What is a ZK rollup?
- Author
- CRYPTO PORT Editorial
- Published
- Updated
- Reading time
- 5 min
In short
A ZK rollup attaches a cryptographic validity proof showing that a batch of transactions was executed correctly. The main chain only has to verify the proof, so results finalise without waiting out a challenge window.
Key points
- Correctness is established by a cryptographic proof
- No challenge window, so exits finalise quickly
- Generating proofs is computationally expensive
- Harder to implement general-purpose execution
Definition
A rollup that proves the correctness of its batched execution to the main chain using a zero-knowledge proof.
A zero-knowledge proof establishes that a computation was performed correctly without revealing all of its details. A ZK rollup uses this to compress 'these thousands of transactions followed the rules' into a single short proof submitted to the main chain.
The main chain then only verifies the proof rather than re-executing anything. An invalid result cannot produce a valid proof, so it is never accepted at all. With no challenge period to wait out, withdrawals to the base chain settle comparatively quickly.
The cost falls on the prover. Making general smart-contract execution provable demands sophisticated engineering, and some operators run dedicated proving hardware. This area moves fast, so specific network parameters should be expected to change.
Watch out for
- · Despite the name, transaction contents are not necessarily private
- · A flaw in the proving system itself undermines the entire security argument