Citrea vs Stacks: Bitcoin ZK Rollup vs Sidechain Compared

Citrea vs Stacks Overview

Citrea and Stacks represent two fundamentally different approaches to extending Bitcoin with smart contract functionality. Citrea is a ZK rollup that uses validity proofs inscribed directly on Bitcoin for settlement, while Stacks is a sidechain that anchors its consensus to Bitcoin through Proof of Transfer (PoX). Both aim to bring programmability to Bitcoin, but the trade-offs they make in trust assumptions, finality, developer tooling, and bridge security differ significantly.

Citrea launched its mainnet on January 27, 2026, making it the first production ZK rollup built directly on Bitcoin. Stacks has been live since January 2021 and completed its Nakamoto upgrade on October 29, 2024, which introduced fast blocks and full Bitcoin finality. The following table summarizes the key differences.

For a broader view of Bitcoin scaling solutions, see our Layer 2 comparison tool and the Bitcoin L2 decision guide.

How Each Approaches Bitcoin Settlement

The core difference between Citrea and Stacks lies in how they derive security from Bitcoin. This distinction shapes everything from finality guarantees to data availability.

Citrea: Validity Proofs on Bitcoin

Citrea batches L2 transactions, generates validity proofs using zk-STARKs (via RISC Zero zkVM), wraps them into Groth16 zkSNARKs, and inscribes the resulting proofs directly on Bitcoin. Each proof includes state differences and Merkle roots, so anyone running a Bitcoin full node can reconstruct the entire Citrea state. Bitcoin serves as both the settlement layer and the data availability layer.

Citrea provides three levels of finality: soft finality upon sequencer broadcast (~2 seconds), ordering finality after sequencer commitments reach sufficient Bitcoin confirmations, and proven finality after the batch ZK proof is verified and inscribed on Bitcoin. A chunking mechanism keeps each proof under 400KB per Bitcoin transaction.

Stacks: Proof of Transfer Anchoring

Stacks uses Proof of Transfer to economically tie its consensus to Bitcoin. Miners spend real BTC to compete for the right to produce Stacks blocks, and Stackers lock STX to receive those BTC rewards. Block hashes are anchored to Bitcoin transactions, and since the Nakamoto upgrade, reversing a Stacks transaction requires reversing the corresponding Bitcoin transaction.

Post-Nakamoto, Stacks uses tenure-based block production: the winning miner can produce many fast blocks between subsequent Bitcoin sortitions. The target block time is 5 seconds, though observed averages are closer to 30 seconds in practice. Data lives on the Stacks chain itself, not on Bitcoin, which means Stacks nodes (not Bitcoin nodes) are needed to reconstruct state.

Bridge Security: Clementine vs sBTC

Moving BTC between the base layer and an L2 requires a bridge, and bridge design is often the weakest point in any Layer 2 architecture. Citrea and Stacks take notably different approaches.

Citrea: Clementine (BitVM2)

Citrea's Clementine bridge is built on BitVM2 and uses a 1-of-N trust model: security holds as long as at least one participant in any role is honest. The bridge has five participant roles: Users, Signers, Operators, Watchtowers, and Challengers. Operators front BTC for withdrawals and post slashable bonds (~2 BTC each). Challengers can force operators to prove the legitimacy of reimbursement claims, and invalid claims result in full collateral slashing.

The 1-of-N model is cryptographically stronger than multisig approaches because an attacker must compromise every single participant rather than a threshold. The trade-off is complexity: the Clementine bridge design is novel and less battle-tested, with a challenge window of 1.5 days for uncontested operator claims.

Stacks: sBTC (Threshold Multisig)

sBTC launched in December 2024 and uses a distributed threshold signature scheme with a 15-key multisig. Withdrawals and deposits require 70% signer consensus (11 of 15). Signers include institutional entities like Blockdaemon and Kiln. Each sBTC is backed 1:1 by real BTC held by the signer set.

This is a more traditional and proven trust model, but it requires an honest majority among identified signers rather than just one honest participant. As of Q1 2026, sBTC held $545M in TVL with over 7,400 holders. The Stacks roadmap includes integrating sBTC into the core consensus mechanism so all Stacks signers participate, which would further decentralize the bridge.

Smart Contract Languages: EVM vs Clarity

The smart contract language choice is one of the most consequential decisions for developers evaluating these platforms. Citrea offers full EVM compatibility, while Stacks uses its purpose-built Clarity language.

Citrea's EVM equivalence means developers can port existing smart contracts from Ethereum, Arbitrum, Base, or any other EVM chain with minimal changes. The entire Ethereum toolchain works out of the box. This is a significant advantage for projects that want to expand to Bitcoin without rewriting their codebase.

Clarity's decidability guarantees that every contract will halt in finite steps, making it impossible to write contracts with unbounded execution. The language is interpreted rather than compiled, so the source code deployed on-chain is exactly what executes. This eliminates an entire class of bytecode verification issues. However, Clarity's constraints mean that some patterns common in Solidity are difficult or impossible to implement, and the developer pool is significantly smaller.

For more context on Bitcoin L2 developer tooling, see our research on Citrea's ZK rollup architecture and Clarity smart contracts on Bitcoin.

Ecosystem and TVL

Stacks has a five-year head start and a significantly more developed ecosystem. As of mid-2026, Stacks reports $85-121M in DeFi TVL across protocols like Zest Protocol ($70M+), Granite ($26M), StackingDAO (110M STX), and Bitflow ($5M). The network has over 1.6 million cumulative wallets and approximately 4,200 daily active users. sBTC alone holds roughly $545M in value.

Citrea's ecosystem is early-stage, with $6-12M in TVL across lending protocols, DEXes, and structured product vaults. Key protocols include Satsuma (DEX), Zentra (money markets), and Morpho (lending). Citrea's mainnet launched with 30+ Bitcoin-secured applications and had 33,000 testnet participants before launch. The CTR token launched in March 2025 with a $50M+ liquidity commitment from Galaxy.

Citrea's native stablecoin ctUSD (issued by MoonPay, backed by short-term US Treasury bills) has reached $10.9M in market cap. For developers interested in stablecoins on Bitcoin, protocols like Spark offer an alternative approach with USDB operating natively on the Bitcoin network without requiring a separate L2.

When to Choose Citrea vs Stacks

The right choice depends on what you are building and what trade-offs matter most to your application.

Choose Citrea if:

• You have existing Solidity contracts you want to deploy on Bitcoin
• Minimizing bridge trust assumptions is a priority (1-of-N vs honest majority)
• You need Bitcoin-level data availability for your application state
• Sub-3-second soft finality matters for your UX
• You want access to the broader EVM developer ecosystem and tooling

Choose Stacks if:

• You need a mature ecosystem with established DeFi liquidity
• Your contracts benefit from Clarity's safety guarantees (no reentrancy, decidability)
• Native Bitcoin state access in smart contracts is a core requirement
• You want to build on a platform with a five-year track record
• Access to sBTC's $545M in bridged BTC matters for your protocol

For a broader comparison of Bitcoin L2 options beyond these two, see our Bitcoin L2 trust model comparison and the full Bitcoin Layer 2 landscape analysis.

Frequently Asked Questions

Is Citrea a true Layer 2 or a sidechain?

Citrea is a ZK rollup that posts validity proofs and state diffs directly to Bitcoin, using Bitcoin for both settlement and data availability. This makes it closer to a true Layer 2 in the Ethereum sense than a sidechain, since the full state can be reconstructed from Bitcoin data alone. Stacks, by contrast, maintains its own separate chain for data and anchors block hashes to Bitcoin.

Does Stacks have Bitcoin finality after the Nakamoto upgrade?

Yes. Since the Nakamoto upgrade completed on October 29, 2024, Stacks transactions inherit Bitcoin finality: reversing a confirmed Stacks transaction requires reversing the corresponding Bitcoin block. Stacks no longer forks independently of Bitcoin.

Can I deploy existing Ethereum smart contracts on Citrea?

Yes. Citrea is a Type 2 zkEVM with full EVM equivalence. Existing Solidity and Vyper contracts can be deployed with standard tooling like Hardhat, Foundry, or Remix. No code modifications are required for most contracts.

Why does Stacks use Clarity instead of Solidity?

Clarity is a decidable (non-Turing-complete) language designed specifically for smart contract security. It prevents reentrancy attacks at the language level, enables complete static analysis of contract behavior before execution, and publishes source code directly on-chain rather than compiled bytecode. The trade-off is a smaller developer community and constrained expressiveness compared to Solidity.

Which bridge is more secure: Clementine or sBTC?

They use different security models. Citrea's Clementine bridge requires only 1 honest participant out of N (a 1-of-N trust model via BitVM2), while sBTC requires 11 of 15 signers to be honest (an honest majority model). Clementine's cryptographic guarantees are stronger in theory, but the design is newer and less battle-tested. sBTC's multisig model is more proven and currently secures $545M in BTC.

What is the TVL difference between Citrea and Stacks?

As of mid-2026, Stacks has significantly more TVL: $85-121M in DeFi protocols plus $545M in sBTC. Citrea's DeFi TVL is $6-12M, which is expected given that its mainnet launched in January 2026 compared to Stacks' five-year history.

How do transaction fees compare between Citrea and Stacks?

Citrea batches transactions and amortizes the cost of Bitcoin proof posting across all transactions in a batch, resulting in low per- transaction fees typical of rollups. Stacks fees depend on the STX fee market and vary with network demand. Both are significantly cheaper than Bitcoin L1 transactions.

This tool is for informational purposes only and does not constitute financial advice. Data is approximate and based on publicly available information as of September 2026. TVL figures fluctuate with market conditions. Always verify current data before making decisions.