Summary
This proposal removes stale minting rights and governance permissions that are no longer in active use. It first migrates the stETH market to the live BorrowController so its residual position keeps replenishment coverage, then revokes DBR minting from three legacy BorrowControllers and two superseded jrDOLA deployments, revokes DOLA minting from the retired Gearbox Vault Fed, clears stale ALE allowlist entries on deprecated controllers, removes the sunsetting ODOS swap router from the live ALE v4, and removes one inactive address from the proposer whitelist. Every revocation target is confirmed idle or deprecated; the live BorrowController, the live jrDOLA vault, and all active Feds and integrations are untouched.
Motivation
Over the protocol’s life, DBR and DOLA minting rights and ALE allowlist entries accumulated across successive contract versions. Governance replay of the full proposal history confirms twelve DBR minter grants with zero prior revocations, alongside the DOLA grant to the now-retired Gearbox Vault Fed and a set of ALE allowlist entries tied to superseded BorrowControllers. Leaving unused minter roles and allowlist entries live is an unnecessary standing risk surface. Retiring them narrows the set of contracts that can mint DBR or DOLA, or interact with FiRM, to only those in active service.
The stETH market still points at the earliest BorrowController and carries a small residual position. Migrating it to the live BorrowController v4 preserves replenishment on that position, which is why the migration is ordered first, ahead of the revocations. Once the market no longer depends on the legacy controller, revoking that controller’s minter role is clean. Per prior review, the minter role on the legacy BorrowControllers does not provide the replenishment-edge protection introduced in v4, so revoking it on the legacy controllers closes an unused path without affecting repayments or liquidations. The two jrDOLA deployments being revoked predate the live v2 vault. Naoufel’s proposer-whitelist entry is inactive following the AWG wind-down.
This proposal also removes the ODOS swap router from the ALE v4 proxy whitelist. ODOS has announced it is winding down its protocol effective July 30, 2026, so leaving its router enabled would keep an unsupported integration live on the Automated Leverage Engine.
On-Chain Actions
| # | Contract | Call | Target |
|---|---|---|---|
| 1 | stETH Market | setBorrowController | BorrowController v4 (0x01eca33e20a4c379bd8a5361f896a7dd2bae4ce8) |
| 2 | DBR | removeMinter | BorrowController v1 (0x44b7895989bc7886423f06deaa844d413384b0d6) |
| 3 | DBR | removeMinter | BorrowController v2 (0x2dbad53a647a86b8988e007a33fe78bd55e9dd6f) |
| 4 | DBR | removeMinter | BorrowController v3 (0xeebea1ed06eeb120cbf72fad195683746b5a5245) |
| 5 | DBR | removeMinter | jrDOLA legacy (0x633821b8e003344e5223509277f2084ea809a452) |
| 6 | DBR | removeMinter | jrDOLA legacy (0xf4307a1354c0463812b3ce0f509c227f5cd1ccfd) |
| 7 | DOLA | removeMinter | Gearbox Vault Fed (0xe082eb109fad53ea8db9827ce6b8ef74882734fc) |
| 8 | BorrowController v1 | deny | ALE v2 (0x5233f4c2515ae21b540c438862abb5603506debc) |
| 9 | BorrowController v2 | deny | ALE v2 (0x5233f4c2515ae21b540c438862abb5603506debc) |
| 10 | BorrowController v3 | deny | ALE v2 (0x5233f4c2515ae21b540c438862abb5603506debc) |
| 11 | BorrowController v3 | deny | ALE v3 (0x4df2eaa1658a220fdb415b9966a9ae7c3d16e240) |
| 12 | ALE v4 | denyProxy | ODOS router (0xCf5540fFFCdC3d510B18bFcA6d2b9987b0772559) |
| 13 | GovernorMills | updateProposerWhitelist | Naoufel (0xFDa9365E2CDf21d72cb0dc4F5FF46F29e4aC59CE), false |
Total: 13 on-chain actions.
Conclusion
This cleanup retires minting rights, allowlist entries, and governance permissions that are no longer in service, reducing the set of contracts that can mint DBR or DOLA or interact with FiRM to only those actively in use. It is a defense-in-depth hygiene measure with no effect on live user flows.