AllowList Interface

Overview

The AllowList is a security feature used by precompiles to manage which addresses have permission to interact with certain contract functionalities. For example, in the Native Minter Precompile, the allow list is used to control who can mint new native tokens.

The AllowList consists of three roles:

• Admin: Full control over the allow list, including the ability to add or remove Admins, Managers, and Enabled addresses.
• Manager: Can add or remove Enabled addresses but cannot modify Admins or Managers.
• Enabled: These addresses can use the precompiled contract (e.g., mint native tokens) but cannot modify the allow list.

The allow list provides a granular way to assign permissions, ensuring that only authorized addresses can mint native tokens or manage the minting process.

Interface

The AllowList interface is defined as follows:

//SPDX-License-Identifier: MIT
pragma solidity ^0.8.24;
 
interface IAllowList {
  event RoleSet(uint256 indexed role, address indexed account, address indexed sender, uint256 oldRole);
 
  // Set [addr] to have the admin role over the precompile contract.
  function setAdmin(address addr) external;
 
  // Set [addr] to be enabled on the precompile contract.
  function setEnabled(address addr) external;
 
  // Set [addr] to have the manager role over the precompile contract.
  function setManager(address addr) external;
 
  // Set [addr] to have no role for the precompile contract.
  function setNone(address addr) external;
 
  // Read the status of [addr].
  function readAllowList(address addr) external view returns (uint256 role);
}

Implementation

The AllowList interface is implemented by multiple precompiles in the Subnet-EVM. You can find the core implementation in the subnet-evm repository.

Precompiles Using AllowList

Several precompiles in Subnet-EVM use the AllowList interface:

• Native Minter
• Fee Manager
• Reward Manager
• Contract Deployer Allow List (at address 0x0200000000000000000000000000000000000000)
• Transaction Allow List (at address 0x0200000000000000000000000000000000000002)