Aptos contract upgrade access & deploy with multisig?

[jingxuan98]

I realise that for aptos seems like for the contract upgrade access cannot be migrated to other wallet other than the deployer (correct me if im wrong and any reference if we can migrate the access to other wallet)

in that case can we deploy a contract with multisig? if so how? any example?

[0xaptosj]

for multisign deployment, you caan try https://www.rimosafe.com/

[0xaptosj]

if you deploy the contract under an eoa account, then i don't think you can transfer the upgrade access to another account

if you deploy the contract under an object, you can transfer the object to a new account which will have upgrade access

[codemedic213515]

I’ve realized that on Aptos, it seems like the upgrade capability for a deployed contract is tightly bound to the deployer’s address — meaning you can’t migrate that access to another wallet once it’s deployed. Please correct me if I’m wrong, and if there’s any official reference or workaround to delegate or transfer that upgrade authority, I’d appreciate it!

[0xaptosj]

if it's deployed under an account (EOA wallet), you can't transfer the upgrade capability to another account, if it's deployed under an object, you can transfer the object to a different wallet then that wallet will have upgrade capability to the contract

[MoonShiesty]

can you rotate the EOA key to a multisig?

(we use resource accounts, and manually implemented an upgrade_package function with a method to transfer the admin cap)

[0xaptosj]

if the contract is deployed under resouce account, can you transfer resouce account owner ship to the multisig?

I don't think you can rotate an EOA key to a multisig, you can only rotate to another private key (i.e. another EOA), since multisig doesn't have a private key