Trust & safety · Protection
Upgrades and multisig
Who can change the contracts, and why nobody can do it quietly.
The contracts can be upgraded, so bugs can be fixed. An upgrade can change what the code does, which is why no single key can make one. Every change needs two of three signers, and it waits 48 hours in public before it can run, so everyone can see it coming.
On BNB Chain, upgrades go through a Safe multisig that needs 2 of its 3 signers. Each upgrade is announced first and can only run after 48 hours, within a 7-day window. While one is pending, ZASH shows a notice.
You can check both multisigs yourself on the block explorer; the addresses are on Contract and program addresses.