Title: [Asset Technical Assessment] WETH on Arc
Author: Aave Labs
Date: 2026-09-15
Summary
Technical assessment of WETH on Arc, following the Technical Asset Listing Framework.
Overall result: 
MEDIUM
WETH is a bridged representation of canonical Ethereum WETH9 with a live Chainlink ETH/USD price feed. The principal considerations are Circle’s proxy upgrade privilege and emergency bridge admin-takeover capability, both held by Circle but with no concentration risk since they sit on distinct addresses (see Section 3), the registry based code path, and the Cross Chain Token Service bridge configuration.
Technical conclusion
From a technical standpoint, WETH is eligible for listing on Arc.
Asset under review
| Field |
Value |
| Asset |
Wrapped Ether (WETH) |
| Target chain |
Arc mainnet (chain ID 5042) |
| Token contract |
0x128cC466B61f542da60c70e3aA11c10e19B84EDB |
| Native to target chain? |
No, bridged representation of Ethereum WETH9 through Circle’s Cross Chain Token Service |
| Aave Asset Classification (AAcA) |
Bridged representation of a wrapper |
WETH on Arc is backed by canonical WETH9 escrowed by the token manager on Ethereum.
0. Pre-screening
WETH is an active Arc deployment whose logic is supplied through Circle’s Cross Chain Token Service (CCTS) registry. The token’s logic contract matches byte for byte the CrossChainToken implementation designated by the CCTS registry on Ethereum, a minimal-functionality token that represents the asset on Ethereum as part of Circle’s Cross Chain Transfer Protocol (CCTP). The registry implementation has now been publicly verified, though the issuer behind this deployment is not established.
Rating: MEDIUM → the token logic has established provenance, but issuer accountability behind the deployment remains unestablished.
1. ERC20 Compliance
WETH is a standard ERC20 with 18 decimals and EIP-2612 permit support: transfer() and transferFrom() return a boolean, with no fee on transfer, rebasing, ERC777 or ERC1363 hooks, or flash mint. It has no local deposit() or withdraw() functions because it is a bridged representation, and contracts can hold and transfer it subject to the pause and denylist controls assessed in Section 3.
Rating: 
GOOD
2. Oracle
A live Chainlink ETH/USD feed on Arc provides a price with eight decimals, a 24 hour heartbeat, and a 0.5% deviation threshold. Ethereum mainnet’s ETH/USD feed uses a 1 hour heartbeat, considerably shorter than Arc’s 24 hour heartbeat, with the same 0.5% deviation threshold.
Rating: GOOD
3. Access Control
WETH’s token contract is ownerless: owner() returns an address that does not exist onchain, a placeholder rather than a controlled account. Circle’s team retains the proxy upgrade privilege over the token’s code path, held by a separate Cold Storage EOA, meaning a single-key address held in offline storage by Circle’s team, and Circle’s Cross Chain Token Service (CCTS) can take over ownership if needed in an emergency, also held as a Cold Storage EOA, assessed in Section 6. No Safe, multisig, or timelock protects these roles, and no reviewer determination is recorded for them. Both the proxy upgrade privilege and the bridge’s emergency takeover capability are held by Circle, concentrating control in a single entity.
Rating: MEDIUM → the token itself is ownerless, but Circle’s proxy upgrade privilege remains a single, undelayed control point, and the bridge carries a separate emergency admin-takeover capability.
4. Exchange Rate and Yield
Not applicable. WETH is a 1:1 representation of ether with no exchange rate function, rebase, or yield accrual.
Rating: 
N/A
5. Token Architecture
The token has one canonical contract on Arc, with mint and burn events observable through ERC20 transfer events. Its logic is resolved from the CCTS registry rather than being fixed by the token itself, and neither the token nor its token manager pins that implementation.
Rating: MEDIUM → the token logic is identified, but its behavior remains dependent on a registry controlled outside the token.
6. Bridge and Cross Chain Risk
WETH has one bridge route, CCTS, which locks canonical WETH9 on Ethereum and mints a matching amount on Arc. The route has been used in both directions, and Ethereum escrow covers Arc supply at 1.1004 times. The route’s rate limits can be removed by single operator addresses, neither token manager has a configured pause authority, and neither manager pins its implementation. Circle’s team also holds an emergency admin-takeover capability over the bridge, without an onchain delay.
Rating: MEDIUM → escrow and the bridge model are verified, while the route’s controls, implementation path, and an emergency admin-takeover capability remain concentrated with Circle.
7. Audit and Security History
The framework is identified as Circle’s CCTS, and the token’s logic matches the CrossChainToken implementation designated by the Ethereum CCTS registry (see Section 0). The reviewer had access only to the NativeFiatToken V2.2 and CCTP audit reports, and neither directly covers this registry implementation. No registry rotation has occurred after deployment. Circle has confirmed that the relevant audit report will be made public shortly after launch.
Rating: MEDIUM → the token logic has established provenance, but the registry implementation is not covered by a reviewed audit report; Circle has confirmed a public report will follow shortly after launch.
8. Dependencies
WETH depends on the CCTS registry for token and token manager logic, Cross Chain Transfer Protocol (CCTP) message transport, the Ethereum escrow manager, and the Chainlink ETH/USD feed. The registry is administered by a single address and is part of both the code path and mint path.
Rating: MEDIUM → the representation depends on the Ethereum escrow and a bridge framework whose control paths are concentrated in single addresses.
9. Summary
Findings table
Ratings in this table are plain text (Good / Medium / Critical / N/A), no icons.
| Area |
Key finding |
Rating |
| 0. Pre-screening |
Active CCTS deployment with token logic that matches the Ethereum CCTS implementation, now publicly verified; issuer accountability is not established. |
Medium |
| 1. ERC20 |
Standard ERC20 with 18 decimals and permit support, without transfer fees, rebase, hooks, or flash mint. |
Good |
| 2. Oracle |
Live Chainlink ETH/USD feed with eight decimals, within its 24 hour heartbeat. |
Good |
| 3. Access control |
The token contract is ownerless; a separate Cold Storage EOA controls the registry upgrade path, and Circle retains a separate emergency bridge admin-takeover capability, also a Cold Storage EOA. |
Medium |
| 4. Exchange rate / yield |
1:1 ether representation with no yield or exchange rate mechanism. |
N/A |
| 5. Token architecture |
The registry supplies token logic, and neither the token nor its manager pins the implementation. |
Medium |
| 6. Bridge and cross chain |
Ethereum escrow exceeds Arc supply, while route limits, pause configuration, implementation control, and an emergency admin-takeover capability remain concentrated with Circle. |
Medium |
| 7. Audit and security |
Token logic has established provenance; the CCTS registry implementation is not covered by a reviewed audit report, though Circle confirmed one will follow shortly after launch. |
Medium |
| 8. Dependencies |
The registry is a dependency controlled by a single address in the token code and mint paths. |
Medium |
Disclaimer
Aave Labs has no formal or informal affiliation with the WETH issuer or any related party beyond this technical assessment. Aave Labs has not been compensated by the WETH issuer or any related party in connection with this work.
Copyright
Copyright and related rights waived via CC0.