DocumentationOpen App

Roles & Permissions

Gearbox governance is divided into distinct roles with carefully scoped authority. No single role can unilaterally modify a live market — this separation of concerns is the foundation of the permissionless design.

Role Summary

RoleScopeCan Affect End Users?Primary Responsibility
DAOAll chainsNoProtocol-level governance, code approval
Technical MultisigAll chainsNoExecute DAO decisions (temporary)
AuditorsAll chainsNoVerify and sign contract bytecode
Instance OwnersOne chainNoChain-specific infrastructure and PFS
Financial RepresentativesOne chainNoFee management per chain
Market CuratorsSpecific marketsYes (with timelock)Create and manage markets
Emergency AdminSpecific marketsYes (immediate)Emergency response
Pausable/Unpausable AdminsSpecific marketsYesPause/unpause market components
Emergency LiquidatorsSpecific marketsYesSpecial liquidation during emergencies

DAO (Token Holders)

The DAO represents GEAR token holders and governs protocol-level decisions across all chains. Critically, none of the DAO's actions can modify existing markets.

AspectDetail
ScopeAll chains
Voting powerProportional to token holdings
Current processSnapshot voting, then technical multisig executes
Future processOn-chain voting directly on transaction batches

DAO Authority

AreaActions
CCM ManagementManage the Cross-Chain Multisig configuration
BCR ManagementAdd auditors, allow system contracts in the Bytecode Repository
Instance ManagementActivate instances, set global addresses

Key Constraint

None of the DAO's actions can modify existing markets. The DAO governs the protocol infrastructure, not individual market parameters.

Technical Multisig

A temporary measure that exists solely to execute DAO decisions. The Technical Multisig has no autonomous decision-making authority.

AspectDetail
ScopeAll chains
AutonomyNone — executes DAO decisions only
ImplementationLegacy Safe multisig + Cross-Chain Multisig contract
InteractionStrictly forced to interact with CCM on Ethereum Mainnet only

This role is designed to be eliminated once on-chain voting is fully implemented.

Auditors

External parties who audit smart contracts and sign verified bytecode. They are the gatekeepers for what code can be deployed.

AspectDetail
ScopeAll chains
Interaction pointBCR on Ethereum Mainnet exclusively
ManagementAdded and removed by DAO

Auditor Authority

ActionFunctionDescription
Submit audit reportsubmitAuditReport()Add an audit report to the BCR
Assign contract typevia submitAuditReport()Assigns contractType ownership to the verified bytecode

Instance Owners

Instance Owners manage chain-specific infrastructure through a soft power mechanism. Their authority is limited to preparing the environment — they cannot force changes onto existing markets.

AspectDetail
ScopeOne chain
Current composition3 core Gearbox members + 9 tech multisig members, threshold 4
Neutrality requirementMust remain impartial regarding price feed brands

Instance Owner Authority

AreaActions
PriceFeed StoreAdd, update, and remove token/feed mappings
Local addressesManage chain-specific address configuration
Bot managementForbid specific bots
InfrastructureManage router and internal systems

Key Constraint

None of their actions can modify existing market behavior. PFS changes are not auto-applied to existing markets — they only affect future configuration transactions.

Financial Representatives

Each chain has a Financial Representative who manages fee-related operations. This role requires cooperation with market curators through a 2/2 approval mechanism.

AspectDetail
ScopeOne chain
AppointmentSet during instance activation
ReplacementChanged via DAO vote

Financial Representative Authority

ActionFunctionRequires 2/2 Approval
Set default fee splitsetDefaultSplit()Yes
Set token-specific splitsetTokenSplit()Yes
Set insurance amountsetTokenInsuranceAmount()Yes
Withdraw collected feeswithdrawToken()Yes

Market Curators

Market curators are the most powerful market-level role. Anyone can become a curator — the DAO cannot deny participation. The DAO has no responsibility for or control over curated markets.

AspectDetail
ScopeSpecific markets
Entry barrierNone — anyone can become a curator
Primary gatewayMarketConfigurator contract (supports Ownable2Step)
Default timelock24 hours (hardcoded minimum)

Governance Flow

Market Curator Authority — Configurator Level

ActionDescription
Set emergency adminAssign or change the emergency admin for the market
Grant/revoke rolesManage role assignments within the market
Create marketsDeploy new markets
Shutdown marketsPermanently close markets
Add periphery contractsRegister additional contracts for the market

Market Curator Authority — Market Management

ActionDescription
Add collateral tokensExtend accepted collateral types
Create/shutdown credit suitesManage credit account configurations
Upgrade oraclesChange price oracle implementations
Upgrade IRMChange interest rate model
Upgrade rate keeperChange rate keeper implementation
Upgrade loss policyChange loss handling policy
Set feesConfigure fee parameters
Set limitsConfigure borrowing and position limits
Ramp LTsGradually adjust liquidation thresholds
Forbid/allow tokensRestrict or permit specific tokens
Pause/unpauseHalt or resume market operations

Emergency Admin

The Emergency Admin can act immediately without timelock delays. This role exists for rapid response to security threats or market anomalies.

AspectDetail
ScopeSpecific markets
TimelockNone — effects are immediate
AppointmentSet by market owner, can be changed anytime

Emergency Admin Authority

AreaActions
Timelock managementCancel pending batches in the timelock
Role managementRevoke roles
Oracle managementConfigure PriceOracle
Pool emergencySet credit manager debt limit to zero, set quota to zero, pause pool
Credit suite emergencyEmergency credit suite management

Pausable/Unpausable Admins

Specialized roles that can pause or unpause specific market components. These provide granular control over market operations during incidents.

AspectDetail
ScopeSpecific markets
AuthorityPause or unpause individual market components
User impactCan affect end users

Emergency Liquidators

Accounts with special liquidation rights that are only active during emergency conditions.

AspectDetail
ScopeSpecific markets
ActivationOnly during emergencies
AuthoritySpecial liquidation permissions beyond normal liquidator access

Learn More