.org/address/0xa966054731540a48b28990b63Dcf4f33d8aE57B2",
"displayName": "EOA 10"
}
],
"chain": "base",
"description": "* Can upgrade **with no delay**\n * Bridge \n* Can interact with Bridge\n * grant and revoke the guardian role and transfer ownership of the Bridge \n* Can interact with TwinBeacon\n * change the implementation of the TwinBeacon and with it the code of every Twin account contract of the Base <> Solana bridge \n* Can interact with CrossChainERC20Beacon\n * change the implementation of the CrossChainERC20Beacon and with it the code of every bridged token (e.g. SOL, JitoSOL) of the Base <> Solana bridge ",
"discoveryDrivenData": true
}
]
}
},
"plugins": [
{
"plugin": "basesolbridge",
"bridgeType": "lockAndMint"
}
],
"transfersTimeMode": "unknown",
"type": "canonical"
}