These are the privileged operations identified during the audit:
#### AddressResolver - Owner can: - Renounce ownership - Transfer ownership (maybe to uncontrolled address) - Update the mapping between contract names and the address of the associated contract used by the protocol
#### BeaconProxyController - Owner can: - Renounce ownership - Transfer ownership (maybe to uncontrolled address) - Update the implementation contract to an arbitrary contract for the contracts: - LendingMarket - FutureValueVault - AcceptedContracts can: - Deploy FutureValueVault contracts. - Deploy LendingMarket contracts.
#### CurrencyController - Owner can: - Renounce ownership - Transfer ownership (maybe to uncontrolled address) - Add a new currency (or override the parameters of an existing one) with the following parameters: number of decimals, haircut value, list of price feeds and heartbeat value. - Remove a currency - Update the haircut value of an existing currency - Update or remove the price feeds list of an existing currency
#### FutureValueVault - Accepted Contracts can: - Increase the balance of a user - Decrease the balance of a user - Transfer tokens from a user - Reset all amount of a user if there is an amount in a past maturity - Set the initial total supply - Force the reset of the future value of a user
#### GenesisValueVault - Accepted Contracts can: - Initialize currency settings - Trigger the update of the initial compound factor - Execute an AutoRoll - Update genesis value with future value - Update genesis value with residual amount - Transfer tokens from a user - Cleanup the balance of a user per maturity - Force the reset of the genesis value of a user
#### LendingMarket - Accepted Contracts can: - Create an order book - Execute an autoRoll - Cancel an order - Execute an order - Execute a preorder - Unwind a position - Execute the itayose call - Update the order fee rates - Update the Circuit breaker limit range - Pause the contract - Unpause the contract
#### LendingMarketController - Owner can: - Renounce ownership - Transfer ownership (maybe to uncontrolled address) - Update the order fee rates of a given currency - Update the Circuit breaker limit range of a given currency - Initialize a lending market - Create an order book - Trigger an emergency termination to stop the protocol - Update the minimum debt unit price - Operator can: - Pause a lending market - Unpause a lending market - Renounce its role - DefaultAdmin can: - Grant DefaultAdmin role to an address - Revoke DefaultAdmin role from an address - Renounce its role - Grant Operator role to an address - Revoke Operator role from an address - Update the admin role of a role, which means which roles can manage (grant/revoke) other roles.
#### ProxyController - Owner can: - Renounce ownership - Transfer ownership (maybe to uncontrolled address) - Update in a batch the admin of a set of proxies deployed by this contract to an arbitrary new admin. - Update the implementation contract to an arbitrary contract and provide initialization data for the contracts: - AddressResolver - BeaconProxyController - TokenVault - CurrencyController - GenesisValueVault - LendingMarketController - ReserveFund - For each contract: - a UpgradeableProxy is deployed if none was deployed until now for this given contract. - If the new contract contains: - a self.destruct instruction, existing proxy contracts could self-destruct. - a function to transfer all funds to an arbitrary address, existing proxy contracts could be drained.
#### ReserveFund - Owner can: - Renounce ownership - Transfer ownership (maybe to uncontrolled address) - Execute a transaction (or a batch) via arbitrary call to arbitrary addresses with arbitrary payloads. It includes sending to an arbitrary address tokens owned by the `ReserveFund` contract. - Deposit tokens to the token vault - Withdraw tokens held by ReserveFund from the token vault
#### TokenVault - Owner can: - Renounce ownership - Transfer ownership (maybe to uncontrolled address) - Register a currency to be accepted as a collateral - Unregister a currency to be accepted as a collateral - Accepted Contracts can: - Trigger a deposit of collateral from any user that approved that contract to do so - Add a deposit amount for a user - Remove a deposit amount for a user - Force the reset of the deposit amount of a user - Transfer tokens from a user - Operator can: - Pause the token vault - Unpause the token vault - Renounce its role - DefaultAdmin can: - Grant DefaultAdmin role to