Deployed contracts
Consensus and FROSTCoordinator contract addresses will be added once deployed.
Immutability and parameters
Staking contract The Staking contract has an owner (the SafeDAO via the Safe Ecosystem Foundation) but is not upgradeable. The owner can propose changes to two parameters. All proposed changes go through a mandatory 7-day timelock before taking effect. After the timelock, anyone can execute the queued change.
The Staking contract has been independently formally verified and audited by Certora. See the full report for details.
Consensus and FROSTCoordinator contracts
Both contracts are non-upgradeable and have no owner. There are no admin functions and no configurable parameters.
Validator Staker addresses in the Consensus contract are self-set by each Validator. Epoch transitions (changes to the active Validator set) require a threshold signature from the current Validator set, not any central authority.
In case there is an unrecoverable failure in Safenet Beta, both contracts have to be redeployed and the network needs to be relaunched.