Glossary

Bitcoin L2 Landscape

The ecosystem of Layer 2 protocols building on Bitcoin, from Lightning to sidechains to rollups, each with different trust and scaling tradeoffs.

Key Takeaways

  • The Bitcoin Layer 2 landscape spans multiple categories: payment channels (Lightning), statechains (Spark), sidechains (Liquid, Rootstock), rollups (Citrea), virtual UTXOs (Ark), client-side validation (RGB), and federated ecash (Fedimint, Cashu).
  • Each category makes fundamentally different tradeoffs along a trust spectrum: from fully trustless (Lightning) to 1-of-n operator trust (Spark) to federated custody (Liquid, ecash). No single L2 dominates because different use cases demand different tradeoff profiles.
  • Covenant proposals like OP_CTV and OP_CAT could expand L2 design space, but BitVM2 already enables trust-minimized rollups on Bitcoin today without any consensus changes.

What Is the Bitcoin L2 Landscape?

The Bitcoin L2 landscape refers to the growing ecosystem of Layer 2 protocols that build on top of Bitcoin's base layer to provide faster transactions, lower fees, and new capabilities without sacrificing Bitcoin's core security guarantees. Unlike Ethereum's L2 ecosystem, which converged around rollup architectures, Bitcoin's limited scripting language has produced a diverse set of approaches, each with distinct trust assumptions and design philosophies.

Bitcoin's base layer processes roughly 7 transactions per second with 10-minute block times. For Bitcoin to serve as global money, the gap between base-layer throughput and real-world demand must be bridged. Layer 2 protocols address this by moving transactions off-chain while anchoring security to Bitcoin's proof-of-work consensus. The diversity of approaches reflects the fact that different applications prioritize different properties: a micropayment system needs instant finality, a tokenization platform needs programmability, and a privacy tool needs confidential transactions.

How It Works

Every Bitcoin L2 protocol shares a common pattern: move activity off the base chain while preserving some connection to Bitcoin's security. How tight that connection is, and what tradeoffs it requires, defines each category.

Payment Channels: Lightning Network

The Lightning Network is Bitcoin's oldest and most widely deployed L2. It uses bidirectional payment channels: two parties lock Bitcoin into a 2-of-2 multisig on-chain, then exchange signed transactions off-chain to update their balances. Payments route through a network of interconnected channels using HTLCs.

As of early 2026, Lightning's public network holds approximately 4,800 to 5,600 BTC in capacity across roughly 41,000 to 54,000 channels. Total capacity including private channels is estimated to exceed 12,000 BTC. The network has consolidated from hobbyist nodes into a hub-and-spoke model with professionalized operators: ACINQ alone holds around 445 BTC (roughly 11.5% of public capacity), followed by Binance, Bitfinex, and Kraken.

Lightning's trust model is fully trustless. Users can force-close channels unilaterally to reclaim funds on-chain at any time. The tradeoff is operational complexity: users must manage inbound liquidity, channel capacity, and stay online (or use watchtowers) to detect fraud.

Statechains: Spark and Mercury Layer

Statechains transfer ownership of entire UTXOs off-chain through key rotation rather than channel updates. Instead of locking funds in a channel between two specific parties, a statechain user shares a 2-of-2 multisig with an operator. Ownership transfers by rotating the operator's key share to the new owner, so the on-chain UTXO never moves.

Spark, built by Lightspark, uses FROST threshold signatures across a distributed set of Spark Operators (SOs). Its trust model requires only 1-of-n honest operators to keep funds safe, and users hold pre-signed exit transactions for unilateral withdrawal to L1 at any time. Spark supports a tree-based "leaf" architecture that allows splitting and combining amounts (unlike traditional statechains that transfer fixed-size UTXOs). It also supports native tokens through the BTKN standard, enabling stablecoins like USDB and USDT to operate directly on the protocol.

Mercury Layer takes a similar approach but uses blind co-signing for enhanced privacy: the coordinator server never sees transaction details. It operates with a single-operator model rather than Spark's threshold set.

Sidechains: Liquid and Rootstock

Sidechains are independent blockchains with a two-way peg to Bitcoin. Users lock BTC on the main chain and receive equivalent tokens on the sidechain, which can have different block times, consensus rules, and capabilities.

The Liquid Network, operated by Blockstream, uses a federation of 87 members across six continents with an 11-of-15 threshold for block signing. It produces 1-minute blocks with functional finality after 2 confirmations and supports Confidential Transactions (hiding amounts from chain observers) plus arbitrary asset issuance. Liquid's TVL grew from approximately $3 billion at the start of 2025 to over $5 billion by year-end, driven largely by real-world asset tokenization. Transaction volume in Q1 2026 reached 1.16 million, nearly 5x the Q1 2025 figure.

Rootstock (RSK) takes a different approach: it is a merge-mined sidechain with full EVM compatibility. This means Solidity smart contracts run natively on Rootstock while inheriting Bitcoin's hash power for security. It uses a PowPeg federation of hardware security modules to manage the BTC bridge and achieves roughly 30-second block times.

Both sidechains share a key limitation: users cannot unilaterally exit without federation cooperation. If the federation collapses or censors transactions, user funds are at risk.

Rollups: Citrea and BitVM-Based Approaches

Rollups execute transactions off-chain and post compressed proofs or data back to the base layer. Bitcoin rollups face a unique challenge: Bitcoin Script cannot natively verify complex proofs. BitVM2 solves this through an optimistic verification model with a challenge-response mechanism that resolves disputes in just three on-chain transactions.

Citrea launched its mainnet on January 27, 2026, as the first production-grade ZK-rollup L2 on Bitcoin. It provides full EVM-compatible smart contract execution using a zkEVM architecture, with Bitcoin serving as both the data availability and finality layer. Citrea's "Clementine" bridge uses BitVM2 for trust-minimized bridging: a prover posts a claim with a bond, and any verifier can initiate a dispute. The trust assumption reduces to requiring at least one honest verifier in the challenge game.

Other rollup projects include BOB (Build on Bitcoin), which uses a BitSNARK verification layer compressing computations into roughly 300-byte proofs, and Botanix, which launched its EVM-compatible mainnet in July 2025 with 5-second block times and a "Spiderchain" architecture backed by a federation of node operators.

Virtual UTXOs: Ark Protocol

Ark uses virtual UTXOs (VTXOs) settled periodically into shared on-chain transactions by an Ark Service Provider (ASP). Users receive VTXOs that can be spent off-chain, with the ASP coordinating periodic settlement rounds. Arkade, the first production implementation, launched its mainnet in October 2025.

Ark's trust model is notable: the ASP is required for liveness (if it disappears, users must exit on-chain before VTXOs expire) but not for safety. Users can unilaterally exit by broadcasting their VTXO redemption paths before expiry. This places Ark between Lightning's full trustlessness and sidechains' federated model.

Client-Side Validation: RGB Protocol

RGB takes a fundamentally different approach: contract state is stored privately on the client side, with only cryptographic commitments anchored on Bitcoin via OP_RETURN or Taproot. Single-use seals tied to Bitcoin UTXOs ensure that each state transition is valid and unrepeatable.

RGB v0.12 shipped in July 2025 with zk-STARK support, and Tether announced USDT issuance on Bitcoin via RGB in August 2025. Because the blockchain carries only commitments (not data), RGB inherits Bitcoin's trust model for the commitment layer while providing strong privacy.

Federated Ecash: Fedimint and Cashu

Fedimint and Cashu use Chaumian ecash: users deposit Bitcoin with a mint (or federation of mints) and receive blinded tokens in return. These tokens provide strong privacy via blind signatures but require trusting the mint operator(s) with custody of funds.

Fedimint distributes custodial risk across a federation, while Cashu uses a simpler single-operator model. Fedi's one-click federation builder launched in October 2025, lowering the barrier to deploying community mints. Both protocols offer native Lightning integration for interoperable payments.

The Trust Spectrum

The most important axis for comparing Bitcoin L2s is the trust spectrum: how much must a user trust external parties to keep their funds safe?

ProtocolTrust ModelUnilateral Exit
LightningFully trustlessYes (force-close)
Spark1-of-n operatorsYes (pre-signed tx)
ArkASP for liveness onlyYes (before expiry)
RGBBitcoin-anchoredYes (native UTXOs)
CitreaTrust-minimized (BitVM2)Via bridge (1-of-n verifier)
Liquid11-of-15 federationNo
RootstockPowPeg federationNo
FedimintFederated custodyNo
CashuSingle-operator custodyNo

Unilateral exit is the critical differentiator. Protocols that support it (Lightning, Spark, Ark, RGB) let users withdraw to Bitcoin L1 without anyone's permission. Federated protocols (Liquid, Rootstock, ecash mints) require cooperation from a threshold of operators. For a deeper comparison, see the Bitcoin Layer 2 comparison.

Why It Matters

The Bitcoin L2 landscape is not a competition where one protocol wins: it is an ecosystem where different layers serve different needs. Lightning excels at instant micropayments. Spark enables stablecoin transfers and self-custodial token management with minimal on-chain footprint. Liquid serves institutional traders needing confidential transactions. Citrea opens Bitcoin to full smart contract programmability.

For developers building on Bitcoin, this means choosing the right L2 for the job. A payments app might use Spark for stablecoin settlement and Lightning for Bitcoin micropayments. A tokenization platform might use Liquid or RGB. An application needing EVM-compatible DeFi might deploy on Citrea or Rootstock. The Spark deep dive explains how Spark fits into this ecosystem as a statechain-based L2 optimized for everyday payments and stablecoin transfers.

The Role of Covenant Proposals

Several BIP proposals could reshape the L2 landscape by expanding Bitcoin Script's capabilities. OP_CTV (BIP-119) would enable covenants for non-interactive channel openings, payment pools, and congestion-controlled batching. OP_CAT (BIP-347) would re-enable stack concatenation, which combined with Taproot enables transaction introspection and recursive covenants.

BitVM2 sidesteps the covenant debate entirely: it already enables trust-minimized rollups on Bitcoin today without any consensus changes. Citrea's mainnet launch in January 2026 proved this approach works in production.

Use Cases

  • Instant payments: Lightning and Spark handle everyday transactions where 10-minute confirmation times are impractical. Lightning specializes in Bitcoin-denominated payments; Spark adds native stablecoin support for dollar-denominated commerce.
  • Stablecoin transfers: Statechain-based L2s like Spark and client-side validation protocols like RGB now support native stablecoin issuance, enabling USDT and USDB to move on Bitcoin rails. See the stablecoins on Bitcoin landscape for a complete analysis.
  • Confidential trading: Liquid's Confidential Transactions hide amounts on-chain, making it the preferred layer for institutional trading desks and asset issuance.
  • Smart contracts on Bitcoin: Citrea and Rootstock bring full EVM compatibility to Bitcoin, enabling DeFi applications, lending protocols, and programmable money without leaving the Bitcoin security umbrella.
  • Community banking: Fedimint enables community-run custodial mints where members pool Bitcoin custody across a trusted federation, with strong privacy via Chaumian ecash. This model suits communities that trust each other more than they trust exchanges.
  • Privacy-preserving transfers: RGB's client-side validation model keeps transaction data entirely off-chain, with only commitments visible on Bitcoin. Cashu and Fedimint provide additional privacy through blinded tokens.

Risks and Considerations

Fragmentation and Interoperability

Each L2 protocol creates its own liquidity silo. Bitcoin locked in a Lightning channel cannot be used on Liquid without a swap. Stablecoins on Spark cannot directly interact with smart contracts on Citrea. This liquidity fragmentation increases friction and reduces capital efficiency across the ecosystem. Cross-layer bridges and atomic swap protocols are emerging to address this, but interoperability remains an unsolved challenge.

Trust Assumption Variability

The term "Layer 2" is applied loosely in the Bitcoin ecosystem, covering protocols with vastly different security guarantees. A fully trustless Lightning channel and a federated Liquid sidechain both carry the L2 label. Users must understand the specific trust assumptions of each protocol rather than assuming all L2s offer equivalent security. The key question is always: can I withdraw my funds to Bitcoin L1 without anyone's permission?

Base-Layer Dependency

All Bitcoin L2s ultimately depend on timely access to the base layer for dispute resolution, channel closes, or UTXO claims. During periods of high on-chain fee congestion, L2 exit transactions compete for block space with all other Bitcoin transactions. This creates scenarios where the cost to exit an L2 may temporarily exceed the value of the funds, particularly for small balances.

Maturity and Battle-Testing

Lightning has operated since 2018 and withstood years of adversarial conditions. Newer protocols like Spark (beta April 2025), Citrea (mainnet January 2026), and Arkade (mainnet October 2025) have significantly less operational history. While their designs may be sound, production exposure over time is the only reliable way to surface subtle bugs, economic attacks, or governance failures.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.