# \[ARFC\] Onboard rsETH to Arbitrum and Base V3 Instances **URL:** \ **Category:** Governance\ **Created:** [January 21, 2025, 11:48am UTC](https://governance.aave.com/t/arfc-onboard-rseth-to-arbitrum-and-base-v3-instances/20741 "2025-01-21T11:48:58Z")\ **Posts on this page:** 1\ **Showing post:** 4
**Author:** ![LlamaRisk](https://dub1.discourse-cdn.com/flex013/user_avatar/governance.aave.com/llamarisk/32/12865_2.png) [@LlamaRisk](https://governance.aave.com/u/LlamaRisk)\ **Post date:** [January 29, 2025, 8:06pm UTC](https://governance.aave.com/t/arfc-onboard-rseth-to-arbitrum-and-base-v3-instances/20741/4 "2025-01-29T20:06:49Z")
**Update** : A legacy function in the RSETHPool contract previously allowed the `BRIDGER_ROLE` to send all funds in the contract to itself and bridge the asset to L1. This resulted in a significant risk for users and the Aave DAO, as a malicious takeover of the wallet with that role could have rendered rsETH undercollateralized. Following our communication with the Kelp DAO team, they have successfully addressed the identified concern by deploying a contract upgrade which deprecated the vulnerable function. We appreciate their swift response and commitment to protocol security. - [RSETHPool contract](https://basescan.org/address/0x291088312150482826b3A37d5A69a4c54DAa9118) on Base, with `BRIDGER_ROLE` assigned to [3/6 multisig](https://basescan.org/address/0x7Da95539762Dd11005889F6B72a6674A4888B56d), was [upgraded](https://basescan.org/tx/0xc6e786f844d376f4415eb47d5d7fd790832e3341c854fa784bed6218e03a4733). - [RSETHPool contract](https://arbiscan.io/address/0x376a7564af88242d6b8598a5cfdd2e9759711b61) on Arbitrum, with `BRIDGER_ROLE` previously assigned to [ProxyAdmin](https://arbiscan.io/address/0x4938c803EBe999FB0A5527310662624f2E7A38C1), was [upgraded](https://arbiscan.io/tx/0x64607e44725b25e8914c3d6384d34c78260aec5a070ccda6c278998318e7106d). --- _[View the full topic](https://governance.aave.com/t/arfc-onboard-rseth-to-arbitrum-and-base-v3-instances/20741)._