A rollup is a network that processes crypto transactions away from the main Ethereum blockchain and then posts a compressed record of those transactions back to Ethereum, so it inherits Ethereum's security while charging far less per transaction. Two designs exist, optimistic and zero-knowledge, and they prove that record is honest in different ways. Neither design makes a rollup risk-free.
Rollups exist because Ethereum's base layer, often called Mainnet or layer 1, can only process a limited number of transactions before fees rise. According to Ethereum.org's documentation on layer 2 rollups, rollups "perform transaction execution outside layer 1 and then the data is posted to layer 1 where consensus is reached," which lets the network inherit Mainnet's security guarantees without every transaction competing for Mainnet's limited block space.
What does a rollup actually do with a transaction?
A rollup operator collects many users' transactions, executes them off-chain, and bundles the results into a single batch. That batch, not each individual transaction, is what gets posted to Ethereum. Ethereum.org's documentation describes the effect directly: "transactions are rolled up into a single transaction to Mainnet Ethereum, reducing gas fees for users." Because hundreds of transactions can share the cost of one Ethereum-layer submission, the price each user pays drops sharply compared with transacting on Mainnet directly.
Think of it like a delivery van that waits to fill up with packages before making one trip across town instead of driving each package separately — the analogy breaks down because the "van," in a rollup, still has to prove to Ethereum that every package inside actually belongs there and wasn't tampered with. That proof step is where optimistic and zero-knowledge rollups diverge.
How do optimistic rollups prove their batches are honest?
An optimistic rollup assumes a batch of transactions is valid the moment it's posted, then gives anyone a window of time to challenge it if they think it's wrong. Per Ethereum.org's optimistic rollups documentation, "optimistic rollups execute transactions outside of Ethereum, but post transaction data to Mainnet as calldata or in blobs," and the system relies on fraud proofs rather than upfront cryptographic verification. If a challenger disputes a batch, the network runs an interactive "bisection protocol" that narrows the dispute down until "both parties are disputing an assertion about a single step of execution" that Ethereum itself can check and settle.
This design is lean by construction: Ethereum.org states that "the validity of the chain relies on the existence of one honest node" willing to catch and challenge fraud. The trade-off is time. Users who want to withdraw funds from an optimistic rollup back to Ethereum "must wait for the one-week challenge period to expire," according to the documentation, because the network needs to leave room for a challenge to surface. Some services front users the money and collect a fee to skip that wait, but the underlying protocol delay is real and it's the main practical downside of this design.
How do zero-knowledge rollups prove their batches are honest?
A zero-knowledge, or "zk," rollup takes a different approach: instead of assuming a batch is correct and waiting to see if anyone objects, the operator generates a cryptographic validity proof showing the batch is correct before it's ever posted to Ethereum. Ethereum.org's zero-knowledge rollups documentation explains that these proofs let "parties to prove the correctness of a statement without revealing the statement itself," using one of two proof systems: ZK-SNARKs, which are smaller and faster to verify but require a trusted setup process, or ZK-STARKs, which don't need that trusted setup and are considered more resistant to future quantum computers, but produce larger proofs.
Because the proof itself is the evidence of correctness, there's no need for a challenge window. "There are no delays when moving funds from a ZK-rollup to Ethereum because exit transactions are executed once the ZK-rollup contract verifies the validity proof," the documentation states. That's the headline advantage over optimistic rollups. The trade-off shows up elsewhere: computing those proofs is computationally expensive, which "can increase fees for rollup users," and the specialized hardware some operators use to generate proofs faster raises questions about how many entities can realistically run that infrastructure.
Optimistic vs. zero-knowledge rollups: what's the real difference?
| Factor | Optimistic rollups | Zero-knowledge rollups |
|---|---|---|
| How correctness is shown | Assumed valid; fraud proofs only if challenged | Cryptographic validity proof submitted with every batch |
| Withdrawal to Ethereum | One-week challenge period, per Ethereum.org | No delay once the proof is verified |
| Where the extra cost falls | Withdrawal friction and reliance on active challengers | Proof generation, which can raise operator and user fees |
| Trust assumption | At least one honest node willing to challenge fraud | Correctness of the underlying cryptography and proof system |
Why does batching transactions actually lower fees?
Ethereum charges gas fees based partly on how much data a transaction adds to the chain and how much competition there is for block space. A rollup's entire value proposition rests on spreading that cost across many users at once rather than each person paying for their own slot. Ethereum.org's documentation points to "Danksharding" as the mechanism that made this cheaper still, describing it as a system that adds "blobs of rollup data to Ethereum blocks that can be very efficiently verified by validators" — a dedicated, lower-cost lane for the compressed data rollups need to post, separate from the space regular Mainnet transactions compete for.
This is a protocol-level mechanism, not a promise from any single rollup network, and it's worth remembering that fees on any given rollup can still move with Ethereum's own gas prices, since rollups still have to pay to post data to Mainnet. A rollup that's cheap today isn't guaranteed to stay that way if Ethereum's base fees rise.
Is using a rollup as safe as using Ethereum directly?
Not automatically, and self-custody principles still apply in full. A rollup's security ultimately depends on Ethereum settling disputes correctly, but it also depends on the specific rollup's own design choices: how centralized its operator (often called a "sequencer") is, whether its bridge contracts have been audited, and whether users understand the withdrawal delay or proof-verification process before they need to use it. None of this is investment advice, and using a rollup is not risk-free simply because it settles to Ethereum — bridge contracts, sequencers, and smart contracts on any given rollup can still fail or be exploited independently of Ethereum's own security.
What is layer 2, and how does it relate to rollups?
"Layer 2" is the umbrella term for networks like rollups that build on top of Ethereum, or "layer 1," to add capacity without changing Ethereum's own base rules. Rollups are the dominant layer 2 design in use today because they post their data to Ethereum and inherit its security, rather than relying on a separate, independent security model.
Frequently asked questions
Do I need a different wallet to use a rollup?
Usually not. Most rollups are compatible with the same wallet software used on Ethereum Mainnet, but you do need to manually add or switch to the rollup's network inside your wallet, and double-check you're sending funds to the correct network before transacting.
Can a rollup transaction be reversed once it's posted to Ethereum?
Once a batch is finalized on Ethereum, it's as difficult to reverse as any other Ethereum transaction. On an optimistic rollup, a fraudulent transaction can still be challenged and reversed during the one-week challenge window, per Ethereum.org's documentation, but not after that window closes.
Why do some rollups still charge noticeable fees?
Even after batching, a rollup still pays Ethereum to post its data, and, for zero-knowledge rollups, still pays the computational cost of generating validity proofs. Both costs get passed to users, so fees can rise when Ethereum's own gas prices rise or when proof generation is expensive.
For a related assets perspective, read What is a spot bitcoin ETF, and how does it work?.
For more context, read How Bitcoin Transactions Move From Wallet to Block.
