Rollups Explained: Optimistic vs Zero-Knowledge
Rollups run transactions off the main chain and post data back to it. Learn how optimistic and zero-knowledge rollups differ, and the risks that remain.
Rollups are layer-2 networks that execute transactions outside a main blockchain such as Ethereum, bundle ("roll up") many of them together and post the data and results back to the main chain so it can secure them. Optimistic rollups assume batches are valid unless someone proves fraud, while zero-knowledge (ZK) rollups attach a cryptographic proof that each batch is correct.
Rollups are the main way Ethereum has scaled to handle more users at lower fees. If you have used networks like Arbitrum, Optimism, Base, zkSync or Starknet, you have used a rollup. Understanding how they work explains why some withdrawals take a week, why fees vary and what risks remain.
Why Rollups Exist
A base blockchain like Ethereum has limited space per block. When demand rises, users bid up fees. Increasing the block size would make it harder for ordinary people to run nodes and verify the chain.
Rollups take a different route: keep the base layer as a secure settlement and data layer, and do most of the work elsewhere. Our explainer on layer 1 and layer 2 blockchains covers the broader picture.
How a Rollup Works
- 1Users send transactions to the rollup. A component called the sequencer orders them and gives quick confirmations.
- 2The rollup executes them and computes the new state — balances, contract storage and so on.
- 3Transactions are compressed into a batch and the data is posted to the base chain.
- 4The base chain records a commitment to the new state. How it decides to trust that state is where optimistic and ZK rollups differ.
Since 2024, Ethereum has offered a cheaper type of data space called "blobs," introduced by an upgrade known as EIP-4844, designed specifically for rollup data. It significantly reduced the cost rollups pay to post data. Our Arbitrum (ARB) explainer covers the project's basics, use cases and risks.
Optimistic Rollups
Optimistic rollups — examples include Arbitrum and Optimism — assume each batch is correct. After a batch is posted, there is a challenge window during which anyone watching can submit a fraud proof showing that a state update is wrong. If the challenge succeeds, the bad batch is reverted.
The security assumption is that at least one honest party is watching and able to challenge. The downside is the waiting period: withdrawals through the official bridge back to Ethereum usually wait out the challenge window, commonly about seven days. If Mantle is new to you, start with what Mantle (MNT) is and how it works.
Zero-Knowledge Rollups
ZK rollups, such as zkSync and Starknet, generate a validity proof for each batch — a compact cryptographic proof that the state transition followed the rules. The base chain verifies the proof, and once it does, the batch is final there. There is no need for a long challenge window. For background on the project itself, see Starknet (STRK) explained.
The trade-offs are complexity and cost of generating proofs, and historically more difficulty supporting full compatibility with Ethereum's virtual machine. These gaps have narrowed as the technology has matured. Our guide on zero-knowledge proofs explains the underlying idea simply.
Optimistic vs ZK Rollups Compared
| Factor | Optimistic rollups | ZK rollups |
|---|---|---|
| How validity is ensured | Fraud proofs during a challenge window | Validity proofs verified on the base chain |
| Withdrawal time via official bridge | Often about seven days | Typically hours or less after a proof is verified |
| Main assumption | At least one honest challenger | Correctness of the proof system and its implementation |
| Proving cost | Low under normal operation | Higher computational cost to generate proofs |
| EVM compatibility | Generally high | Varies by project; has improved over time |
Risks You Should Know
Rollups inherit a lot from their base layer, but not everything:
- Centralized sequencers. Most rollups have one operator ordering transactions. It cannot usually steal funds, but it could censor or delay transactions, or go offline.
- Upgradeable contracts. Rollup bridge contracts are often upgradeable by a multisig or "security council." If that group were compromised or acted maliciously, users could be harmed. Look for timelocks that give users time to exit.
- Immature proof systems. Some rollups have launched with fraud or validity proofs still restricted or in development.
- Bridge risk. Third-party bridges between rollups carry separate risks; see how to bridge crypto between blockchains safely.
- Fragmentation. Liquidity and users are spread across many rollups, which can mean wrong-network mistakes.
Independent trackers such as L2BEAT assess rollups on these criteria and are worth checking before moving significant funds.
How to Use a Rollup Safely
A few habits go a long way:
- 1Check that you are on the intended network. Rollups share Ethereum's address format, so the same address works on all of them, but balances are separate on each.
- 2Keep a little ETH for fees on each rollup you use. Most rollups charge fees in ETH, even those that have their own token.
- 3Use the official bridge or a well-known bridge. Reach it by typing the address yourself, not through ads or links in messages.
- 4Plan withdrawals. If you are leaving an optimistic rollup through its official bridge, expect a wait and remember that the final step on Ethereum may require a second transaction.
- 5Verify token contracts per network. The same token usually has a different contract address on each rollup.
- 6Read the risk summary. Before moving a large balance, check how decentralized the sequencer is and who can upgrade the contracts.
Bottom line
Rollups let Ethereum handle far more activity by doing the work off-chain and settling on-chain. Optimistic rollups rely on a challenge window and fraud proofs; ZK rollups rely on cryptographic validity proofs. Both are real security improvements over standalone sidechains, but sequencers, upgrade keys and bridges still deserve attention before you trust a rollup with meaningful amounts.
Perguntas frequentes
Why do optimistic rollup withdrawals take about a week?
Optimistic rollups assume transactions are valid unless someone proves otherwise. Withdrawals through the official bridge wait for a challenge period, commonly around seven days, so anyone has time to submit a fraud proof. Third-party bridges can offer faster exits, but they add their own risks and fees.
Are zero-knowledge rollups more secure than optimistic rollups?
They rely on different assumptions. ZK rollups prove every batch with cryptography, while optimistic rollups depend on at least one honest party challenging bad batches. In practice, security also depends on implementation maturity, upgrade controls and who runs the sequencer, so neither type is automatically safer.
Do rollups have their own tokens?
Some do, often used for governance, and some use their token for fees or staking. Many rollups use ETH for transaction fees regardless of whether they have a separate token. Owning a rollup's token is a separate investment decision from using the network.
Is a rollup the same as a sidechain?
No. A rollup posts its transaction data to a base layer such as Ethereum and relies on it for security, so users can in principle verify or exit using that data. A sidechain runs its own consensus and security, so if its validators misbehave, Ethereum cannot protect your funds.