Taproot Assets (TAP)

What Is Taproot Assets?

Taproot Assets (formerly known as Taro) is a protocol developed by Lightning Labs that enables the issuance and transfer of arbitrary assets on the Bitcoin blockchain. Using the Taproot upgrade activated in November 2021, Taproot Assets embeds asset metadata inside standard Bitcoin transactions through a cryptographic commitment scheme. This means anyone can create stablecoins, utility tokens, or NFTs anchored to Bitcoin's security model without altering the base protocol.

The protocol was originally announced in April 2022 under the name "Taro" alongside Lightning Labs' $70 million Series B funding round. Following a trademark dispute with Tari Labs, the project was rebranded to "Taproot Assets" in May 2023. The first mainnet alpha (v0.3) launched in October 2023, and Lightning Network integration followed in July 2024 with v0.4, making it the first multi-asset Lightning protocol on mainnet. As of June 2026, the protocol has reached v0.8.0, with USDT live on Lightning via Taproot Assets.

Taproot Assets addresses a long-standing challenge in Bitcoin: how to issue additional assets without bloating the blockchain or requiring a separate chain. By committing asset state to Taproot outputs and storing proof data off-chain, the protocol adds token functionality while preserving Bitcoin's UTXO model and on-chain efficiency.

How It Works

Taproot Assets builds on three core components: a Taproot commitment scheme for anchoring assets on-chain, a Merkle-Sum Sparse Merkle Tree for managing asset state, and an off-chain proof system called Universes for scalability.

Taproot Commitments

Every Taproot Assets transaction is a valid P2TR (Pay-to-Taproot) Bitcoin transaction. The protocol embeds asset data by tweaking the Taproot internal public key using a commitment hash:

Q = P + H(P | c) * G

Where:
  Q = final Taproot output key (appears on-chain)
  P = internal public key
  H(P | c) = hash of the public key concatenated with commitment data
  G = generator point on secp256k1

This taptweak binds asset data to the transaction without revealing it. An outside observer sees only a standard Taproot output. The commitment data contains the root of a Merkle-Sum Sparse Merkle Tree that encodes the full asset state for that output.

Merkle-Sum Sparse Merkle Tree (MS-SMT)

The MS-SMT combines two data structures to solve distinct problems in asset management:

• Sparse Merkle Tree (SMT): a 256-level authenticated key-value store where leaf positions correspond to hash digest bitmaps. This allows efficient proofs of both inclusion (an asset exists) and non-inclusion (an asset does not exist in the tree).
• Merkle Sum Tree: each leaf stores a numeric value (the asset amount), and each internal node carries the cumulative sum of its children. The root contains the total supply, enabling anyone to verify that no tokens were created or destroyed during a transfer.

Asset IDs are derived deterministically from the genesis transaction:

asset_id = sha256(genesis_outpoint || asset_tag || asset_meta)

Each leaf in the MS-SMT contains TLV (type-length-value) data:
  - Version identifier
  - Asset ID
  - Amount (for fungible assets) or unique identifier (for NFTs)
  - Transfer signature (using Schnorr signatures)

Multiple distinct assets can reside in a single Bitcoin UTXO, each occupying its own leaf in the MS-SMT. This compact representation is what allows Taproot Assets to scale without proportionally increasing on-chain data.

Off-Chain Proof Storage: Universes

To keep the Bitcoin blockchain lean, Taproot Assets stores witness data and transfer proofs off-chain. Participants in asset transfers bear the costs of verification and storage rather than pushing data to every Bitcoin node.

A Universe is a server that indexes off-chain asset data and serves proofs to asset holders. It functions like a block explorer for Taproot Assets. Universes have no special protocol privileges: all data they serve can be independently validated against the Bitcoin blockchain. Issuers or third parties can operate Universe servers, and multiple servers can federate in "Multiverse" mode for redundancy.

Each proof chain traces an asset from its genesis output through every subsequent transfer, demonstrating at each step that the MS-SMT was updated correctly and supply was conserved.

Taproot Assets vs. BRC-20 and Ordinals

Bitcoin has multiple approaches to token issuance. Ordinals inscribe data directly in the witness field of transactions, while BRC-20 tokens use a JSON-inscription standard built on Ordinals. Taproot Assets takes a fundamentally different approach.

The tradeoff is clear: Taproot Assets optimizes for scalability, privacy, and Lightning compatibility at the cost of requiring off-chain infrastructure (Universes) and a more complex toolchain. BRC-20 and Ordinals prioritize simplicity and permissionless access but place significant load on Bitcoin's base layer. For a broader comparison of these approaches, see the Bitcoin Ordinals and BRC-20 evolution research article.

Lightning Network Integration

One of Taproot Assets' most significant capabilities is native Lightning Network support, introduced in v0.4 (July 2024). This allows assets to be transferred instantly with the same speed and low fees as regular Lightning payments.

The integration works by using Bitcoin as a universal routing currency. When Alice sends USDT to Bob over Lightning:

1. Alice's edge node converts the Taproot Asset into a Bitcoin-denominated HTLC using the RFQ (Request for Quote) service
2. The payment routes through the existing Lightning Network as a standard Bitcoin payment
3. Bob's edge node converts the Bitcoin back into the Taproot Asset at the destination

Only the first and last hops need Taproot Assets awareness. Every intermediate routing node processes the payment as ordinary Bitcoin, meaning the entire existing Lightning routing infrastructure is available without modification. This design avoids the liquidity fragmentation that would occur if each asset required its own routing network.

Recent versions have added multi-path payment support (v0.7) for splitting larger transfers across multiple channels, and static reusable addresses (AddressV2) for receiving assets without generating a new address for each payment.

Use Cases

Bitcoin-Native Stablecoins

The most prominent use case is stablecoin issuance directly on Bitcoin. Tether launched USDT on Lightning via Taproot Assets in March 2026, enabling instant dollar-denominated payments over the Lightning Network. USDC and regional stablecoins like DePix (a Brazilian real stablecoin) are also available through the ecosystem. For platforms like Spark, Taproot Assets represents another pathway for bringing stablecoins to Bitcoin.

Tokenized Assets

Taproot Assets supports both fungible and non-fungible tokens anchored to Bitcoin's security. Potential applications include loyalty points, in-game currencies, collectibles, and representations of real-world assets. The token standard built into the protocol ensures interoperability across wallets and services that implement the specification.

Cross-Border Payments

By combining stablecoins with Lightning's instant settlement, Taproot Assets enables low-cost cross-border payments. A sender in one country can pay in a local currency stablecoin, which routes over Lightning as Bitcoin and arrives as a different stablecoin at the destination: all within seconds.

Protocol Specifications

Lightning Labs has submitted seven draft specifications to the Bitcoin Improvement Proposal repository, covering the core protocol:

These specifications build upon BIP 341 (Taproot) and use Schnorr signatures for asset transfer authorization. The BIPs remain in draft status as of mid-2026.

Risks and Considerations

Off-Chain Data Availability

Taproot Assets relies on Universe servers to store and serve proof data. If an asset issuer's Universe goes offline and no mirrors exist, holders may lose the ability to verify or transfer their assets. While Multiverse federation mitigates this risk, the protocol does not yet have the same level of data availability guarantees as fully on-chain approaches.

Centralized Issuance

Unlike BRC-20's open minting model, Taproot Assets issuance is controlled by the asset creator. This is appropriate for stablecoins (where a regulated issuer controls supply) but means the protocol is less suited for permissionless, community-driven token launches.

Proof Growth

Each transfer adds to the proof chain for an asset. Over many transactions, proof files grow linearly, requiring more bandwidth and storage to validate the full history from genesis. The protocol does not currently support proof pruning or compression, though this is an area of active development.

Alpha Status

Despite production deployments like USDT on Lightning, Taproot Assets remains in alpha. The protocol has undergone significant changes between versions, including database migrations and RPC interface updates. Production users should monitor releases closely and plan for breaking changes. For additional context on how Taproot Assets fits alongside other Bitcoin scaling solutions, see the Bitcoin Layer 2 comparison.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.