The Development of ZK Rollups
The Development of ZK Rollups
Crypto.com | 2
RESEARCH DISCLAIMER
The information in this report is provided as general commentary by Crypto.com and its
affiliates, and does not constitute any financial, investment, legal, tax, or any other
advice. This report is not intended to offer or recommend any access to products
and/or services. The views expressed herein are based solely on information available
publicly, internal data, or information from other reliable sources believed to be true.
This report is not meant for public distribution. Reproduction or dissemination, directly
or indirectly, of research data and reports of Crypto.com in any form is prohibited
except with the written permission of Crypto.com. This report is not directed or
intended for distribution to, or use by, any person or entity who is a citizen or resident
of, or located in a jurisdiction, where such distribution or use would be contrary to
applicable law or that would subject Crypto.com and/or its affiliates to any registration
or licensing requirement.
The brands and the logos appearing in this report are registered trademarks of their
respective owners.
Contents
Executive Summary 5
1. Introduction to ZK Rollups 6
2. Types of zkEVMs 11
Polygon zkEVM 15
Scroll 16
zkSync 18
Starknet 21
3. Conclusion 23
References 25
Executive Summary
● Zero-Knowledge rollups (ZK rollups) are still at a nascent stage, with the Layer-2
landscape currently dominated by optimistic rollups, such as Optimism and
Arbitrum. Nevertheless, ZK rollups like zkSync Era have been increasing in total
value locked (TVL), reaching US$668 million as of 30 June 2023, up by 660% from
$88 million on 1 April 2023.
● One of the obstacles blocking ZK rollups adoption is lack of full compatibility with
the Ethereum Virtual Machine (EVM). However, as the technology evolves,
various methods have emerged to achieve zkEVMs.
● Type 2 zkEVMs are fully EVM equivalent but do not meet the
Ethereum-equivalent criterion. In general, they are fully compatible with existing
applications; however, there are small modifications compared to Ethereum
(such as changes to data structures like the block structure and state tree) in
order to enable easier development and faster proof generation.
● ZK rollups are promising in the long term given their high security and scalability.
The market for generating Zero-Knowledge (ZK) proofs is estimated to reach $10
billion by 2030.
1. Introduction to ZK Rollups
It is well known that Ethereum has been suffering from scalability issues due to
high demand, causing gas prices to surge. Currently, Ethereum has reached the
network’s capacity of around 1-plus million transactions per day.
Hence, Layer-2 solutions have been developed to help improve the scalability of
blockchains. Layer-2 chains are built on top of Layer-1 blockchains (like
Ethereum and Bitcoin) and assist with scaling by handling some of the
transaction load from Layer-1 chains. This helps the base layer become less
congested.
Zero-Knowledge rollups (ZK rollups) are a class of Layer-2 solutions that bundles
transactions together to be executed off-chain, which reduces the amount of data
to be posted on-chain. The key feature of ZK rollups is producing validity
proofs to prove that the proposed changes to Ethereum’s state are correct.
Unlike optimistic rollups, which have to post all transaction data on-chain, ZK
rollups only need to provide validity proofs to finalise transactions (states) on
Ethereum. This leads to several benefits, such as having no delays when
withdrawing funds from a ZK rollup to Ethereum since exit transactions are
executed once the validity proof is verified. In contrast, users of optimistic
rollups have to wait at least seven days to confirm their funds are successfully
withdrawn.
ZK Rollups Terminology
Term Meaning
There are two main types of validity proofs: ZK-SNARK (Zero-Knowledge Succinct
Non-Interactive Argument of Knowledge) and ZK-STARK (Zero-Knowledge Scalable
Transparent Argument of Knowledge).
There are some technical differences between ZK-SNARK and ZK-STARK. For
instance, ZK-SNARKs require the creation of a Common Reference String (CRS),
which provides public parameters for proving and verifying validity proofs. This
CRS process has to be kept secure using trusted setups — if the information used
to create public parameters is leaked, malicious actors can use it to generate false
validity proofs. Nevertheless, ZK-SNARKs have benefits like small proof sizes
and constant time verification.
ZK-STARKs are considered ‘transparent’ in the sense that they do not require the
trusted setup of a CRS. In addition, ZK-STARKs are faster than ZK-SNARKs for
proving and verifying large datasets, making them more scalable. One downside
of ZK-STARKs is that they produce larger proof sizes, which are more expensive to
verify on Ethereum. In addition, ZK-STARKs have higher specification requirements
for devices, as they need more intensive computation than ZK-SNARKs.
ZK-SNARKs vs ZK-STARKs
In the table below, we list some of the main advantages and disadvantages of ZK
rollups.
Pros Cons
ZK rollups are still at a nascent stage, with the Layer-2 landscape currently
dominated by optimistic rollups, such as Optimism and Arbitrum. Nevertheless,
ZK rollups like zkSync Era have been increasing in total value locked (TVL),
reaching US$668 million as of 30 June 2023, up by 660% from $88 million on 1
April 2023.
2. Types of zkEVMs
As shown in the above section, one of the obstacles blocking ZK rollups adoption
is their lack of full compatibility with EVM. However, with the development of the
technology, the industry has found ways to achieve the Zero-Knowledge Ethereum
Virtual Machine (zkEVM), which has begun to gain considerable adoption and
usage. For example, zkSync Era reached a high of 44,800 daily transactions on 25
March 2023, with the number stabilising between 15,000 to 20,000 in June 2023.
EVM equivalence denotes that the experience of developing on the rollup is 100%
identical to the experience of developing on Ethereum. The Layer-1 smart
contracts can be directly ported over to the Layer-2 blockchain without breaking.
also need to rewrite their smart contracts in order to port them over to an
EVM-compatible blockchain.
There are four types of zkEVMs, and each has their advantages and
disadvantages. Type 1 zkEVMs generally require complex engineering to
parallelise the prover in order to mitigate the long prover times. To date, Type 1
zkEVMs have not yet launched on the mainnet.
Currently, the most commonly used types of zkEVMs include Type 4 (zkSync Era,
Starknet) and Type 2 (Polygon zkEVM). Type 3 zkEVMs are considered a
transitional stage, where most projects will subsequently move towards Type 2.
In the table below, we compare the different types of zkEVMs in terms of their
type, TVL, mainnet launch date, and the token used for gas fees.
Comparisons of zkEVMs
Linea
(formerly
— Type 2 Q2 2023 ETH
ConsenSys
zkEVM)
During the past three months, both zkSync Era and Polygon zkEVM saw significant
growth on TVL, which surged by around 14.5x and 91x, respectively.
Pros Cons
Teams currently building Type 1 zkEVMs include the Privacy & Scaling Explorations
(PSE) team, as well as Taiko. Both projects have not yet reached the mainnet stage,
with Taiko targeting to launch its mainnet in early 2024.
Pros Cons
Polygon zkEVM
Polygon zkEVM (previously Polygon Hermez) is a Type 2 zkEVM. Since its mainnet
beta launch on 27 March 2023, it has experienced considerable growth in TVL,
increasing from $0.47 million on 28 March 2023 to $39.18 million on 30 June 2023.
Polygon zkEVM offers Ethereum scalability with zkEVM performance and security.
At the time of writing, Polygon zkEVM has an average of 1.2 transactions per
second (TPS), a time-to-finality of around 2 to 3 seconds, as well as low fees of
around $0.03.
A unique feature of Polygon zkEVM is that it uses the Polygon Zero ZK proof
technology to achieve fast network finality with frequent validity proofs. Polygon
Zero is distinguished from other ZK scaling solutions due to its Plonky2
prover system, which supports efficient recursive proof generation. This allows
Polygon Zero to scale horizontally, such that the throughput of the protocol is
limited not by the weakest nodes on the network, but rather by the total
computing power available.
Scroll
Scroll is a Type 2 zkEVM on Ethereum that supports native compatibility for
Ethereum applications and tools. Scroll is currently at its Alpha Testnet phase,
which is one phase before mainnet.
A unique feature of Scroll is its decentralised prover network, the Roller Network.
The network dispatches blocks to various provers with the help of a coordinator,
avoiding the single point of failure that is a potential drawback in centralised
systems.
The main advantage of Type 4 zkEVMs is very fast prover times, while the main
disadvantage is higher incompatibility.
Pros Cons
zkSync
zkSync is a ZK rollup that utilises cryptographic validity proofs to provide
scalable and low-cost transactions on Ethereum. With zkSync, the smart
contracts are written in Solidity or Vyper (same as Ethereum) and can be called
using the same clients as other EVM-compatible chains. Amongst the ZK rollups,
zkSync Era has the highest TVL, totalling US$668 million as of 30 June 2023.
There are two versions of zkSync: zkSync Lite and zkSync Era. zkSync Lite is an
early version of the network without smart contract support, while zkSync Era
supports smart contracts.
● The operator processes the request, then creates a rollup operation and
adds it to the block.
● After the block is complete, the operator submits it to the zkSync smart
contract, where portions of the logic of rollup operations is checked by
the smart contract.
● The proof for the block is submitted to the zkSync smart contract for
verification.
There are various features of zkSync Era that help to increase its security and
usability:
● Due to its usage of ZK rollups, zkSync does not require any operational
activity to maintain safety of funds. For instance, users can go offline
and still withdraw their assets safely when they return, even if the ZK
rollup validators are no longer around.
Starknet
Starknet is a permissionless ZK rollup that supports general computation
and operates as an L2 network over Ethereum. Starknet smart contracts are
mainly written in the StarkWare Cairo language, which is a Turing-complete
programming language designed for STARK proofs.
At the moment, Starknet does not natively support EVM. However, Nethermind's
Warp project is in the process of building a compiler from Solidity to StarkWare's
Cairo, which will turn Starknet into a Type 4 zkEVM.
Starknet supported Cairo 1.0 contracts in its version 0.11.0 in March 2023; since
then, Starknet TVL has risen to $67 million as of 30 June 2023.
3. Conclusion
The main weakness of ZK rollups is their low compatibility with the Ethereum
Virtual Machine (EVM); the development of zkEVMs has significantly helped to
overcome this drawback. Each type of zkEVM has its advantages and trade-offs:
Lower-numbered types offer greater compatibility with existing Ethereum
infrastructure at the cost of slower proof generation, whereas higher-numbered
types, although less compatible with existing infrastructure, generate proofs
faster.
ZK rollups represent a new technology that is still in its nascent stage compared
with optimistic rollups. However, ZK rollups are promising in the long term given
their high security and scalability. Vitalik Buterin, co-founder of Ethereum, has said
that “in the long run, ZK rollup will eventually beat optimistic rollup because they
have basic advantages like users don't need to wait seven days for a withdrawal.”
Notable Fundraisings
It has been projected that Web3 services will require almost 90 billion
Zero-Knowledge proofs to be executed in 2030, with market-wide completion of
83,000 transactions per second. For comparison, the Visa network processes up to
65,000 transactions per second. In addition, the market for generating
Zero-Knowledge proofs is estimated to reach $10 billion by 2030.
Metric Amount
It has been estimated by Vitalik Buterin that ZK rollup technologies could take
“years of refinement”. In the meantime, it is likely there will be a lot of innovation
on the different paths to scaling Ethereum and Ethereum-based ZK rollups.
References
Buterin, Vitalik. The different types of zkEVMs, 4 August 2022,
https://vitalik.ca/general/2022/08/04/zkevm.html. Accessed 12 June 2023.
Kessler, Sam, and Sage D. Young. “Ethereum's Rollup Race: What is a 'True' zkEVM?”
CoinDesk, 27 July 2022,
https://www.coindesk.com/tech/2022/07/27/ethereums-rollup-race-what-is-a-tru
e-zkevm/. Accessed 13 June 2023.