Upgradability

Proxy architecture

Lagoon vaults use transparent upgradeable proxies built from three components:

1. Proxy contract — the main entry point users interact with
2. Silo helper contract — manages the deposit and redemption silos
3. DelayProxyAdmin — enforces mandatory waiting periods before upgrades apply

How upgrades work

Vault Admin proposes upgrade to a whitelisted implementation
        |
        v
Waiting period (24 hours minimum, 30 days maximum)
        |
        v
Upgrade applied

The waiting period gives depositors time to review what's changing and exit before it takes effect if they want to. It's the same logic as a timelock in governance contracts.

Whitelisted implementations only

Vault Admins can only upgrade to implementations pre-approved by Lagoon through the ProtocolRegistry. Arbitrary code can't be pushed into a live vault.

Going immutable

A vault can be made permanently immutable by renouncing ProxyAdmin ownership. This is irreversible. Once done, no further upgrades are possible by anyone.

---

Back to: Architecture Overview