# \[ARFC\] Onboard ezETH to Arbitrum and Base Instances **URL:** \ **Category:** General\ **Created:** [October 29, 2024, 10:51am UTC](https://governance.aave.com/t/arfc-onboard-ezeth-to-arbitrum-and-base-instances/19622 "2024-10-29T10:51:53Z")\ **Posts on this page:** 1\ **Showing post:** 6
**Author:** ![bgdlabs](https://dub1.discourse-cdn.com/flex013/user_avatar/governance.aave.com/bgdlabs/32/1829_2.png) [@bgdlabs](https://governance.aave.com/u/bgdlabs)\ **Post date:** [December 3, 2024, 10:19am UTC](https://governance.aave.com/t/arfc-onboard-ezeth-to-arbitrum-and-base-instances/19622/6 "2024-12-03T10:19:19Z")
# ezETH (Base and Arbitrum) technical analysis ## Summary Following the new proposal for listing it on Base and Arbitrum, we checked how the Renzo Team had implemented the ezETH bridge mainnet \<\> L2s and the native minting. This is a technical analysis of all the smart contracts of the asset and main bridge dependencies. _Disclosure_: This is not an exhaustive security review of the asset like the ones done by the [Renzo team](https://www.renzoprotocol.com/), but an analysis from an Aave technical service provider on different aspects we consider critical to review before a new type of listing. ## Analysis The Renzo team has implemented a cross-chain asset system with 2 layers: - The ezETH L2 token on each chain is controlled by Renzo native infrastructure and sets limits for how much volume can be bridged by each underlying provider (e.g. Hyperlane). - The bridge providers, to which Renzo delegates the message passing to make bridging efficient. This resembles a model like cross-chain GHO, with the asset issuer keeping so-called super-admin control, and delegating certain sub-permissions to more efficient infrastructure. In addition, there is legacy “native” minting facilities on L2s getting deprecated, but to be replaced by new ones in the upcoming future. * * * ### Bridge Currently, the main cross-chain ezETH underlying bridge provider is Hyperlane, allowing users to transfer ezETH to the major L2s (complete list [here](https://docs.renzoprotocol.com/docs/contracts/layer-2s)). This integration consists of a `HypXERC20Lockbox` contract on the mainnet that sends cross-chain messages via the HyperLance Mailbox contract. Relayers then propagate those messages to the Mailbox on the L2 that validates and calls the `HypXERC20` contract to mint xezETH (L2 version of ezETH) for the user. The ezETH on L2s sets limits for the maximum amount each bridge can mint/burn per day, currently set at 2000 ezETH mint/burn per day for both chains Arbitrum and Base. The bridge flow between chains consists of a few steps: - **L1 → L2s** - **L2s → L1** - **L2s → L2s** * * * ### L2 Native Minting _Important: The native minting described below is being offboarded. In the following weeks, a new version of the native restaking will be implemented by the Renzo Team._ The Renzo native L2 minting process allows users to mint xezETH for ETH/WETH on L2s via the xRenzoDeposit contract, which uses the current exchange rate provided by a middleware contract, which pulls prices from the ezETH Chainlink price feed on the corresponding L2 to calculate the amount of xezETH for the user. Later, the WETH is batched with other deposits and bridged to the mainnet via the Connext bridge. Then, the WETH is deposited into Renzo, and the ezETH is sent to a lockbox contract, which can be exchanged for xezETH if users want to bridge their assets. The xRenzoDeposit contract has a limit of minting 5000 ezETH per day on Arbitrum and Base and cannot burn tokens. * * * ### Contracts **Ethereum Mainnet** - [HypXERC20LockBox](https://etherscan.io/address/0xc59336d8edda9722b4f1ec104007191ec16f7087#code): It’s an OZ Transparent Proxy upgradable by a [Gnosis safe 4-of-6](https://etherscan.io/address/0xD1e6626310fD54Eceb5b9a51dA2eC329D6D4B68A#readProxyContract). - [LockBox](https://etherscan.io/address/0xC8140dA31E6bCa19b287cC35531c2212763C2059#code): OZ Transparent Proxy upgradable by a [7-day Timelock](https://etherscan.io/address/0x81F6e9914136Da1A1d3b1eFd14F7E0761c3d4cc7#readContract). - [xezETH](https://etherscan.io/address/0x2416092f143378750bb29b79eD961ab195CcEea5#code): OZ Transparent Proxy upgradable by a [7-day Timelock](https://etherscan.io/address/0x81F6e9914136Da1A1d3b1eFd14F7E0761c3d4cc7#readContract). - [Adapter Rate Contract](https://etherscan.io/address/0x387dBc0fB00b26fb085aa658527D5BE98302c84C#readProxyContract) (Pricing): OZ Transparent Proxy upgradable by [7-day Timelock](https://etherscan.io/address/0x81F6e9914136Da1A1d3b1eFd14F7E0761c3d4cc7#readContract). **Arbitrum** - [HypXERC20](https://arbiscan.io/address/0xB26bBfC6d1F469C821Ea25099017862e7368F4E8#readProxyContract): OZ Transparent Proxy upgradable by a [Gnosis safe 3-of-5](https://arbiscan.io/address/0x0e60fd361fF5b90088e1782e6b21A7D177d462C5#readProxyContract). - [MailBox](https://arbiscan.io/address/0x979Ca5202784112f4738403dBec5D0F3B9daabB9#code): OZ Transparent Proxy upgradable by a [7-day Timelock](https://arbiscan.io/address/0xAC98b0cD1B64EA4fe133C6D2EDaf842cE5cF4b01#code) - [ezETH](https://arbiscan.io/address/0x2416092f143378750bb29b79eD961ab195CcEea5#readProxyContract): OZ Transparent Proxy upgradable by a [Gnosis safe 3-of-5](https://arbiscan.io/address/0x0e60fd361fF5b90088e1782e6b21A7D177d462C5#readProxyContract). - [_Legacy Native Restaking xRenzoDeposit_](https://arbiscan.io/address/0xf25484650484de3d554fb0b7125e7696efa4ab99#readProxyContract): OZ Transparent Proxy upgradable by a [Gnosis safe 3-of-5](https://arbiscan.io/address/0x0e60fd361fF5b90088e1782e6b21A7D177d462C5#readProxyContract) **Base** - [HypXERC20](https://basescan.org/address/0x2552516453368e42705D791F674b312b8b87CD9e): OZ Transparent Proxy upgradable by a [Gnosis Safe 3-of-5](https://basescan.org/address/0x8410927C286A38883BC23721e640F31D3E3E79F8). - [MailBox](https://basescan.org/address/0xeA87ae93Fa0019a82A727bfd3eBd1cFCa8f64f1D#code): OZ Transparent Proxy upgradable by a [Gnosis Safe 4-of-9](https://basescan.org/address/0x3949eD0CD036D9FF662d97BD7aC1686051c4aeBF#readProxyContract). - [ezETH](https://basescan.org/address/0x2416092f143378750bb29b79ed961ab195cceea5#code): OZ Transparent Proxy upgradable by a [Gnosis Safe 3-of-5](https://basescan.org/address/0x8410927C286A38883BC23721e640F31D3E3E79F8#readProxyContract). - [_Legacy Native Restaking xRenzoDeposit_](https://basescan.org/address/0xf25484650484de3d554fb0b7125e7696efa4ab99#code): OZ Transparent Proxy upgradable by a [Gnosis Safe 3-of-5](https://basescan.org/address/0x8410927C286A38883BC23721e640F31D3E3E79F8). ## Pricing strategy For pricing ezETH, we suggest CAPO with Chainlink ezETH/ETH exchange rate feed + WETH price feed. The exchange rate feed is present on Base and Arbitrum, pulling the rate from an [adapter contract](https://etherscan.io/address/0x387dBc0fB00b26fb085aa658527D5BE98302c84C#readProxyContract) that queries the total supply and total TVL from the Restake Manager contract on mainnet. This adapter contract is upgradeable by the Renzo Team, which imposes centralization risks in the upgrades. ## Miscellaneous aspects - In the following weeks, the Renzo team will implement a new native L2 minting, where users can deposit ETH/WETH on L2s and receive ezETH in exchange. - Even if controlled via the limits established by Renzo, the system has an important dependency on the underlying bridge provider, aside from the centralization on the multi-sig setup controlling upgradeability. ## Conclusion We think ezETH has no problem integrating with Aave on Base and Arbitrum, and there is no major blocker for listing. --- _[View the full topic](https://governance.aave.com/t/arfc-onboard-ezeth-to-arbitrum-and-base-instances/19622)._