Optimistic Rollup

What Is an Optimistic Rollup?

An optimistic rollup is a type of rollup that scales a blockchain by moving computation and state storage off-chain while posting compressed transaction data back to the underlying Layer 1. The word "optimistic" refers to the core assumption: all transactions submitted to the rollup are presumed valid unless someone proves otherwise.

Rather than verifying every transaction upfront (as ZK-SNARKs or ZK-STARKs do), optimistic rollups rely on economic incentives and a dispute window. Validators post bonds and can be slashed if they submit fraudulent state roots. This design keeps the system simple and highly compatible with existing smart contract tooling, which is why optimistic rollups were the first rollup type to achieve broad production adoption on Ethereum.

For a broader comparison of scaling approaches including sidechains, state channels, and rollups, see the Layer 2 scaling landscape overview.

How It Works

An optimistic rollup operates through four core components: a sequencer, a state commitment mechanism, a data availability layer, and a fraud proof system.

Sequencing and Execution

A sequencer receives user transactions, orders them, executes them in a virtual machine, and produces rollup blocks. The sequencer then bundles multiple transactions into compressed batches and submits them to the Layer 1 chain.

Currently, most optimistic rollups use a centralized sequencer: a single entity (such as Offchain Labs for Arbitrum or Coinbase for Base) that handles transaction ordering. While this introduces a potential point of censorship, users retain an escape hatch: they can submit transactions directly to the L1 rollup contract, bypassing the sequencer entirely. Both Optimism and Arbitrum have roadmaps for decentralized sequencer networks.

State Commitments

After executing a batch of transactions, the rollup operator publishes a new state root to the L1 contract. This state root represents the complete state of the rollup after applying the batch. The operator posts a bond alongside the commitment, which can be slashed if the state root is proven fraudulent.

Data Availability

For the fraud proof system to work, anyone must be able to reconstruct the rollup's state and verify the operator's claims. This means all transaction data must be posted to L1. Originally, rollups posted this data as calldata, which is permanently stored on-chain but expensive.

Since Ethereum's Dencun upgrade (March 2024), rollups post data as blobs: temporary data structures of approximately 125 KB each that remain available for around 18 days before being pruned. This is well-suited for optimistic rollups because the 7-day challenge period fits comfortably within the blob retention window. Blob transactions reduced rollup data costs by over 80%.

Fraud Proofs

The fraud proof mechanism is what makes optimistic rollups secure without upfront validity proofs. Modern implementations use an interactive bisection protocol:

1. An operator (asserter) publishes a state root claim for a batch of transactions
2. A challenger disputes the claim by posting a bond
3. The asserter divides the disputed computation into two halves; the challenger selects which half to contest
4. This bisection continues (O(log N) steps) until the disagreement is narrowed to a single computational step
5. A verification contract on L1 re-executes that single step to determine the winner

Each rollup uses a different virtual machine for single-step verification: Arbitrum uses an on-chain WASM emulator, while Optimism uses Cannon, a MIPS-based Fault Proof Virtual Machine.

The Challenge Period

The standard challenge period is approximately 7 days. During this window, anyone monitoring the rollup can submit a fraud proof if they detect an invalid state transition. The 7-day duration is deliberately conservative: it gives the broader community time to detect fraud and coordinate a response, even under adversarial conditions like network congestion or censorship attacks on L1.

The practical consequence is withdrawal latency: moving assets from L2 back to L1 requires waiting the full challenge period. Third-party bridges (such as those built on cross-chain bridge protocols) offer faster withdrawals by fronting liquidity for a fee, effectively letting users exit in minutes rather than days.

Major Implementations

Arbitrum

Arbitrum One, developed by Offchain Labs, is the largest optimistic rollup by TVL. It uses the Nitro stack, which compiles Geth (Go Ethereum) to WASM for fraud proof execution. In February 2025, Arbitrum deployed BoLD (Bounded Liquidity Delay), a permissionless dispute protocol that allows anyone to bond funds and defend the correct state. BoLD uses multi-level bisection with bounded dispute resolution of approximately 16 days total. Assertion bonds on Arbitrum One require 3,600 ETH, though bonding pools allow crowdsourcing capital.

Optimism (OP Stack)

Optimism uses the OP Stack, an open-source modular framework for building optimistic rollups. In June 2024, OP Mainnet activated permissionless fault proofs using Cannon (a MIPS-based FPVM), achieving Stage 1 classification on L2BEAT. The OP Stack powers the Superchain architecture, enabling interoperability across OP Stack chains. The multi-proof design is intended to eventually support ZK proofs alongside Cannon.

Base

Base, operated by Coinbase, is the most prominent chain in the Optimism Superchain. Built on the OP Stack, Base shipped fault proofs to mainnet in October 2024 and holds the second-largest TVL among all Layer 2 networks. As a Superchain member, Base benefits from shared governance and interoperability with other OP Stack chains.

Optimistic Rollups vs. ZK Rollups

The two main rollup architectures differ fundamentally in how they prove correctness:

Optimistic rollups dominate the Layer 2 landscape today due to their simpler engineering and near-native EVM compatibility. ZK rollups offer faster finality and stronger cryptographic guarantees, but require more complex infrastructure. For a deeper comparison, see the Bitcoin Layer 2 comparison.

Optimistic Rollups on Bitcoin

While optimistic rollups originated on Ethereum, the concept is being explored for Bitcoin through BitVM. BitVM enables computation verification on Bitcoin without executing computations on-chain: a prover claims a function produces a specific output, and if the claim is false, anyone can submit a fraud proof on-chain. This mirrors the optimistic rollup model.

BitVM operates under a 1-of-N trust assumption: as long as at least one honest watcher monitors the chain and challenges invalid proofs, the system remains secure. BitVM2 optimized the original design, reducing the number of Bitcoin transactions needed to resolve a dispute from hundreds to a handful.

The first production deployment came with Citrea, which launched its mainnet in January 2026 as a ZK rollup on Bitcoin using BitVM-based optimistic enforcement for its bridge (Clementine). The Clementine bridge uses optimistic dispute resolution instead of a federated multisig, meaning invalid withdrawals can be challenged directly on Bitcoin L1.

Bitcoin's UTXO model and limited scripting present unique challenges compared to Ethereum's account model. For how Bitcoin-native Layer 2 solutions like Spark approach scaling differently, see the Spark deep dive.

Use Cases

• Scalable DeFi: protocols like decentralized exchanges, lending platforms, and automated market makers deploy on optimistic rollups to offer lower fees and higher throughput than Layer 1 while inheriting its security
• NFT marketplaces and gaming: applications requiring high transaction volumes at low cost use optimistic rollups to avoid L1 gas fees
• Enterprise and payment applications: the EVM compatibility of optimistic rollups allows existing Ethereum tooling and contracts to deploy with minimal changes, lowering the barrier for businesses building on-chain
• Cross-chain interoperability: the Superchain model (OP Stack) enables multiple rollups to share a security model and communicate natively, creating an ecosystem of interoperable chains

Risks and Considerations

Withdrawal Delay

The 7-day challenge period is a fundamental constraint of the optimistic model. Users who need fast access to L1 liquidity must rely on third-party bridges, introducing counterparty risk and fees. This tradeoff is absent in ZK rollups, where withdrawals finalize in minutes after a validity proof is verified.

Sequencer Centralization

Most optimistic rollups currently depend on a single centralized sequencer for transaction ordering and block production. While the sequencer cannot steal funds (fraud proofs prevent this), it can censor transactions or extract maximal extractable value (MEV) through transaction reordering. Decentralized sequencer designs are in development but not yet deployed in production.

Validator Economics

Running a validator (challenger) on an optimistic rollup requires posting substantial bonds. On Arbitrum One, assertion bonds are 3,600 ETH. While bonding pools can help distribute this cost, the high capital requirement limits the number of independent validators, which could reduce the system's decentralization in practice.

Data Availability Dependency

The security of an optimistic rollup depends entirely on transaction data being available on L1. If data is withheld, challengers cannot construct fraud proofs, and invalid state transitions could go undetected. While blob transactions have made data posting cheaper, ensuring robust data availability remains a critical requirement.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.