Cointime

Download App
iOS & Android

Introducing Citrea: Bitcoin’s First ZK Rollup

Today we introduce Citrea, the first rollup that enhances the capabilities of Bitcoin blockspace with zero knowledge technology.

The Bitcoin scalability landscape has long been dependent on solutions that move security and demand off-chain, off-Bitcoin. Citrea is set to change this reality by scaling Bitcoin in its entirety with zero-knowledge proofs, ensuring on-chain verifiability and data availability within the Bitcoin network. This approach makes Citrea the first scaling solution to enable more complex applications without compromising Bitcoin security and changing its consensus rules.

The Problem with Creating New Blockspace

Bitcoin has the most secure, decentralized, and censorship-resistant blockspace. Scaling proposals that create new blockspaces cannot inherit any of these properties of Bitcoin. These proposals or implementations merely offer alternative blockspaces; they do not scale the Bitcoin blockchain. Constructing sidechains with an alternative blockspace competes with Bitcoin in the long term and risks users' funds through insecure bridges and network constructions.

Bitcoin Blockspace is in High Demand

People are demanding Bitcoin for all their on-chain needs because of its security, decentralization, and censorship resistance. Over the past few months, we have observed exponential interest in Bitcoin blockspace, reflected in the fee rates. Whether it is a payment or inscription transaction, people want to get included in the blockspace and are willing to pay for it. Ensuring sustainable participation in the Bitcoin network is vital for its long-term health and security budget, but there is a trade-off: the inevitable exclusion of some transactions due to the high fees and necessary block size limit. It's imperative that Bitcoin scales to include many more complex transactions without changing its core principles. 

This increasing interest highlights a significant problem with existing scalability proposals: their failure to address the growing demand for inclusion in the Bitcoin blockspace.

Existing Scalability Proposals Don't Scale Bitcoin

Bitcoin has long faced the challenge of handling more transactions and enabling a wider array of applications without compromising its security or core principles. This multifaceted issue has proven difficult to address in its entirety. Some attempts have targeted scaling Bitcoin’s payment throughput, such as Lightning, while others have focused on scaling the functionality of the BTC asset, like sidechains. While the first scaling proposal fell short in bringing programmability to Bitcoin, the latter missed a critical point: the active and effective utilization of the Bitcoin blockchain itself.

In the current landscape, the inherent demand for Bitcoin blockchain is being redirected to separate consensus protocols, to sidechains. This approach results in a trade-off — sacrificing Bitcoin’s security and misaligning with its incentives in exchange for lower fees and more use cases for BTC. Consequently, Bitcoin, dominated by sidechains, suffers from scaling solutions that fail to serve its long-term health and incentives in any meaningful way. These solutions, though well-intentioned, do not operate on the Bitcoin blockchain, do not contribute to Bitcoin security, and ultimately, do not scale the Bitcoin blockchain as needed.

Once again, a demand for Bitcoin moved to a sidechain is not a demand for Bitcoin anymore. 

Scale the Bitcoin Blockspace

Truly scaling Bitcoin requires establishing a symbiotic relationship between Bitcoin and the scaling solution. The scaling solution must actively and efficiently utilize Bitcoin blockspace to scale the demand and increase its expressivity and throughput without changing its protocol. Scaling Bitcoin blockspace is the only way to transact with Bitcoin security. Any other alternative cannot inherit full Bitcoin security.

The most secure and incentive-aligned way to scale Bitcoin blocks is to shard the execution with on-chain verifiability and data. The only way to achieve easy verifiability by Bitcoin is through leveraging zero knowledge or fraud proofs. As fraud proofs require vast amounts of data to be written on Bitcoin, ZK proofs are the most efficient way to verify the validity of execution inside Bitcoin within the block size limit.

ZK Rollups create an execution shard and batch multiple transactions on the shard while verifying them on-chain with a succinct mathematical proof as well as minimal essential data to reconstruct the state. This method enables ZK Rollups to utilize underlying blockspace verifiably in the most efficient manner, scaling the L1 with its full security.

Enter Citrea: Bitcoin Security at Scale 

Citrea is the first rollup on Bitcoin that enables greater expressivity and increases the utility of Bitcoin blockspace without ever leaving Bitcoin. Citrea keeps the demand for Bitcoin within its network and ensures that Bitcoin Network serves as a data availability and settlement layer for Citrea transactions. Citrea requires no consensus changes to Bitcoin.

Citrea represents a significant milestone for Bitcoin: it is the only execution layer on Bitcoin that settles on Bitcoin, the first ZK proof verification, and the first universal L2 verification inside Bitcoin. Citrea’s mission is to advance Bitcoin into its next phase, foundation for the world's financial infrastructure, where developers can build everything on Bitcoin.

Citrea batches thousands of transactions, processes them in zkVM, and produces a succinct validity proof asserting the correctness of the execution as well as the output data. For the first time in Bitcoin history, Citrea validity proofs are inscribed and natively verified within the Bitcoin blockchain. Citrea comes with a native ZK proof verifier smart contract on Bitcoin L1, built in BitVM. Unlike monolithic sidechains, Citrea creates a modular world for Bitcoin with its execution shard that keeps the settlement and data availability on-chain, on-Bitcoin.

Citrea: A Modular Touch to Bitcoin

Citrea creates consistent fee revenue for miners through data availability, trustlessly scales BTC beyond Bitcoin with validity proofs, and allows developers to build anything on its EVM equivalent execution shard.

Scaling Bitcoin Security

Citrea is the only execution layer on Bitcoin that actually settles on Bitcoin. Every transaction occurring on Citrea is fully secured by zero-knowledge proofs and verified by Bitcoin. The execution environment of Citrea is trustless with respect to Bitcoin and is accessible to all participants of the Bitcoin Network.

As a result, Citrea ensures that it satisfies Bitcoin equivalent data availability, censorship resistance, and re-org resistance guarantees.

  1. Bitcoin as App Bedrock: Citrea's mission is to build a programmable liquidity layer on top of the most secure and decentralized blockchain, Bitcoin. We believe Bitcoin blockspace must be used to settle all kinds of financial activities efficiently such as trustlessly buying BTC, leveraging BTC, or lending BTC. Most existing meta protocols attempting to provide these features are trusted and inefficient. Citrea is the most efficient and secure platform to build applications on Bitcoin.
  2. Bitcoin Settlement and Trust-Minimized Two-Way Peg: For the first time in Bitcoin history, a universal L2 is settled on Bitcoin, enabling the first ever universal trust-minimized two-way peg. Prior to Citrea, Layer 2 solutions relied on the honest majority assumption of a multi-signature, such as open or closed federations. With Citrea, the validity proofs are verified in Bitcoin using BitVM paradigm, as long as one network participant is honest. BitVM is based on fraud proofs, meaning that ZK proofs of Citrea are being optimistically verified on the Bitcoin network. In the future, a ZK proof verifier opcode will enable a fully trustless two-way peg mechanism.
  3. EVM Equivalence: Building Citrea with full EVM equivalence enables all the EVM developers to build on Bitcoin, effortlessly. Citrea ships a Type 2 zkEVM, fully equivalent to EVM, built using RISC Zero. Citrea is not limited to a single VM by design, and can adopt new VMs such as WASM VM in the future thanks to its modular architecture.

What’s Next?

Internal Devnet is Enabled

We are running Citrea Devnet with a synthetic native BTC internally for critical infrastructure integrations and tests. Trust-minimized two-way peg with BitVM is under heavy development.

We welcome infrastructure partnerships. If you are an infrastructure provider interested in partnering with Citrea, please get in touch with us at: [email protected]

Revealing The First Trust-Minimized Two-Way Peg

Keep an eye out for the reveal of Citrea's trust-minimized peg design. We will announce our bridge design and open-source our codebase in the coming weeks!

Public Testnet

We are making rapid progress. We’ve been working hard on building a robust testnet for the first rollup on Bitcoin. We’re excited to share more in the coming months. Keep an eye on our socials and blogs.

Build with Citrea

Our developer contact form opens today. Citrea has been incubated by Chainway Labs for over a year, and is well-funded. If you’re interested in building with us or deploying on Citrea, please get in touch. Check out our documentation to explore Citrea’s technology.

Making Bitcoin the Foundation for World’s Finance

Citrea’s vision is to build scalable infrastructure that advances Bitcoin into its next phase, the foundation for the world’s finance. To achieve this vision, we believe that Bitcoin blockspace must be enhanced to include more transactions and offer more expressivity and features  without changing its consensus rules.

Bitcoin, with its security, decentralization, and censorship resistance, is perfectly positioned to serve as the foundation for the world’s finance. Recognizing this potential, Citrea builds on these strengths and makes Bitcoin a base layer for a dynamic ecosystem of DeFi, gaming, NFTs, and more. Citrea will only get bigger and more advanced with its modular world anchored on Bitcoin.

We are incredibly bullish on our vision and committed to working towards it. 

On Bitcoin, For Bitcoin.

Comments

All Comments

Recommended for you

  • Vitalik: Ethereum Foundation is Not the Central Manager of the ETH Ecosystem, Future Development Will Shift to 'Small and Long-term' Approach

    On May 25, Ethereum founder Vitalik shared his views on the future development direction of the Ethereum Foundation in a post on the X platform. He emphasized that this is just his personal opinion. The board does not consist solely of him, and he does not have more special powers than other board members. Aya Miyaguchi is leading most of the execution work for this transformation, while his own involvement is more focused on technical issues. The board is currently expanding, and his influence within the organization will continue to decline in the future, which, frankly, is what he hopes to see. By 2025, the Ethereum Foundation has made significant improvements in its execution capabilities. Many issues have been resolved, and the foundation continues to benefit from greater efficiency and a stronger focus on specific goals. However, as these issues were addressed, he began to care more about another concern: he often sees people saying, 'Vitalik has always talked about Ethereum needing to be decentralized, having privacy, and becoming a shelter technology, but why do the actions of the Ethereum Foundation not reflect these ideals?' Of course, there are those who hold completely different views. Some do not feel there is a crisis at all, but rather believe that the Ethereum Foundation has finally begun to take execution and business development seriously, and the next focus should be to continue along this path faster and stronger. Vitalik believes that this difference essentially reflects varying sensitivities to different types of criticism, and he is more easily hurt by criticisms regarding deviations from values. Vitalik stated that the Ethereum Foundation should not be 'the center of Ethereum,' but rather 'a node with clear responsibilities, existing alongside other nodes.' In the past, they have always said this, but many people in the ecosystem, including some within the foundation, hoped the foundation would become a true center. Now, they are taking concrete actions to ensure the foundation becomes the latter. This is particularly important because the Ethereum Foundation is essentially a resource-limited and organizationally limited entity. The foundation currently holds only about 0.16% of all ETH, which is even lower than many large ETH holders; whereas many other blockchain projects' 'central foundations' typically control 10%-50% of their tokens. The current Ethereum Foundation has decided to use its remaining resources to pursue 'long-term viability' rather than continuous expansion (which also means they will sell less ETH). The foundation will focus on those things that are crucial for Ethereum to become a censorship-resistant, control-resistant, open, private, and secure system, but that no one else would do if the foundation does not. This means they must make difficult choices. Some projects and individuals they highly respect may no longer belong to the foundation's system in the future. In fact, if they want important tasks to attract external capital, it may be necessary to keep some talented individuals, influential public figures, and those who share the mission and CROPS philosophy outside the foundation. This also means that the Ethereum Foundation will take a clearer and more principled stance on a cultural level.

  • ETH Surpasses $2100

    Market data shows that ETH has surpassed $2100, currently priced at $2101.04, with a 24-hour increase of 1.9%. The market is experiencing significant volatility, so please ensure proper risk management.

  • U.S. Officials: Agreement with Iran Expected Not to Be Signed on Sunday, Some Issues Remain

    On May 24, Axios reported, citing a U.S. official, that Iran's Supreme Leader has approved the overall framework of the agreement. There are some important statements for us and some significant wording for Iran. It is expected that the agreement with Iran will not be signed on Sunday, as there are still some issues that need to be resolved. The current status of the Iranian regime is progressing slowly, and completing the necessary approvals will take a few days.

  • ETH Falls Below $2100

    Market data shows that ETH has fallen below $2100, currently priced at $2096.81, with a 24-hour increase of 2.47%. The market is experiencing significant volatility, so please ensure proper risk management.

  • PAYS Officially Launches on Nivex, Surges 100% on Debut

    At 15:18 on May 24, 2026, PAYS officially launched on the Nivex exchange and opened for trading globally.

  • U.S. Secretary of State: Announcement on Agreement with Iran Possible Later Sunday

    On May 24, U.S. Secretary of State Rubio stated that an announcement regarding an agreement with Iran may be made later on Sunday.

  • BTC Surpasses $77,000

    Market data shows that BTC has surpassed $77,000, currently priced at $77,073.6, with a 24-hour increase of 1.32%. The market is experiencing significant volatility, so please ensure proper risk management.

  • Trump: Calls with Multiple World Leaders, Iran Agreement Nearly Finalized

    On May 24, Trump stated on social media that he had "very good calls" in the Oval Office with leaders from Saudi Arabia, the UAE, Qatar, Pakistan, Turkey, Egypt, Jordan, Bahrain, and others regarding Iran and a peace memorandum. Trump claimed that the agreement has been largely negotiated and is pending finalization by the U.S., Iran, and other relevant countries. Additionally, his call with Israeli Prime Minister Netanyahu was also "very smooth." The final details of the agreement are under discussion and will be announced soon. Trump specifically noted that, in addition to several aspects of the agreement, the Strait of Hormuz will be opened.

  • BTC Surpasses $76,000

    Market data shows that BTC has surpassed $76,000, currently priced at $76,001.27, with a 24-hour increase of 0.05%. The market is experiencing significant volatility, so please ensure proper risk management.

  • US and Iran Expected to Announce Final Peace Agreement Within 24 Hours

    On May 24, according to the Washington Times citing sources close to the negotiations, the United States and Iran are expected to announce the finalization of a peace agreement within 24 hours after negotiating representatives approved a draft agreement to end all combat on the front lines. The agreement still awaits final approval from both governments.