How to Build Rollups on Bitcoin
summary
Proposes using Bitcoin for both data availability and settlement by posting sequencer commitments and compact state diffs (not full txs) into witness scripts, and notes the testnet load of about 2 MB/day to testnet (~0.3% of blocks). Describes a ZK EVM rollup called Citria plus a BitVM‑based bridge Clementine that uses presigned transaction graphs, operators, signers, challengers and watchtowers; handles Groth16 verification by chunked onchain challenges and optimistic dispute resolution, and runs 2s L2 blocks with offchain withdrawal auctions.
AI-written summary · about
chapters (11)
- 0:00Building rollups on Bitcoin
- 0:54Bitcoin needs rollups for scaling
- 3:27Bitcoin script limits for smart contracts
- 4:10Storing rollup data on Bitcoin DA
- 8:55Processing Bitcoin DA data efficiently
- 10:19Citria's rollup data types
- 12:28Light client for Bitcoin rollups
- 13:52Verifying ZK proofs on Bitcoin
- 14:53BitVM for Bitcoin covenants
- 17:02Clementine Bitcoin bridge
- 21:43Q&A
related talks
27mThe ZK Rollup Endgame
19mA Guide to Building Bitcoin Applications on Citrea
23mA Guide to Building Bitcoin Applications on Citrea
14mThe Bitcoin Meta Problem
28mBitVM: Innovation Without a Soft Fork
19mMore Expressive Smart Contracts with Bitcoin
22mMaking Bitcoin Productive for Ethereum using Trustless Vaults
24mThe Bitcoin Virtual Machine Breakthrough Nobody Saw Coming
