How Does Manta Network Work?
Manta Network operates Manta Pacific, a modular Layer 2 on Ethereum built on OP Stack with Celestia data availability, positioned for ZK application deployment. With approximately $50M in TVL and over 200 deployed applications, it is a mid-tier L2 ecosystem. Its C grade reflects significant centralization concerns: instantly upgradeable contracts with no timelock (rated CRITICAL by L2BEAT), a centralized validator whose failure freezes all funds with no user escape hatch, and a fraud proof system still under development. The protocol has no history of exploits and raised $31.6M in funding, but the combination of admin key risks, liveness dependencies, and ecosystem maturation challenges drive the elevated risk assessment.
TVL
$50M
Sector
L2
Risk Grade
C
Value Grade
D-
Core Mechanisms
7.1 Optimistic Rollup
OP Stack-based optimistic rollup with Celestia data availability (modular L2)
OP Stack rollup using Celestia for DA instead of Ethereum blobs. The OP Stack framework is well-established.
7.2 Sequencer
Centralized sequencer and proposer operated by Manta team — single PROPOSER address submits state roots
Standard centralized sequencer. No forced-inclusion mechanism documented. Single proposer address is a concentration risk.
8.3 Data Availability
Celestia-based data availability — transaction data posted to Celestia instead of Ethereum
Modular DA using Celestia is established pattern (multiple OP Stack chains use it). However, the Blobstream bridge is not used, so sequencer can publish unavailable roots.
6.1 Bridge / Lock-and-Mint
Canonical bridge with instantly upgradeable contracts controlled by MantaMultisig (no timelock)
Standard bridge pattern but with no upgrade delay — CRITICAL per L2BEAT.
5.1 Governance Token
MANTA token with governance and utility functions, 2% annual inflation
Standard governance token. 1B initial supply with 2% annual minting rate.
5.3 Multisig / Admin Control
MantaMultisig controls system upgrades, preconfer address, batch submitter, gas configuration, and operator management
Standard multisig admin pattern but with broad powers and no timelock.
7.5 Fast Finality Protocol
NovelManta FP — fast finality using Symbiotic restaked native tokens, reducing finalization from 3 days to minutes
First deployment of fast finality on OP Stack L2 using restaked native tokens through Symbiotic integration. Novel approach to solving rollup finality delays, but early-stage deployment.
How the Pieces Interact
The MantaMultisig can instantly upgrade bridge contracts with no timelock delay. A compromised multisig could redirect or freeze all bridged assets with no exit window for users.
Only the PROPOSER address can submit state roots, and the fraud proof system is under development. Users must trust this single address to submit correct state roots with no on-chain verification or challenge mechanism.
If the centralized validator goes offline, funds are frozen. Users cannot exit the system because leaving requires new block production, which depends entirely on the centralized validator. No forced-inclusion fallback exists.
Transaction data is posted to Celestia but the Blobstream bridge is not used, meaning the sequencer can single-handedly publish unavailable data roots. Users cannot verify data availability independently through Ethereum.
Fast finality depends on Symbiotic restaked validators. If restaked validators collude or the Symbiotic system has a bug, fast-finalized transactions could be incorrect, though the underlying OP Stack challenge period provides a fallback.
What Could Go Wrong
- Manta Pacific contracts have no delay on code upgrades (rated CRITICAL by L2BEAT), meaning the MantaMultisig can instantly modify core system contracts including the bridge. Users have no exit window to withdraw before an unwanted upgrade takes effect.
- The fraud proof system is under development; users must trust the centralized PROPOSER to submit correct L1 state roots. If the proposer submits invalid state, there is no on-chain mechanism for users to challenge it.
- The centralized validator can go down causing all funds to be frozen. Users cannot produce blocks or exit the system independently without new block production, creating a critical liveness dependency on a single entity.
- Manta Atlantic (the original Polkadot parachain) is being deprecated with sunset planned for July 2026, indicating a strategic pivot. The consolidation around Manta Pacific concentrates all ecosystem value on a single chain with the centralization risks noted above.
MantaMultisig Compromise and Instant Bridge Drain
ModerateTrigger: Attackers compromise the MantaMultisig through key theft, social engineering, or insider action, gaining access to instantly upgrade bridge contracts with no timelock delay
- 1.Attacker gains control of sufficient MantaMultisig keys to execute an instant contract upgrade — Full control over bridge and system contracts with immediate effect — no timelock or user exit window
- 2.Malicious upgrade deployed to bridge contracts, redirecting withdrawal logic or minting unbacked assets — All bridged assets (ETH, MANTA, ecosystem tokens) at risk of immediate drainage
- 3.Users discover the exploit but cannot force-include withdrawal transactions — no L1 escape hatch exists — Funds trapped on Manta Pacific with no user-accessible exit mechanism during the attack
- 4.MANTA token price collapses; ecosystem DApps lose bridged asset backing — 200+ deployed applications affected; developer and user trust in Manta Pacific destroyed
Risk Profile at a Glance
Overall: C (43/100)
Lower score = safer