What is a ZK-Rollup?
A ZK-rollup (zero-knowledge rollup) is a Layer 2 scaling solution that batches transactions off-chain and posts them to Ethereum with a cryptographic proof of validity. Unlike optimistic rollups (which assume transactions are valid and allow challenges), ZK-rollups mathematically prove that every transaction is correct before it’s finalized.
ZK-rollups offer:
- Instant finality: Once the proof is verified on L1, transactions are final
- No challenge window: No 7-day withdrawal delay like optimistic rollups
- Higher security: Mathematical proof beats economic assumption
- Lower data costs: Only the proof and state diff are posted to L1
Major ZK-rollups include zkSync Era, Starknet, Scroll, Linea, and Polygon zkEVM. Combined, they hold $3+ billion in TVL as of 2025.
How ZK-Rollups Work
The Three-Step Process
- Execute off-chain: Users submit transactions to the ZK-rollup sequencer, which processes them on the L2
- Generate proof: A “prover” generates a zero-knowledge proof (STARK or SNARK) that all transactions in the batch are valid
- Verify on-chain: The proof is posted to Ethereum L1, where a verifier contract checks it. If valid, the state update is finalized.
Users → Sequencer (executes txs) → Prover (generates ZK proof) → L1 Verifier (checks proof) → Final!The Key Difference: Validity Proofs vs Fraud Proofs
| Feature | ZK-Rollup (Validity Proof) | Optimistic Rollup (Fraud Proof) |
|---|---|---|
| Assumption | Prove every batch is valid | Assume batches are valid until challenged |
| Proof type | Cryptographic proof of correctness | Challenge with fraud proof if invalid |
| Finality | Minutes (proof verification) | 7 days (challenge window) |
| Withdrawal | Fast (proof verified) | 7 days (challenge window) |
| L1 gas cost | Higher (proof verification) | Lower (only state data) |
| Maturity | Newer, less battle-tested | More mature, widely adopted |
How Zero-Knowledge Proofs Work (Simplified)
A ZK-proof lets you prove “I know something” without revealing what you know. In the context of rollups:
- Statement: “All 10,000 transactions in this batch are valid”
- Proof: A compact mathematical proof (~100 KB) that can be verified quickly (~500K gas)
- Verification: The L1 contract checks the proof. If it passes, all 10,000 transactions are confirmed valid
The proof is succinct: verifying it is exponentially faster than re-executing all transactions.
Major ZK-Rollup Networks
zkSync Era (Matter Labs)
| Feature | Details |
|---|---|
| Type | zkEVM (Type 2 — EVM-equivalent) |
| TVL | $1B+ |
| Language | Solidity (native EVM compatibility) |
| Key feature | Account abstraction native, Paymasters |
| Token | None yet (ZK token expected) |
zkSync aims for near-full EVM compatibility while using ZK proofs for security.
Starknet (StarkWare)
| Feature | Details |
|---|---|
| Type | Cairo VM (not EVM-compatible natively) |
| TVL | $500M+ |
| Language | Cairo (custom, optimized for ZK) |
| Key feature | Highest throughput via CairoVM |
| Token | STRK |
Starknet uses its own VM (CairoVM) which is optimized for STARK proof generation. It sacrifices EVM compatibility for performance.
Scroll
| Feature | Details |
|---|---|
| Type | zkEVM (Type 1 — EVM-equivalent at bytecode level) |
| TVL | $200M+ |
| Language | Solidity (byte-level EVM compatibility) |
| Key feature | True EVM equivalence |
| Token | SCR |
Scroll’s goal is byte-level EVM compatibility — existing Ethereum smart contracts work without any modification.
Polygon zkEVM
| Feature | Details |
|---|---|
| Type | zkEVM (Type 2) |
| TVL | $100M+ |
| Key feature | Part of Polygon’s multi-chain strategy |
| Token | POL (formerly MATIC) |
Linea (ConsenSys)
| Feature | Details |
|---|---|
| Type | zkEVM (Type 2) |
| TVL | $500M+ |
| Key feature | Backed by ConsenSys (MetaMask, Infra) |
| Token | None |
SNARKs vs STARKs
Two types of ZK proofs are used in rollups:
| Feature | SNARK (Succinct Non-interactive ARgument of Knowledge) | STARK (Scalable Transparent ARgument of Knowledge) |
|---|---|---|
| Trusted setup | Required (controversial — if setup compromised, proofs can be faked) | Not required (transparent) |
| Proof size | Small (~200 bytes) | Larger (~50-100 KB) |
| Verification | Fast | Slower than SNARK |
| Post-quantum | Vulnerable to quantum attacks | Resistant to quantum attacks |
| Used by | zkSync, Aztec, older protocols | Starknet, Polygon Miden |
EVM Compatibility Tiers
Vitalik Buterin defined 5 types of zkEVMs:
| Type | Description | EVM Compatibility | Examples |
|---|---|---|---|
| 1 | Fully Ethereum-equivalent | 100% | Scroll (at L1 level) |
| 2 | EVM-equivalent | ~99% | zkSync, Polygon zkEVM |
| 2.5 | EVM-equivalent with gas cost changes | ~95% | Some optimizations |
| 3 | Almost-EVM-equivalent | ~90% | Early Polygon zkEVM |
| 4 | High-level-language equivalent | ~70% | Starknet (Cairo VM) |
Lower types are faster (cheaper proof generation) but less compatible with existing Ethereum tools and contracts.
Advantages of ZK-Rollups
- Fast withdrawals: No 7-day waiting period. Once the proof is verified, funds are available on L1.
- Higher security guarantee: Validity proofs mathematically prove correctness — no reliance on honest challengers.
- Data compression: Only state differences and proofs are posted to L1, not full transaction data.
- Privacy potential: ZK proofs can hide transaction details while proving validity (used by Aztec, zkPass).
Challenges of ZK-Rollups
- Prover complexity: Generating ZK proofs is computationally expensive. Specialized hardware (GPUs, FPGAs, ASICs) is needed.
- Higher L1 costs: Verifying proofs on Ethereum costs more gas than optimistic rollup’s data posting.
- Less mature: The technology is newer than optimistic rollups, with less battle-testing.
- Centralized provers: Most ZK-rollups currently use centralized provers. Decentralized proving networks are in development.
Frequently Asked Questions
Q: Are ZK-rollups safer than optimistic rollups? A: In theory, yes — validity proofs provide stronger guarantees. In practice, both are secure for most users. The main practical difference is withdrawal speed (ZK = fast, Optimistic = 7 days).
Q: Which is cheaper: ZK or optimistic rollups? A: It depends. Optimistic rollups have lower L1 data costs. ZK-rollups have higher proof verification costs but better data compression. As proving technology improves, ZK costs are decreasing rapidly.
Q: Will ZK-rollups replace optimistic rollups? A: Possibly long-term. Vitalik’s roadmap favors ZK technology. But optimistic rollups (Arbitrum, Optimism, Base) have massive adoption and liquidity that won’t switch overnight.