Keyboard shortcuts

BTC79,450-1.68%ETH2,258.36-2.16%SOL90.81-4.29%BNB671.66-1.34%XRP1.43-1.79%ADA0.2640-3.52%DOGE0.1131-0.64%AVAX9.68-3.95%LINK10.20-4.14%DOT1.32-5.85%BTC79,450-1.68%ETH2,258.36-2.16%SOL90.81-4.29%BNB671.66-1.34%XRP1.43-1.79%ADA0.2640-3.52%DOGE0.1131-0.64%AVAX9.68-3.95%LINK10.20-4.14%DOT1.32-5.85%
IntermediateCrypto 101

What is a Rollup?

Layer-2 networks batch thousands of transactions off-chain and settle them on Ethereum — the backbone of crypto's scaling strategy.

Last updated Nov 1, 2025, 12:00 PM UTC

A rollup is a layer-2 blockchain that executes transactions on its own network but posts the compressed results (and often the raw data) back to a more secure base chain — almost always Ethereum. Rollups are the dominant answer to Ethereum's scaling problem: they let users transact cheaply and quickly without abandoning the security guarantees of the main chain.

Why we need them

Ethereum's base layer was designed to be secure and decentralized, not fast. It processes roughly 15 transactions per second. When demand spikes — an NFT mint, a DeFi opportunity, a meme-coin frenzy — gas fees soar to tens or hundreds of dollars per transaction. That is fatal for retail-scale use cases.

Rollups fix this by doing the work elsewhere. Users interact with the rollup, which sequences transactions at much higher throughput. Periodically, the rollup posts a bundle — the "roll up" — back to Ethereum, where it settles with the security of the base chain behind it.

Optimistic rollups

Arbitrum and Optimism are the leading optimistic rollups. They assume submitted transactions are valid and post the results to Ethereum. There is a challenge window — typically seven days — during which anyone can submit a fraud proof if they spot an invalid transition. If a fraud proof succeeds, the bad state root is reverted.

The cost of this design is withdrawal latency. Moving assets from an optimistic rollup back to Ethereum directly takes seven days. Fast-bridge services exist, but they charge a fee in exchange for fronting you the assets immediately.

ZK-rollups

zkSync, Starknet, Linea, Scroll, and Polygon zkEVM are zero-knowledge rollups. Instead of assuming validity, they post a cryptographic proof — a SNARK or STARK — that the batch of transactions was executed correctly. The proof is expensive to generate but cheap to verify.

Because validity is proven, not assumed, there is no fraud-proof window. Withdrawals can be near-instant. The trade-off is complexity: building a general-purpose ZK-EVM that handles every edge case of Ethereum's execution environment is one of the hardest engineering problems in crypto, and only in the last two years has it started to work in production.

Data availability and blobs

A rollup is only as secure as its data is public. If the operator disappears and the data vanishes, users cannot reconstruct their balances. Ethereum's EIP-4844 ("proto-danksharding") introduced blobs — cheap, temporary storage specifically for rollup data — which cut L2 fees by roughly 10x overnight in March 2024.

Some chains call themselves "validiums" or "optimiums" and use off-chain data availability solutions (like Celestia or EigenDA) instead of Ethereum. Cheaper, but with weaker guarantees.

What to watch

The rollup landscape is still shaking out. Proof systems are getting faster. Sequencer decentralization is the next frontier — most rollups still have a single operator who orders transactions, and that is a centralization risk the ecosystem needs to solve.

Related terms

More explainers