Bitcoin Staking

What Is Bitcoin Staking?

Bitcoin staking refers to protocols that allow BTC holders to lock their bitcoin on the Bitcoin blockchain and use it as economic collateral to secure external proof-of-stake networks. Unlike traditional staking on chains like Ethereum or Solana, where native tokens are deposited into validator contracts on the same network, Bitcoin staking keeps BTC on Layer 1 while extending its security guarantees to other chains.

The concept emerged from a fundamental observation: Bitcoin has the largest market capitalization and the most decentralized security budget of any blockchain, yet that economic weight only secures a single network. Bitcoin staking protocols unlock this capital by letting BTC act as collateral for PoS consensus without requiring holders to sell, wrap, or bridge their coins.

Babylon Protocol, founded by Stanford professor David Tse, pioneered this approach by building staking mechanisms entirely from Bitcoin's native scripting language and cryptographic primitives. Since its mainnet launch in April 2025, Babylon has attracted over 56,000 BTC in staked deposits, representing billions of dollars in economic security.

How It Works

Bitcoin staking relies on a combination of Bitcoin Script, Taproot, and a novel cryptographic primitive called Extractable One-Time Signatures (EOTS). The process works without any modifications to the Bitcoin protocol itself.

Staking Transaction Structure

A staker creates a special Bitcoin transaction that locks their BTC in a UTXO with three possible spending paths, encoded as a Taproot script tree:

1. Timelock expiration: after a predetermined lock-up period (up to 64,000 blocks, roughly 15 months), the staker reclaims their BTC using only their private key. No third-party cooperation is required.
2. Early unbonding: a new transaction triggers a mandatory unbonding period (1,008 blocks, roughly 7 days), requiring a co-signature from a Covenant Committee to prevent abuse.
3. Slashing path: if the delegated Finality Provider double-signs, a pre-defined portion of the stake is burned. The slashing percentage and burn address are fixed at staking time.

# Simplified staking UTXO structure (Taproot script tree)
# Path 1: Timelock expiry (staker-only recovery)
<staker_pubkey> OP_CHECKSIG
<locktime> OP_CHECKLOCKTIMEVERIFY OP_DROP

# Path 2: Early unbonding (requires Covenant Committee co-sign)
<staker_pubkey> OP_CHECKSIGVERIFY
<covenant_pubkey> OP_CHECKSIG
<unbonding_period> OP_CHECKSEQUENCEVERIFY OP_DROP

# Path 3: Slashing (triggered by extracted private key)
<finality_provider_pubkey> OP_CHECKSIG
# Burns pre-defined percentage to slash address

These spending conditions use Bitcoin's existing opcodes: OP_CHECKLOCKTIMEVERIFY for absolute timelocks and OP_CHECKSEQUENCEVERIFY for relative timelocks. No protocol upgrade or soft fork is needed.

Extractable One-Time Signatures (EOTS)

EOTS is the cryptographic mechanism that makes slashing possible on Bitcoin. It exploits a mathematical property of Schnorr signatures:

1. When a Finality Provider signs a block, they use a one-time key derived from their master signing key
2. If they sign only one block per height, their private key remains safe
3. If they double-sign (sign two conflicting blocks at the same height), the two signatures together mathematically reveal their private key
4. Once the private key is extracted, anyone can execute the slashing spending path of every staking UTXO delegated to that provider

This is not a policy enforcement mechanism: it is a mathematical certainty inherent to the Schnorr signature scheme. A dishonest Finality Provider cannot avoid key extraction if they double-sign. This property makes Bitcoin staking's slashing guarantees cryptographic rather than trust-based.

Finality Gadget

Babylon operates a finality gadget that overlays PoS chains with Bitcoin-backed economic security. A block on a secured chain is considered finalized only when it receives EOTS signatures from Finality Providers representing more than two-thirds of the total staked BTC weight. If more than one-third of the staked BTC is behind providers that double-sign, their keys are extracted and their delegated stakes can be slashed.

Covenant Committee

A governance body co-signs certain staking operations to verify compliance with protocol parameters. Their approval is required for initial staking and early unbonding. Critically, slashing execution requires three signatures (the delegator, the committee, and the finality provider), preventing any single party from unilaterally slashing funds.

Bitcoin Staking vs. Traditional PoS Staking

Bitcoin staking differs from traditional proof-of-stake in several fundamental ways:

The most significant distinction is that Bitcoin staking does not require BTC to leave Bitcoin. Traditional approaches like WBTC require a custodian (such as BitGo) to hold the underlying BTC and issue synthetic tokens on another chain. For a deeper comparison of these tradeoffs, see the wrapped Bitcoin security models research article.

The Liquid Staking Ecosystem

Just as Ethereum's staking ecosystem developed liquid staking derivatives, Bitcoin staking has spawned its own liquid staking layer. These protocols issue transferable receipt tokens representing staked BTC plus accrued yield, allowing stakers to participate in DeFi while their BTC remains locked.

Lombard Finance (LBTC)

The dominant liquid staking protocol for Babylon-staked BTC. Lombard issues LBTC, a transferable token representing staked BTC. LBTC supply has exceeded $2 billion, and the protocol has been integrated with over 70 DeFi protocols including Aave, Uniswap, and Morpho. Lombard controls roughly 60% of the Bitcoin liquid staking market.

Restaking with SatLayer

Restaking extends the staking model further. SatLayer, Babylon's designated restaking partner, enables "Bitcoin Validated Services" (BVSs): analogous to Actively Validated Services in EigenLayer but secured by Bitcoin. Users can restake their Babylon-staked BTC to provide security to additional decentralized applications and protocols. For a deeper analysis, see the Bitcoin restaking research article.

Use Cases

Bitcoin staking creates productive uses for BTC that were previously impossible without surrendering custody or introducing bridge risk:

• Securing PoS chains: new blockchains can bootstrap economic security by leveraging Bitcoin's massive capital base instead of relying solely on their own token's market cap
• Earning yield on BTC: holders can generate returns denominated in BABY tokens (currently 8% annual inflation, split between BTC stakers and BABY stakers) without selling their bitcoin
• DeFi composability: through liquid staking tokens like LBTC, staked BTC can be used as collateral in lending protocols, liquidity pools, and yield strategies across multiple chains
• Institutional participation: the self-custodial, auditable nature of native Bitcoin staking makes it attractive to institutions that cannot accept the counterparty risk of wrapped BTC or centralized bridges

Why Native Staking Avoids Bridge Risks

Early BTCFi protocols relied on bridges to move BTC onto other chains. This approach has a troubled history: bridge exploits have caused over $1.4 billion in losses, including the Ronin bridge ($624 million), Wormhole ($320 million), and Harmony ($100 million). Even custodial wrapping models like WBTC concentrate risk in a single entity whose compromise would affect every wrapped token holder.

Native Bitcoin staking eliminates these attack vectors. BTC never leaves Bitcoin's blockchain, so there is no bridge contract to exploit, no custodian to hack, and no synthetic token that can depeg from its underlying collateral. Users can independently verify their staking UTXO on the Bitcoin blockchain at any time. The staking conditions are enforced by Bitcoin's own consensus rules, not by an external chain's smart contracts. For more context on bridge security tradeoffs, see the bridge security glossary entry.

Risks and Considerations

Timelock Illiquidity

Staked BTC is locked for the duration of the staking period, which can extend up to roughly 15 months. Early unbonding requires Covenant Committee approval and imposes a mandatory 7-day waiting period. During volatile markets, stakers cannot quickly access their BTC. If the Covenant Committee becomes unavailable, early unbonding may not be possible, though the timelock will still expire normally.

Slashing Risk

If a Finality Provider double-signs, all BTC delegated to that provider is subject to partial slashing. While the slashing percentage is pre-defined and capped (unlike some PoS systems that can slash 100%), stakers must carefully evaluate the reliability of their chosen Finality Provider. Diversifying across multiple providers can reduce this risk.

Protocol Maturity

Bitcoin staking is a new category. Babylon's mainnet launched in April 2025, and while the underlying Bitcoin Script and Schnorr signature primitives are battle-tested, the specific way they are combined for staking is novel. Bugs in the staking transaction construction or the finality gadget could theoretically affect staked BTC, though Bitcoin Script's limited instruction set reduces the smart contract attack surface compared to Solidity-based systems.

Liquid Staking Layer Risks

While native Bitcoin staking avoids bridge risk, the liquid staking derivatives built on top (LBTC, yBTC) reintroduce their own risks: depeg risk if the receipt token trades below the value of underlying BTC, smart contract risk in the EVM-based minting contracts, and liquidity risk if redemptions are delayed during market stress. These are risks of the liquid staking layer, not of the underlying Bitcoin staking mechanism.

Reward Token Volatility

Staking rewards are paid in BABY tokens, not in BTC. The real yield depends on the BABY token's market price, which can fluctuate significantly. An 8% annual inflation rate in BABY tokens does not guarantee an 8% return denominated in BTC or USD.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.