Rather than processing every individual transaction directly on a busy base blockchain, often called layer-1, a ZK-rollup executes a batch of transactions separately and then generates a compact cryptographic proof, known as a zero-knowledge proof, that mathematically demonstrates the batch was processed correctly. This happens without needing to reveal or re-execute every individual transaction on the main chain itself. The main chain only needs to verify this proof, which is far cheaper and faster than validating each transaction one by one, even though the batch itself might contain a large number of individual transfers.
This approach can significantly reduce transaction fees and increase throughput compared with processing everything directly on the base layer, while still inheriting much of the base chain's underlying security, since the validity proof is actually checked on-chain rather than simply trusted without verification. ZK-rollups are one of several layer-2 designs used to help blockchains scale, and they differ from other rollup approaches mainly in how they prove that off-chain transactions were genuinely valid, rather than in what they are ultimately trying to achieve.
From a user's perspective, interacting with a ZK-rollup usually looks similar to using the underlying blockchain directly, typically through a familiar wallet and a bridge connecting the two networks, without needing any understanding of the underlying proof system or how the batching process actually works behind the scenes.
Key takeaways
- A ZK-rollup processes transactions off the main blockchain and submits a cryptographic proof of their validity back to it.
- This reduces fees and increases throughput compared with processing every transaction directly on the base layer.
- The main chain verifies the proof rather than trusting the rollup outright, which lets it inherit much of the base layer's security.
ZK-Rollup — frequently asked questions
How is a ZK-rollup different from other layer-2 scaling methods?
ZK-rollups prove transaction validity mathematically using a cryptographic proof checked on-chain. Other layer-2 approaches use different methods, such as assuming transactions are valid unless someone successfully challenges them within a set time window.
Do I need to understand the cryptography to use a ZK-rollup?
No. Everyday interaction with a ZK-rollup, such as sending a transaction through a wallet connected via a bridge, does not require understanding the underlying mathematics. That complexity is handled by the protocol itself.
New to crypto, or filling in the gaps? Work through the essentials in Learn, browse every term A–Z, or see live prices for the coins these concepts power.