ETHEREUM-LIDO.md

ETHEREUM

LIDO

Contracts upgradeability

contract	upgradeable by
PoolAddressesProvider	not upgradeable
Pool	Governance
PoolConfigurator	Governance
AaveOracle	not upgradeable
RewardsController	Governance
WrappedTokenGatewayV3	not upgradeable
ParaSwapLiquiditySwapAdapter	not upgradeable
ParaSwapRepayAdapter	not upgradeable
EmissionManager	not upgradeable
PoolAddressesProviderRegistry	not upgradeable
ProxyAdmin	not upgradeable
ProxyAdminLong	not upgradeable
ACLManager	not upgradeable
AaveMerkleDistributor	not upgradeable
SvrOracleSteward	not upgradeable
EdgeRiskStewardRates	not upgradeable
EdgeInjectorRates	not upgradeable
AavePolEthBridge	not upgradeable
Manual AGRS	not upgradeable
Collector	Governance
ClinicSteward	not upgradeable
PoolExposureSteward	not upgradeable
Aave a/v/s tokens	Governance

Actions type

type	can be executed by
updateReserveBorrowSettings	Governance
configureProtocolFees	Governance
updateReserveCaps	Governance,Steward,External Contract
updateReserveSettings	Governance
configureCollateral	Governance
upgradeAaveTokens (a/v/s)	Governance
upgradeAaveOracles	Governance
reserveUpgradeability	Governance
pausePool	Governance,Multi-sig
pauseAndFreezeReserve	Governance,Steward,External Contract,Multi-sig
reserveListing	Governance
adminsConfiguration	Governance
protocolUpgradeablity	Governance
adiConfigurations	Governance
retryAndInvalidateMessages	Multi-sig,Governance
configureGovernance	Governance
cancelProposal	Multi-sig
updateRiskParameters	Steward

Contracts

contract	proxyAdmin	modifier	permission owner	functions
PoolAddressesProvider	-	onlyOwner	Executor_lvl1	setMarketId, setAddress, setAddressAsProxy, setPoolImpl, setPoolConfiguratorImpl, setPriceOracle, setACLManager, setACLAdmin, setPriceOracleSentinel, setPoolDataProvider
Pool	PoolAddressesProvider	onlyPoolConfigurator	PoolConfigurator	initReserve, dropReserve, setReserveInterestRateStrategyAddress, setConfiguration, updateBridgeProtocolFee, updateFlashloanPremiums, configureEModeCategory, resetIsolationModeTotalDebt
Pool	PoolAddressesProvider	onlyPoolAdmin	Executor_lvl1	rescueTokens
PoolConfigurator	PoolAddressesProvider	onlyPoolAdmin	Executor_lvl1	dropReserve, dropReserve, updateAToken, updateStableDebtToken, updateVariableDebtToken, setReserveActive, updateBridgeProtocolFee, updateFlashloanPremiumTotal, updateFlashloanPremiumToProtocol
PoolConfigurator	PoolAddressesProvider	onlyAssetListingOrPoolAdmins	Executor_lvl1	initReserves
PoolConfigurator	PoolAddressesProvider	onlyRiskOrPoolAdmins	Executor_lvl1, Gho Lido Direct Minter, Lido Gho Aave Steward, Manual AGRS, RateStrategy_PrimeAgent, CapoPriceCap_CoreAgent	setReserveBorrowing, setReserveBorrowing, configureReserveAsCollateral, setReserveStableRateBorrowing, setBorrowableInIsolation, setReserveFactor, setDebtCeiling, setSiloedBorrowing, setBorrowCap, setSupplyCap, setLiquidationProtocolFee, setEModeCategory, setAssetEModeCategory, setUnbackedMintCap, setReserveInterestRateStrategyAddress, setReserveFlashLoaning
PoolConfigurator	PoolAddressesProvider	onlyRiskOrPoolOrEmergencyAdmins	Executor_lvl1, Gho Lido Direct Minter, Lido Gho Aave Steward, Manual AGRS, RateStrategy_PrimeAgent, CapoPriceCap_CoreAgent, Aave Protocol Guardian Ethereum	setReserveFreeze
PoolConfigurator	PoolAddressesProvider	onlyEmergencyOrPoolAdmin	Executor_lvl1, Aave Protocol Guardian Ethereum	setPoolPause, setReservePause
AaveOracle	-	onlyAssetListingOrPoolAdmins	Executor_lvl1	setAssetSources, setFallbackOracle
RewardsController	PoolAddressesProvider	onlyEmissionManager	EmissionManager	configureAssets, setTransferStrategy, setRewardOracle, setClaimer
WrappedTokenGatewayV3	-	onlyOwner	Executor_lvl1	emergencyTokenTransfer, emergencyEtherTransfer
ParaSwapLiquiditySwapAdapter	-	onlyOwner	Executor_lvl1	rescueTokens
ParaSwapRepayAdapter	-	onlyOwner	Executor_lvl1	rescueTokens
EmissionManager	-	onlyOwner	Executor_lvl1	setClaimer, setEmissionAdmin, setRewardsController, renounceOwnership, transferOwnership
EmissionManager	-	onlyEmissionAdmin	ACI Safe, MASIV Safe	configureAssets, setTransferStrategy, setRewardOracle, setDistributionEnd, setEmissionPerSecond
PoolAddressesProviderRegistry	-	onlyOwner	Executor_lvl1	registerAddressesProvider, unregisterAddressesProvider
ProxyAdmin	-	onlyOwner	Executor_lvl1	changeProxyAdmin, upgrade, upgradeAndCall
ProxyAdminLong	-	onlyOwner	Executor_lvl2	changeProxyAdmin, upgrade, upgradeAndCall
ACLManager	-	onlyRole	Executor_lvl1	setRoleAdmin
AaveMerkleDistributor	-	onlyOwner	Executor_lvl1	addDistributions, emergencyTokenTransfer, emergencyEtherTransfer
SvrOracleSteward	-	onlyOwner	Executor_lvl1	removeOracle, enableSvrOracles
SvrOracleSteward	-	onlyGuardian	Aave Protocol Guardian Ethereum	disableSvrOracle
EdgeRiskStewardRates	-	onlyOwner	Executor_lvl1	setRiskConfig, setAddressRestricted, setEModeCategoryRestricted, renounceOwnership, transferOwnership
EdgeRiskStewardRates	-	onlyRiskCouncil	Lido Aave Steward Injector	updateRates
EdgeInjectorRates	-	onlyOwner	BGD Injector Guardian	addMarkets, removeMarkets, renounceOwnership, transferOwnership
EdgeInjectorRates	-	onlyOwnerOrGuardian	BGD Injector Guardian	disableUpdateById, pauseInjector, updateGuardian
AavePolEthBridge	-	onlyOwner	Executor_lvl1	bridge
AavePolEthBridge	-	onlyRescueGuardian	Executor_lvl1	emergencyTokenTransfer, emergencyEtherTransfer
Manual AGRS	-	onlyOwner	Executor_lvl1	setRiskConfig, setAddressRestricted
Manual AGRS	-	onlyRiskCouncil	Risk Council	updateCaps, updateRates, updateCollateralSide, updateLstPriceCaps, updateStablePriceCaps
Collector	ProxyAdmin	onlyFundsAdmin	Executor_lvl1, ClinicSteward, Lido ClinicSteward, PoolExposureSteward, ClinicStewardV2, ClinicStewardV2 AMM, SwapSteward	approve, transfer, setFundsAdmin, createStream
Collector	ProxyAdmin	onlyAdminOrRecipient	ProxyAdmin, Executor_lvl1, ClinicSteward, Lido ClinicSteward, PoolExposureSteward, ClinicStewardV2, ClinicStewardV2 AMM, SwapSteward	withdrawFromStream, cancelStream
ClinicSteward	-	onlyCleanUpRole	CleanUp Admin, ACI Automation	renewAllowance, batchRepayBadDebt, batchLiquidate, batchRepayBadDebt
ClinicSteward	-	onlyAdmin	Executor_lvl1	setAvailableBudget
PoolExposureSteward	-	onlyOwner	Executor_lvl1	approvePool, revokePool
PoolExposureSteward	-	onlyOwnerOrGuardian	Finance Risk Council, Executor_lvl1	depositV3, withdrawV3, withdrawV2, migrateV2toV3, migrateBetweenV3

Risk Agent Contracts

contract	proxyAdmin	modifier	permission owner	functions
RateStrategy_PrimeAgent	-	onlyAgentHub	AgentHub	inject
AgentHub	AgentHubProxyAdmin	onlyOwner	Executor_lvl1	registerAgent, setAgentAdmin, setMaxBatchSize, setAgentAddress, renounceOwnership, transferOwnership
AgentHub	AgentHubProxyAdmin	onlyOwnerOrAgentAdmin	Executor_lvl1	setAgentAsPermissioned, addPermissionedSender, removePermissionedSender, addAllowedMarket, removeAllowedMarket, addRestrictedMarket, removeRestrictedMarket, setExpirationPeriod, setAgentEnabled, setMinimumDelay, setAgentContext, setMarketsFromAgentEnabled, addAllowedMarket, addAllowedMarket
AgentHubProxyAdmin	-	onlyOwner	Executor_lvl1	changeProxyAdmin, upgrade, upgradeAndCall
RangeValidationModule	-	onlyHubOwnerOrAgentAdmin	Executor_lvl1	setDefaultRangeConfig, setRangeConfigByMarket

Guardians

Guardian	Threshold	Address	Owners
Aave Protocol Guardian Ethereum	5/9	0x2CFe3ec4d5a6811f4B8067F0DE7e47DfA938Aa30	0x5d49dBcdd300aECc2C311cFB56593E71c445d60d, 0xbA037E4746ff58c55dc8F27a328C428F258DDACb, 0x818C277dBE886b934e60aa047250A73529E26A99, 0x4f96743057482a2E10253AFDacDA3fd9CF2C1DC9, 0xb647055A9915bF9c8021a684E175A353525b9890, 0x57ab7ee15cE5ECacB1aB84EE42D5A9d0d8112922, 0xC5bE5c0134857B4b96F45AA6f6B77DB96Ac1487e, 0xd4af2E86a27F8F77B0556E081F97B215C9cA8f2E, 0xf71fc92e2949ccF6A5Fd369a0b402ba80Bc61E02
ACI Safe	1/2	0xac140648435d03f784879cd789130F22Ef588Fcd	0x57ab7ee15cE5ECacB1aB84EE42D5A9d0d8112922, 0x329c54289Ff5D6B7b7daE13592C6B1EDA1543eD4
MASIV Safe	1/3	0xdef1FA4CEfe67365ba046a7C630D6B885298E210	0x329c54289Ff5D6B7b7daE13592C6B1EDA1543eD4, 0xac140648435d03f784879cd789130F22Ef588Fcd, 0x57ab7ee15cE5ECacB1aB84EE42D5A9d0d8112922
BGD Injector Guardian	1/2	0xff37939808EcF199A2D599ef91D699Fb13dab7F7	0xe3FD707583932a99513a5c65c8463De769f5DAdF, 0x246E20bF778b3e16cB71eca535f40f8C4E6c4185
Risk Council	2/2	0x47c71dFEB55Ebaa431Ae3fbF99Ea50e0D3d30fA8	0x606dC57cd166643760E049609bfd1D8a698D3bAc, 0xbA037E4746ff58c55dc8F27a328C428F258DDACb
CleanUp Admin	3/5	0xdeadD8aB03075b7FBA81864202a2f59EE25B312b	0x45d11217458aEE68A4D976A8f17e2E24Fc5898A1, 0xCAC616Fffb687cBDDD250b2aE6F672449462985C, 0x5d49dBcdd300aECc2C311cFB56593E71c445d60d, 0x329c54289Ff5D6B7b7daE13592C6B1EDA1543eD4, 0xb647055A9915bF9c8021a684E175A353525b9890
Finance Risk Council	3/5	0x22740deBa78d5a0c24C58C740e3715ec29de1bFa	0x45d11217458aEE68A4D976A8f17e2E24Fc5898A1, 0xCAC616Fffb687cBDDD250b2aE6F672449462985C, 0x329c54289Ff5D6B7b7daE13592C6B1EDA1543eD4, 0xb647055A9915bF9c8021a684E175A353525b9890, 0x5d49dBcdd300aECc2C311cFB56593E71c445d60d

Admins

Role	Contract
DEFAULT_ADMIN	Executor_lvl1
POOL_ADMIN	Executor_lvl1
EMERGENCY_ADMIN	Aave Protocol Guardian Ethereum
ASSET_LISTING_ADMIN
FLASH_BORROWER	0x49d9409111a6363d82C4371fFa43fAEA660C917B, 0x45c00508C14601fd1C1e296eB3C0e3eEEdCa45D0, 0xab515542d621574f9b5212d50593cD0C07e641bD, 0x352423e2fA5D5c99343d371C9e3bC56C87723Cc7
RISK_ADMIN	Gho Lido Direct Minter, Lido Gho Aave Steward, Manual AGRS, RateStrategy_PrimeAgent, CapoPriceCap_CoreAgent

Collector Admins

Role	Contract
DEFAULT_ADMIN	Executor_lvl1
FUNDS_ADMIN_ROLE	Executor_lvl1, ClinicSteward, Lido ClinicSteward, PoolExposureSteward, ClinicStewardV2, ClinicStewardV2 AMM, SwapSteward

Clinic Steward Admins

Role	Contract
DEFAULT_ADMIN	Executor_lvl1
CLEANUP_ROLE	CleanUp Admin, ACI Automation

Emission Admins

admin	tokens count	tokens
ACI Safe	19	aEthLidoezETH, aEthLidorsETH, aEthLidosUSDe, aEthLidotETH, aEthLidoUSDS, aEthLidoWETH, aEthLidowstETH, aEthPT_srUSDe_25JUN2026, aEthPT_USDG_28MAY2026, ezETH, PT-srUSDe-25JUN2026, PT-USDG-28MAY2026, sUSDe, tETH, USDS, variableDebtEthPT_srUSDe_25JUN2026, variableDebtEthPT_USDG_28MAY2026, WETH, wstETH
MASIV Safe	1	rsETH