protoscan 0.1.0

package/src/registry/aave-v3.ts

@@ -0,0 +1,242 @@
+import { parseAbi } from 'viem';
+import type { ProtocolDef } from './schema.js';
+
+const poolAbi = parseAbi([
+  'function getReservesList() view returns (address[])',
+  'function getReserveData(address asset) view returns ((uint256 configuration, uint128 liquidityIndex, uint128 currentLiquidityRate, uint128 variableBorrowIndex, uint128 currentVariableBorrowRate, uint40 lastUpdateTimestamp, uint16 id, address aTokenAddress, address variableDebtTokenAddress, address interestRateStrategyAddress, uint128 accruedToTreasury, uint128 unbacked, uint128 isolationModeTotalDebt))',
+  'function FLASHLOAN_PREMIUM_TOTAL() view returns (uint128)',
+  'function FLASHLOAN_PREMIUM_TO_PROTOCOL() view returns (uint128)',
+  'function MAX_NUMBER_RESERVES() view returns (uint16)',
+  'function BRIDGE_PROTOCOL_FEE() view returns (uint256)',
+]);
+
+const poolConfiguratorAbi = parseAbi([
+  'function getConfiguratorLogic() view returns (address)',
+]);
+
+const aclManagerAbi = parseAbi([
+  'function isPoolAdmin(address admin) view returns (bool)',
+  'function isEmergencyAdmin(address admin) view returns (bool)',
+  'function isRiskAdmin(address admin) view returns (bool)',
+  'function isFlashBorrower(address borrower) view returns (bool)',
+  'function isAssetListingAdmin(address admin) view returns (bool)',
+  'function isBridge(address bridge) view returns (bool)',
+  'function DEFAULT_ADMIN_ROLE() view returns (bytes32)',
+  'function POOL_ADMIN_ROLE() view returns (bytes32)',
+  'function EMERGENCY_ADMIN_ROLE() view returns (bytes32)',
+  'function RISK_ADMIN_ROLE() view returns (bytes32)',
+  'function FLASH_BORROWER_ROLE() view returns (bytes32)',
+  'function ASSET_LISTING_ADMIN_ROLE() view returns (bytes32)',
+  'function getRoleAdmin(bytes32 role) view returns (bytes32)',
+]);
+
+const addressProviderAbi = parseAbi([
+  'function getPool() view returns (address)',
+  'function getPoolConfigurator() view returns (address)',
+  'function getPriceOracle() view returns (address)',
+  'function getACLManager() view returns (address)',
+  'function getACLAdmin() view returns (address)',
+  'function getPoolDataProvider() view returns (address)',
+  'function owner() view returns (address)',
+]);
+
+const oracleAbi = parseAbi([
+  'function getSourceOfAsset(address asset) view returns (address)',
+  'function getFallbackOracle() view returns (address)',
+  'function BASE_CURRENCY() view returns (address)',
+  'function BASE_CURRENCY_UNIT() view returns (uint256)',
+]);
+
+const ownerAbi = parseAbi([
+  'function owner() view returns (address)',
+]);
+
+export const aaveV3: ProtocolDef = {
+  id: 'aave-v3',
+  name: 'Aave V3',
+  version: '3.0',
+  website: 'https://aave.com',
+  description: 'Decentralized non-custodial liquidity protocol',
+
+  contracts: {
+    PoolAddressesProvider: { name: 'PoolAddressesProvider', role: 'Registry for protocol addresses', type: 'raw' },
+    Pool: { name: 'Pool', role: 'Main lending/borrowing pool', type: 'proxy' },
+    PoolConfigurator: { name: 'PoolConfigurator', role: 'Protocol parameter configuration', type: 'proxy' },
+    ACLManager: { name: 'ACLManager', role: 'Access control management', type: 'raw' },
+    AaveOracle: { name: 'AaveOracle', role: 'Price oracle aggregator', type: 'raw' },
+    PoolDataProvider: { name: 'PoolDataProvider', role: 'Data provider for protocol state', type: 'raw' },
+  },
+
+  deployments: {
+    ethereum: {
+      PoolAddressesProvider: '0x2f39d218133AFaB8F2B819B1066c7E434Ad94E9e',
+      Pool: '0x87870Bca3F3fD6335C3F4ce8392D69350B4fA4E2',
+      PoolConfigurator: '0x64b761D848206f447Fe2dd461b0c635Ec39EbB27',
+      ACLManager: '0xc2aaCf6553D20d1e9571216fA22D988C6Cb18E6',
+      AaveOracle: '0x54586bE62E3c3580375aE3723C145253060Ca0C2',
+      PoolDataProvider: '0x7B4EB56E7CD4b454BA8ff71E4518426c8A0EB0e3',
+    },
+    arbitrum: {
+      PoolAddressesProvider: '0xa97684ead0e402dC232d5A977953DF7ECBaB3CDb',
+      Pool: '0x794a61358D6845594F94dc1DB02A252b5b4814aD',
+      PoolConfigurator: '0x8145eddDf43f50276641b55bd3AD95944510021',
+      ACLManager: '0xa72636CbcAa8F5FF95B2cc47Ed3D1dED7EF16cc',
+      AaveOracle: '0xb56c2F0B653B2e0b10C9b928C8580Ac5Df02C7C7',
+      PoolDataProvider: '0x69FA688f1Dc47d4B5d8029D5a35FB7a548310654',
+    },
+    base: {
+      PoolAddressesProvider: '0xe20fCBdBfFC4Dd138cE8b2E6FBb6CB49777ad64D',
+      Pool: '0xA238Dd80C259a72e81d7e4664a9801593F98d1c5',
+      PoolConfigurator: '0x5731a04B1E775f0fdd454Bf70f3335886e9A96be',
+      ACLManager: '0x43955b0899Ab7232E3a454cf84AedD22Ad46FD33',
+      AaveOracle: '0x2Cc0Fc26eD4563A5ce5e8bdcfe1A2878676Ae156',
+      PoolDataProvider: '0x2d8A3C5677189723C4cB8873CfC9C8976FDF38Ac',
+    },
+    optimism: {
+      PoolAddressesProvider: '0xa97684ead0e402dC232d5A977953DF7ECBaB3CDb',
+      Pool: '0x794a61358D6845594F94dc1DB02A252b5b4814aD',
+      PoolConfigurator: '0x8145eddDf43f50276641b55bd3AD95944510021',
+      ACLManager: '0xa72636CbcAa8F5FF95B2cc47Ed3D1dED7EF16cc',
+      AaveOracle: '0xD81eb3728a631871a7eBBaD631b5f424909f0c77',
+      PoolDataProvider: '0x69FA688f1Dc47d4B5d8029D5a35FB7a548310654',
+    },
+    polygon: {
+      PoolAddressesProvider: '0xa97684ead0e402dC232d5A977953DF7ECBaB3CDb',
+      Pool: '0x794a61358D6845594F94dc1DB02A252b5b4814aD',
+      PoolConfigurator: '0x8145eddDf43f50276641b55bd3AD95944510021',
+      ACLManager: '0xa72636CbcAa8F5FF95B2cc47Ed3D1dED7EF16cc',
+      AaveOracle: '0xb023e699F5a33916Ea823A16485e259257cA8Bd1',
+      PoolDataProvider: '0x69FA688f1Dc47d4B5d8029D5a35FB7a548310654',
+    },
+  },
+
+  params: [
+    {
+      name: 'flashloanPremiumTotal',
+      description: 'Total flashloan fee in bps',
+      contract: 'Pool',
+      functionName: 'FLASHLOAN_PREMIUM_TOTAL',
+      abi: poolAbi,
+      decode: 'bps',
+      category: 'config',
+      severity: 'warning',
+    },
+    {
+      name: 'flashloanPremiumToProtocol',
+      description: 'Flashloan fee portion going to protocol treasury',
+      contract: 'Pool',
+      functionName: 'FLASHLOAN_PREMIUM_TO_PROTOCOL',
+      abi: poolAbi,
+      decode: 'bps',
+      category: 'config',
+      severity: 'warning',
+    },
+    {
+      name: 'bridgeProtocolFee',
+      description: 'Bridge protocol fee',
+      contract: 'Pool',
+      functionName: 'BRIDGE_PROTOCOL_FEE',
+      abi: poolAbi,
+      decode: 'uint',
+      category: 'config',
+      severity: 'warning',
+    },
+    {
+      name: 'maxReserves',
+      description: 'Maximum number of supported reserves',
+      contract: 'Pool',
+      functionName: 'MAX_NUMBER_RESERVES',
+      abi: poolAbi,
+      decode: 'uint',
+      category: 'config',
+      severity: 'info',
+    },
+    {
+      name: 'priceOracle',
+      description: 'Active price oracle address',
+      contract: 'PoolAddressesProvider',
+      functionName: 'getPriceOracle',
+      abi: addressProviderAbi,
+      decode: 'address',
+      category: 'config',
+      severity: 'critical',
+    },
+    {
+      name: 'aclAdmin',
+      description: 'ACL admin — can grant/revoke all roles',
+      contract: 'PoolAddressesProvider',
+      functionName: 'getACLAdmin',
+      abi: addressProviderAbi,
+      decode: 'address',
+      category: 'access',
+      severity: 'critical',
+    },
+    {
+      name: 'addressProviderOwner',
+      description: 'Owner of PoolAddressesProvider — can replace all core contracts',
+      contract: 'PoolAddressesProvider',
+      functionName: 'owner',
+      abi: addressProviderAbi,
+      decode: 'address',
+      category: 'access',
+      severity: 'critical',
+    },
+    {
+      name: 'fallbackOracle',
+      description: 'Fallback oracle used when primary source fails',
+      contract: 'AaveOracle',
+      functionName: 'getFallbackOracle',
+      abi: oracleAbi,
+      decode: 'address',
+      category: 'config',
+      severity: 'warning',
+    },
+    {
+      name: 'baseCurrency',
+      description: 'Base currency for price quotes',
+      contract: 'AaveOracle',
+      functionName: 'BASE_CURRENCY',
+      abi: oracleAbi,
+      decode: 'address',
+      category: 'config',
+      severity: 'warning',
+    },
+    {
+      name: 'baseCurrencyUnit',
+      description: 'Base currency unit (decimals)',
+      contract: 'AaveOracle',
+      functionName: 'BASE_CURRENCY_UNIT',
+      abi: oracleAbi,
+      decode: 'uint',
+      category: 'config',
+      severity: 'info',
+    },
+  ],
+
+  access: [
+    {
+      role: 'AddressesProvider Owner',
+      description: 'Can replace Pool, Configurator, Oracle, ACLManager — god key',
+      contract: 'PoolAddressesProvider',
+      functionName: 'owner',
+      abi: ownerAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'ACL Admin',
+      description: 'Can grant/revoke PoolAdmin, EmergencyAdmin, RiskAdmin roles',
+      contract: 'PoolAddressesProvider',
+      functionName: 'getACLAdmin',
+      abi: addressProviderAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'Oracle Owner',
+      description: 'Can change price feed sources — oracle manipulation vector',
+      contract: 'AaveOracle',
+      functionName: 'owner',
+      abi: ownerAbi,
+      severity: 'critical',
+    },
+  ],
+};

package/src/registry/compound-v3.ts

@@ -0,0 +1,238 @@
+import { parseAbi } from 'viem';
+import type { ProtocolDef } from './schema.js';
+
+const cometAbi = parseAbi([
+  'function governor() view returns (address)',
+  'function pauseGuardian() view returns (address)',
+  'function baseToken() view returns (address)',
+  'function baseTokenPriceFeed() view returns (address)',
+  'function extensionDelegate() view returns (address)',
+  'function supplyKink() view returns (uint256)',
+  'function supplyPerSecondInterestRateSlopeLow() view returns (uint256)',
+  'function supplyPerSecondInterestRateSlopeHigh() view returns (uint256)',
+  'function supplyPerSecondInterestRateBase() view returns (uint256)',
+  'function borrowKink() view returns (uint256)',
+  'function borrowPerSecondInterestRateSlopeLow() view returns (uint256)',
+  'function borrowPerSecondInterestRateSlopeHigh() view returns (uint256)',
+  'function borrowPerSecondInterestRateBase() view returns (uint256)',
+  'function storeFrontPriceFactor() view returns (uint256)',
+  'function baseTrackingSupplySpeed() view returns (uint256)',
+  'function baseTrackingBorrowSpeed() view returns (uint256)',
+  'function baseMinForRewards() view returns (uint256)',
+  'function baseBorrowMin() view returns (uint256)',
+  'function targetReserves() view returns (uint256)',
+  'function totalSupply() view returns (uint256)',
+  'function totalBorrow() view returns (uint256)',
+  'function isSupplyPaused() view returns (bool)',
+  'function isTransferPaused() view returns (bool)',
+  'function isWithdrawPaused() view returns (bool)',
+  'function isAbsorbPaused() view returns (bool)',
+  'function isBuyPaused() view returns (bool)',
+  'function numAssets() view returns (uint8)',
+  'function getAssetInfo(uint8 i) view returns ((uint8 offset, address asset, address priceFeed, uint64 scale, uint64 borrowCollateralFactor, uint64 liquidateCollateralFactor, uint64 liquidationFactor, uint128 supplyCap))',
+]);
+
+const configuratorAbi = parseAbi([
+  'function governor() view returns (address)',
+  'function factory() view returns (address)',
+]);
+
+const ownerAbi = parseAbi([
+  'function owner() view returns (address)',
+]);
+
+export const compoundV3: ProtocolDef = {
+  id: 'compound-v3',
+  name: 'Compound V3 (Comet)',
+  version: '3.0',
+  website: 'https://compound.finance',
+  description: 'Algorithmic money market protocol',
+
+  contracts: {
+    CometUSDC: { name: 'Comet USDC', role: 'Main USDC lending market', type: 'proxy' },
+    CometWETH: { name: 'Comet WETH', role: 'Main WETH lending market', type: 'proxy' },
+    Configurator: { name: 'Configurator', role: 'Protocol configuration manager', type: 'proxy' },
+    Timelock: { name: 'Timelock', role: 'Governance timelock', type: 'raw' },
+  },
+
+  deployments: {
+    ethereum: {
+      CometUSDC: '0xc3d688B66703497DAA19211EEdff47f25384cdc3',
+      CometWETH: '0xA17581A9E3356d9A858b789D68B4d866e593aE94',
+      Configurator: '0x316f9708bB98af7dA9c68C1C3b5e79039cD336E3',
+      Timelock: '0x6d903f6003cca6255D85CcA4D3B5E5146dC33925',
+    },
+    arbitrum: {
+      CometUSDC: '0xA5EDBDD9646f8dFF606d7448e414884C7d905dCA',
+      CometWETH: '0x9c4ec768c28520B50860ea7a15bd7213a9fF58bf',
+      Configurator: '0xb21b06D71c75973babdE35b49fFDAc3F82Ad3775',
+      Timelock: '0x3fB4d38ea7EC20D91c150F5e41C5a4652c6AE4AA',
+    },
+    base: {
+      CometUSDC: '0xb125E6687d4313864e53df431d5425969c15Eb2F',
+      CometWETH: '0x46e6b214b524310239732D51387075E0e70970bf',
+      Configurator: '0x45939657d1CA34A8FA39A924B71D28Fe8431e581',
+      Timelock: '0xCC3E7c85Bb0EE4f09380e041fee95a0caeDD4a02',
+    },
+  },
+
+  params: [
+    {
+      name: 'governor',
+      description: 'Protocol governor — can change all parameters',
+      contract: 'CometUSDC',
+      functionName: 'governor',
+      abi: cometAbi,
+      decode: 'address',
+      category: 'access',
+      severity: 'critical',
+    },
+    {
+      name: 'pauseGuardian',
+      description: 'Can pause supply/withdraw/transfer/absorb/buy',
+      contract: 'CometUSDC',
+      functionName: 'pauseGuardian',
+      abi: cometAbi,
+      decode: 'address',
+      category: 'access',
+      severity: 'critical',
+    },
+    {
+      name: 'baseToken',
+      description: 'Base token for this Comet market',
+      contract: 'CometUSDC',
+      functionName: 'baseToken',
+      abi: cometAbi,
+      decode: 'address',
+      category: 'config',
+      severity: 'critical',
+    },
+    {
+      name: 'baseTokenPriceFeed',
+      description: 'Price feed for base token',
+      contract: 'CometUSDC',
+      functionName: 'baseTokenPriceFeed',
+      abi: cometAbi,
+      decode: 'address',
+      category: 'config',
+      severity: 'critical',
+    },
+    {
+      name: 'supplyKink',
+      description: 'Utilization rate kink point for supply rate',
+      contract: 'CometUSDC',
+      functionName: 'supplyKink',
+      abi: cometAbi,
+      decode: 'wad',
+      category: 'rate',
+      severity: 'warning',
+    },
+    {
+      name: 'borrowKink',
+      description: 'Utilization rate kink point for borrow rate',
+      contract: 'CometUSDC',
+      functionName: 'borrowKink',
+      abi: cometAbi,
+      decode: 'wad',
+      category: 'rate',
+      severity: 'warning',
+    },
+    {
+      name: 'targetReserves',
+      description: 'Target reserve amount',
+      contract: 'CometUSDC',
+      functionName: 'targetReserves',
+      abi: cometAbi,
+      decode: 'uint',
+      category: 'config',
+      severity: 'warning',
+    },
+    {
+      name: 'isSupplyPaused',
+      description: 'Whether supply operations are paused',
+      contract: 'CometUSDC',
+      functionName: 'isSupplyPaused',
+      abi: cometAbi,
+      decode: 'bool',
+      category: 'state',
+      severity: 'critical',
+    },
+    {
+      name: 'isWithdrawPaused',
+      description: 'Whether withdraw operations are paused',
+      contract: 'CometUSDC',
+      functionName: 'isWithdrawPaused',
+      abi: cometAbi,
+      decode: 'bool',
+      category: 'state',
+      severity: 'critical',
+    },
+    {
+      name: 'isTransferPaused',
+      description: 'Whether transfer operations are paused',
+      contract: 'CometUSDC',
+      functionName: 'isTransferPaused',
+      abi: cometAbi,
+      decode: 'bool',
+      category: 'state',
+      severity: 'warning',
+    },
+    {
+      name: 'totalSupply',
+      description: 'Total supplied amount',
+      contract: 'CometUSDC',
+      functionName: 'totalSupply',
+      abi: cometAbi,
+      decode: 'uint',
+      category: 'state',
+      severity: 'info',
+    },
+    {
+      name: 'totalBorrow',
+      description: 'Total borrowed amount',
+      contract: 'CometUSDC',
+      functionName: 'totalBorrow',
+      abi: cometAbi,
+      decode: 'uint',
+      category: 'state',
+      severity: 'info',
+    },
+    {
+      name: 'numAssets',
+      description: 'Number of collateral assets',
+      contract: 'CometUSDC',
+      functionName: 'numAssets',
+      abi: cometAbi,
+      decode: 'uint',
+      category: 'config',
+      severity: 'info',
+    },
+  ],
+
+  access: [
+    {
+      role: 'Governor',
+      description: 'Full control — can change all parameters, pause, upgrade',
+      contract: 'CometUSDC',
+      functionName: 'governor',
+      abi: cometAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'Pause Guardian',
+      description: 'Can pause supply/withdraw/transfer/absorb/buy operations',
+      contract: 'CometUSDC',
+      functionName: 'pauseGuardian',
+      abi: cometAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'Configurator Governor',
+      description: 'Can update Comet market configurations',
+      contract: 'Configurator',
+      functionName: 'governor',
+      abi: configuratorAbi,
+      severity: 'critical',
+    },
+  ],
+};

package/src/registry/eigenlayer.ts

@@ -0,0 +1,190 @@
+import { parseAbi } from 'viem';
+import type { ProtocolDef } from './schema.js';
+
+const strategyManagerAbi = parseAbi([
+  'function owner() view returns (address)',
+  'function paused() view returns (uint256)',
+  'function strategyWhitelister() view returns (address)',
+]);
+
+const delegationManagerAbi = parseAbi([
+  'function owner() view returns (address)',
+  'function paused() view returns (uint256)',
+  'function minWithdrawalDelayBlocks() view returns (uint256)',
+  'function domainSeparator() view returns (bytes32)',
+]);
+
+const eigenPodManagerAbi = parseAbi([
+  'function owner() view returns (address)',
+  'function paused() view returns (uint256)',
+]);
+
+const slasherAbi = parseAbi([
+  'function owner() view returns (address)',
+  'function paused() view returns (uint256)',
+]);
+
+const avsDirectoryAbi = parseAbi([
+  'function owner() view returns (address)',
+  'function paused() view returns (uint256)',
+]);
+
+const rewardsCoordinatorAbi = parseAbi([
+  'function owner() view returns (address)',
+  'function paused() view returns (uint256)',
+  'function activationDelay() view returns (uint32)',
+  'function currRewardsCalculationEndTimestamp() view returns (uint32)',
+  'function rewardsUpdater() view returns (address)',
+]);
+
+export const eigenLayer: ProtocolDef = {
+  id: 'eigenlayer',
+  name: 'EigenLayer',
+  version: '1.0',
+  website: 'https://eigenlayer.xyz',
+  description: 'Restaking protocol for Ethereum shared security',
+
+  contracts: {
+    StrategyManager: { name: 'StrategyManager', role: 'Manages staking strategies and deposits', type: 'proxy' },
+    DelegationManager: { name: 'DelegationManager', role: 'Manages operator delegation and withdrawals', type: 'proxy' },
+    EigenPodManager: { name: 'EigenPodManager', role: 'Manages native ETH restaking pods', type: 'proxy' },
+    Slasher: { name: 'Slasher', role: 'Handles slashing conditions', type: 'proxy' },
+    AVSDirectory: { name: 'AVSDirectory', role: 'Registry of Actively Validated Services', type: 'proxy' },
+    RewardsCoordinator: { name: 'RewardsCoordinator', role: 'Distributes rewards to operators/stakers', type: 'proxy' },
+  },
+
+  deployments: {
+    ethereum: {
+      StrategyManager: '0x858646372CC42E1A627fcE94aa7A7033e7CF075A',
+      DelegationManager: '0x39053D51B77DC0d36036Fc1fCc8Cb819df8Ef37A',
+      EigenPodManager: '0x91E677b07F7AF907ec9a428aafA9fc14a0d3A338',
+      Slasher: '0xD92145c07f8Ed1D392c1B88017934E301CC1c3Cd',
+      AVSDirectory: '0x135DDa560e946695d6f155dACaFC6f1F25C1F5AF',
+      RewardsCoordinator: '0x7750d328b314EfFa365A0402CcfD489B80B0adda',
+    },
+  },
+
+  params: [
+    {
+      name: 'strategyManagerPaused',
+      description: 'Pause state bitmap (0=unpaused, non-zero=paused operations)',
+      contract: 'StrategyManager',
+      functionName: 'paused',
+      abi: strategyManagerAbi,
+      decode: 'uint',
+      category: 'state',
+      severity: 'critical',
+    },
+    {
+      name: 'strategyWhitelister',
+      description: 'Address authorized to whitelist new strategies',
+      contract: 'StrategyManager',
+      functionName: 'strategyWhitelister',
+      abi: strategyManagerAbi,
+      decode: 'address',
+      category: 'access',
+      severity: 'critical',
+    },
+    {
+      name: 'delegationPaused',
+      description: 'Delegation manager pause state',
+      contract: 'DelegationManager',
+      functionName: 'paused',
+      abi: delegationManagerAbi,
+      decode: 'uint',
+      category: 'state',
+      severity: 'critical',
+    },
+    {
+      name: 'minWithdrawalDelayBlocks',
+      description: 'Minimum blocks to wait for withdrawal completion',
+      contract: 'DelegationManager',
+      functionName: 'minWithdrawalDelayBlocks',
+      abi: delegationManagerAbi,
+      decode: 'uint',
+      category: 'config',
+      severity: 'warning',
+    },
+    {
+      name: 'eigenPodPaused',
+      description: 'EigenPod manager pause state',
+      contract: 'EigenPodManager',
+      functionName: 'paused',
+      abi: eigenPodManagerAbi,
+      decode: 'uint',
+      category: 'state',
+      severity: 'critical',
+    },
+    {
+      name: 'rewardsUpdater',
+      description: 'Address authorized to submit reward merkle roots',
+      contract: 'RewardsCoordinator',
+      functionName: 'rewardsUpdater',
+      abi: rewardsCoordinatorAbi,
+      decode: 'address',
+      category: 'access',
+      severity: 'critical',
+    },
+    {
+      name: 'rewardsActivationDelay',
+      description: 'Delay before new rewards become claimable',
+      contract: 'RewardsCoordinator',
+      functionName: 'activationDelay',
+      abi: rewardsCoordinatorAbi,
+      decode: 'uint',
+      category: 'config',
+      severity: 'warning',
+    },
+  ],
+
+  access: [
+    {
+      role: 'StrategyManager Owner',
+      description: 'Can pause, unpause, add/remove strategies',
+      contract: 'StrategyManager',
+      functionName: 'owner',
+      abi: strategyManagerAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'DelegationManager Owner',
+      description: 'Can pause delegation, modify withdrawal delays',
+      contract: 'DelegationManager',
+      functionName: 'owner',
+      abi: delegationManagerAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'EigenPodManager Owner',
+      description: 'Controls native ETH restaking pod creation',
+      contract: 'EigenPodManager',
+      functionName: 'owner',
+      abi: eigenPodManagerAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'Slasher Owner',
+      description: 'Controls slashing parameters',
+      contract: 'Slasher',
+      functionName: 'owner',
+      abi: slasherAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'AVSDirectory Owner',
+      description: 'Controls AVS registration',
+      contract: 'AVSDirectory',
+      functionName: 'owner',
+      abi: avsDirectoryAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'RewardsCoordinator Owner',
+      description: 'Controls reward distribution parameters',
+      contract: 'RewardsCoordinator',
+      functionName: 'owner',
+      abi: rewardsCoordinatorAbi,
+      severity: 'critical',
+    },
+  ],
+};