What Is a Proxy Contract?
A proxy contract is a permanent address with a replaceable brain. Users talk to the proxy. The proxy forwards calls to an implementation contract. A privileged key can point the proxy at a new implementation. The address you bookmarked stays the same. The code behind it does not. Most large DeFi protocols use this pattern so they can patch bugs. It is also how an "audited" pool becomes a different program on a Tuesday.
How It Actually Works
- Storage lives in the proxy. Logic lives next door. Upgrades swap the logic. Done honestly, this is how you fix a vulnerability without migrating a billion dollars of TVL.
- The upgrade key is usually a multisig, sometimes behind a timelock. Sometimes it is one person. Read that before you deposit.
- Explorers that say "verified" verified today's implementation. They did not freeze tomorrow's.
Risks and Common Mistakes
- Treating an audit as a lifetime warranty. The audit covered a specific commit. The proxy can leave that commit.
- Ignoring admin powers because the UI looks decentralized. L2Beat and protocol docs list upgrade keys. Use them.
When It Matters
Every "set and forget" DeFi deposit. Immutable contracts cannot rug you with an upgrade. They can still have bugs. Proxies trade one risk for the other. The DeFi page is the frame.
Related Terms
Glossary · Learn · Resource Library · Home