How Does Citrea's ZK Rollup Work? A Complete Process Breakdown

Bitcoin has long been considered the most secure and decentralized blockchain network, but its native scripting capabilities are limited, making it difficult to directly support complex Smart Contracts and on-chain financial applications. As Ethereum Rollup and Layer2 technologies mature, the market has begun exploring ways to provide BTC with greater scalability and programmability while preserving Bitcoin's security.

Against this backdrop, Bitcoin Rollup and BTCFi concepts have gradually emerged. Citrea, a key project in the Bitcoin ZK Rollup space, aims to enable BTC to support DeFi, stablecoins, lending, on-chain financial markets, and other use cases through zkEVM, BitVM, and zero-knowledge proof technology—while minimizing reliance on external trust mechanisms.

What Is Citrea's ZK Rollup?

Citrea's ZK Rollup is an off-chain execution architecture built on top of Bitcoin. Its core objective is to increase network throughput and provide Smart Contract capabilities for BTC without altering Bitcoin's consensus rules.

In a traditional Bitcoin network, every transaction must be written directly to the main chain, which limits scalability. In the Rollup model, a large number of transactions are executed first in Layer2, and then compressed state proofs are submitted to the main chain.

Citrea uses a Type-2 zkEVM as its execution environment, allowing Ethereum developers to migrate Solidity contracts and existing DeFi applications. At the same time, Citrea uses Bitcoin as both the data availability (DA) layer and the final settlement layer, verifying state correctness through BitVM.

This design makes Citrea not only a scaling network but also the underlying infrastructure for BTCFi.

How Do User Transactions Enter the Citrea Network?

When a user conducts a transaction in Citrea—such as a transfer, DEX trade, or lending operation—the transaction does not enter the Bitcoin main chain directly. Instead, it is sent to Citrea's Layer2 network.

The Sequencer receives and orders these transactions, then packages them into the zkEVM execution environment. All Smart Contract logic, state updates, and DeFi operations are completed in Layer2.

Compared to executing directly on Bitcoin, this approach significantly improves throughput and reduces on-chain costs.

The overall process is similar to how Ethereum Rollups operate, but Citrea places greater emphasis on the final state needing to return to Bitcoin for security verification.

What Role Does zkEVM Play in Citrea?

zkEVM is the core execution layer of Citrea.

Its primary function is to be compatible with Ethereum's smart contract ecosystem, allowing Solidity developers to deploy applications in Bitcoin Layer2 without completely rewriting code logic.

Citrea uses a Type-2 zkEVM, which means most Ethereum tools are compatible, Solidity contracts can be migrated, DeFi applications can be integrated more easily, and the learning curve for developers is reduced.

The zkEVM also records transaction state changes and provides the underlying data for subsequent ZK Proof generation.

This structure enables Citrea to rapidly adopt the existing Ethereum DeFi ecosystem and drive the expansion of the BTCFi market.

How Are ZK Proofs Generated?

After transaction execution is completed, Citrea compresses a large number of state updates to generate a zero-knowledge proof (ZK Proof).

The core function of a ZK Proof is to prove to Bitcoin that these transactions have been executed correctly according to the rules, without requiring Bitcoin to recalculate all transaction processes.

Throughout this process, the Prover node aggregates transactions, computes state changes, generates the final proof data, and then submits it to Bitcoin.

Because ZK Proofs can directly prove that "the computation is correct," the Rollup can significantly increase transaction throughput while maintaining security.

How Does Citrea Submit Data to Bitcoin?

After generating the ZK Proof, Citrea submits the state data and proof to Bitcoin.

Here, Bitcoin is not responsible for executing transactions but primarily serves for data availability storage, final state confirmation, and security settlement.

Citrea chooses Bitcoin as the Data Availability (DA) layer, meaning that transaction-related data will ultimately return to the Bitcoin main chain.

Compared to relying on an external DA network, this approach minimizes additional trust assumptions. However, due to Bitcoin's limited block space, managing data costs and compression efficiency has become one of the key challenges for Bitcoin Rollups.

How Does BitVM Verify Rollup State?

BitVM is a key component of Citrea's architecture. Its goal is to enable complex off-chain computation verification without modifying Bitcoin's consensus rules.

In Citrea, BitVM verifies whether the state proof submitted by the Rollup is correct.

Simply put, Layer2 first executes transactions, then the Prover generates a ZK Proof, and BitVM verifies the proof, with Bitcoin ultimately confirming the state.

Compared to the multi-signature bridges and federation verification mechanisms commonly used in traditional sidechains, BitVM emphasizes allowing Bitcoin itself to participate in the verification logic.

This means Citrea aims to minimize the risks associated with custodial bridges, centralized verifier reliance, and external security committees.

However, BitVM is still a relatively new technological approach, and its long-term verification efficiency and large-scale operational capability are still under market observation.

How Does Citrea Differ from Optimistic Rollup?

Citrea uses ZK Rollup, not Optimistic Rollup.

The biggest difference between the two lies in how state verification is performed.

Optimistic Rollup assumes transactions are valid by default and only performs Fraud Proof verification if a dispute arises during the challenge period. ZK Rollup, on the other hand, directly submits a Validity Proof to demonstrate that transactions have been executed correctly.

Citrea chose ZK Rollup primarily because it is better suited for an architecture that emphasizes "Bitcoin's ultimate security."

Why Is Bitcoin DA Important?

Data Availability determines whether users can verify the network state and recover transaction data.

By using Bitcoin as the DA layer, Citrea ensures that Rollup data is ultimately stored in the Bitcoin network.

This design means that state data does not rely entirely on external systems, Bitcoin can participate in final security confirmation, and the Rollup is closer to a "Bitcoin-native" structure.

For Bitcoin Rollups, DA layer security is a critical factor in determining long-term credibility. Therefore, Citrea emphasizes Bitcoin DA rather than relying entirely on independent data networks.

Summary

Citrea's ZK Rollup architecture essentially inherits Bitcoin's security while providing Smart Contract and BTCFi capabilities for BTC.

Through zkEVM, ZK Proof, BitVM, and Bitcoin Settlement, Citrea shifts transaction execution to Layer2 and ultimately returns state security to the Bitcoin main chain.

This structure transforms Bitcoin from a mere store of value network into a gradually expanding on-chain financial infrastructure.

However, the Bitcoin Rollup ecosystem is still in its early stages. The verification efficiency of BitVM, DA costs, ZK infrastructure maturity, and BTCFi liquidity scale remain key issues that the market continues to monitor.

FAQs

What role does zkEVM play in Citrea?

zkEVM is Citrea's execution layer, used to run Solidity Smart Contracts and DeFi applications.

Why is BitVM important?

BitVM enables Rollup state verification without modifying Bitcoin's consensus rules.

Why does Citrea use Bitcoin as the DA layer?

Citrea aims to return ultimate security and data availability to the Bitcoin main chain, thereby reducing external trust assumptions.

Is Citrea a ZK Rollup or an Optimistic Rollup?

Citrea is a ZK Rollup that uses Validity Proof to verify state correctness.

How does Citrea differ from traditional Bitcoin sidechains?

Citrea emphasizes a Bitcoin-native Rollup architecture, while traditional sidechains typically rely on federation verifiers or custodial bridges.

What is the core value of Bitcoin Rollup?

The core goal of Bitcoin Rollup is to improve scalability and on-chain capital efficiency for BTC while inheriting Bitcoin's security.