Concepts

The Gearbox Permissionless infrastructure is built from a set of interlocking components. Each enforces specific boundaries at the smart contract level — no role can exceed its authority, even if compromised.

• Contract Types & Versioning — The type system (contractType, domains, :: notation) and semantic versioning that organize all protocol contracts. Upgrades via module replacement, not proxies.

• Cross-Chain Multisig (CCM) — The governance synchronization layer. Hash-linked batches originate on Mainnet and propagate to all chains in strict sequential order.

• Bytecode Repository (BCR) — On-chain registry of audited contract bytecode. System domains require DAO approval; public domains (adapters, price feeds, IRMs) are permissionless after audit.

• Instances — Per-chain protocol replicas. DAO-activated, managed by an Instance Owner multisig. One instance per chain.

• PriceFeed Store — A marketplace linking tokens to approved price feeds. Managed by Instance Owners, consumed by Market Curators.

• Treasury & Insurance — Fee distribution between curators and the DAO via TreasurySplitter, plus an insurance fund for loss coverage.

• Roles & Permissions — Complete role hierarchy: DAO, Technical Multisig, Auditors, Instance Owners, Financial Representatives, Market Curators, Emergency Admin, and more. Each with explicit authority boundaries.