Launching MoonPay Enterprise: Stablecoin APIs for developers → Learn More

MoonPay
  • Individuals
  • Business
  • Language
  • Get Started
Buy
Buy cryptoUse a card, Apple Pay or Google Pay to buy crypto fast. We also accept bank transfers and wires.
Buy BitcoinBTC
Buy EthereumETH
Buy PolygonPOL
Buy SolanaSOL
Buy DogecoinDOGE
Buy CardanoADA
Buy AvalancheAVAX
Sell
Sell cryptoTurn your crypto into cash. In a flash. Get paid straight to your bank account or Visa card.
Sell BitcoinBTC
Sell EthereumETH
Sell USDCUSDC
Sell SolanaSOL
Sell CardanoADA
Sell DogecoinDOGE
Sell AvalancheAVAX
Trade
Trade cryptoTrade between tokens, even if they’re on different chains (we make bridging seamless too).
Trade EthereumETH
Trade USDCUSDC
Trade AaveAAVE
Trade ChainlinkLINK
Trade Wrapped BitcoinWBTC
Trade DaiDAI
Trade CompoundCOMP
Company
NewsroomNewsroomMediaMediaCareersCareersChangelogChangelogMoonPay DiscoverMoonPay DiscoverNew
Crypto Prices
Bitcoin PriceEthereum PriceSolana PriceDogecoin PriceCardano PriceXRP PriceBNB PriceAll Crypto Prices
Learn
What is Blockchain?What is Blockchain?What are NFTs?What are NFTs?What is Bitcoin mining?What is Bitcoin mining?What is DeFi?What is DeFi?What is crypto staking?What is crypto staking?All Learn Articles
Support
DocumentationDocumentationHelp CenterHelp CenterContact UsContact UsStatusStatus
  • Language
  • All rights reserved. MoonPay USA LLC is a registered money service business (NMLS ID: 2071245). For Law Enforcement requests please direct your official document to our compliance team here.

    English (Canada)
    • Personal
    • Buy Crypto
    • Sell Crypto
    • Trade Crypto
    • Learn about Crypto
    • Crypto Price
    • MoonAgentsNew!
    • Business
    • Ramps
    • Virtual AccountsNew!
    • MoonPay Discover
    • MoonPay Commerce
    • MoonPay InstitutionalNew!
    • Company
    • About Us
    • CareersWe're hiring
    • Newsroom
    • Media
    • Changelog
    • Support
    • API Docs
    • Help Center
    • Contact Us
    • Status
    • Security
    • Buy
    • Buy Bitcoin
    • Buy Ethereum
    • Buy Solana
    • Buy Cardano
    • Sell
    • Sell Bitcoin
    • Sell Ethereum
    • Sell XRP
    • Sell Solana
    • Trade
    • Trade Ethereum
    • Trade SOL
    • Trade Aave
    • Trade Chainlink
    • Crypto Prices
    • Bitcoin Price
    • Ethereum Price
    • Dogecoin Price
    • XRP Price
    • Cardano Price
    • Learn
    • What is Blockchain?
    • What are NFTs?
    • What is Bitcoin mining?
    • What is DeFi?
    • What is crypto staking?
    • Legal
    • Licenses
    • Privacy Policy
    • Cookie Policy
    • Terms of Use
    English (Canada)

    All rights reserved. MoonPay USA LLC is a registered money service business (NMLS ID: 2071245). For Law Enforcement requests please direct your official document to our compliance team here.

    Back to all articles

    What are ZK-Rollups? How Zero-Knowledge Rollups work

    As blockchain networks grow, they need to accommodate an exponentially growing number of users and transactions. With this comes the requirement of accounting for scalability, without compromising security.

    Corey Barchat

    By Corey Barchat

    Published on May 2, 2025

    Last modified on Oct 17, 2025

    blockchainguidecryptocurrency
    1. 1.What is a ZK-Rollup?
    2. 2.How do ZK-Rollups work?
    3. 3.Benefits of ZK Rollups
    4. 4.Limitations of ZK-Rollups
    5. 5.Examples of ZK-Rollups
    6. 6.ZK Rollups vs Optimistic Rollups
    7. 7.Access ZK-Rollups Today

    As blockchain networks grow, they need to accommodate an exponentially growing number of users and transactions. With this comes the requirement of accounting for scalability, without compromising security.

    To do this, innovative solutions become necessary. One such solution gaining traction is blockchain rollups, which to date account for billions of dollars in total value locked (TVL) across dozens of blockchains.

    While Optimistic Rollups are by far the most popular type, ZK-Rollups provide a distinct alternative in how they approach off-chain processing.

    But what exactly are ZK-Rollups and what sets them apart from other Layer-2 scaling solution options?

    In this article, we dive into what ZK-Rollups are, how they work, their benefits, limitations, and use cases.

    What is a ZK-Rollup?

    ZK-Rollups, or Zero-Knowledge Rollups, are a type of blockchain rollup that use zero-knowledge proofs to ensure the validity of batched transactions. ZK-Rollups process multiple transactions off-chain and convert them into a cryptographic proof (a "zero-knowledge proof") that is submitted to the main blockchain.

    This type of Layer-2 scaling solution is designed to enhance the throughput of blockchain networks while maintaining high levels of security and decentralization. Since ZK-Rollups process transaction batches instead of individual transactions, they can significantly reduce the computational load on the main chain while preserving the integrity and trustless nature of the system.

    A definition of ZK-Rollups

    ZK-Rollups are particularly popular in applications that require greater privacy and security, including decentralized finance (DeFi) and gaming. Although ZK-Rollups are resource-intensive due to the number of cryptographic computations involved, they offer a robust and secure scaling solution for blockchains.

    How do ZK-Rollups work?

    In general, blockchain rollups aggregate transactions into a single succinct proof that is then submitted to the main chain for verification. But what are ZK proofs and how do they function?

    Let's examine how ZK-rollups work, step by step.

    Step 1: Transaction Aggregation

    ZK-Rollups begin by aggregating multiple transactions off-chain into a single transaction data structure, typically referred to as a "rollup". This aggregation process helps reduce the amount of data that needs to be processed on the main blockchain, in an attempt to improve its scalability.

    Step 2: Zero-Knowledge (ZK) Proofs

    Once the transactions are aggregated, a zero-knowledge (ZK) proof is generated to validate the correctness of these transactions without revealing any sensitive information. ZK proofs are unique in that they allow for the verification of the validity of transactions without the need to inspect their contents, preserving transaction data privacy while ensuring integrity.

    Step 3: Data Availability

    While the transaction data itself is aggregated off-chain, system integrity requirements stipulate that this data remains available and accessible. To achieve this, zero-knowledge rollups typically utilize techniques such as data availability checks and decentralized storage solutions to ensure that the necessary information is retrievable by all participants.

    Step 4: Submission to Main Chain

    After generating the ZK proof and ensuring data availability, the aggregated transaction data along with the validity proof is submitted to the main blockchain for verification. This submission is typically done by a designated entity known as the aggregator or operator, who collects ZK-rollup transactions, generates validity proofs, and interacts with the main chain on behalf of the users.

    Step 5: Verification and Finality

    Upon receiving the aggregated data and validity proof, the main blockchain verifies valid transactions using the zero-knowledge proof. Once proof verification is complete, the transactions are considered finalized and included in the blockchain's ledger, effectively settling the off-chain transactions. This finality serves to provide users with confidence in the integrity and security of their transactions without the need for on-chain validation of each individual transaction.

    A flow chart of the ZK-Rollup process
    The ZK-Rollup Process

    Smart Contract Interaction

    In many cases, a ZK-Rollup will also support the execution of smart contracts, which are self-executing agreements with the terms directly written into code. Smart contract interactions within ZK-Rollups can facilitate a wide range of functionalities, including token swaps and transfers, decentralized exchange (DEX) operations, and other decentralized application (dApp) use cases.

    Benefits of ZK Rollups

    With their unique ZK proofs, Zero-Knowledge Rollups provide several advantages over other Layer-2 scaling solutions.

    1) Scalability

    By moving most of the transaction processing off-chain, ZK-Rollups significantly increase blockchain scalability and transaction throughput. This enables blockchains to handle a larger number of transactions per second, without sacrificing decentralization or security.

    2) Reduced costs

    Since ZK-Rollups aggregate transactions off-chain and submit only the necessary validity proofs to the main blockchain, the result is a drastic reduction in transaction fees for users. An additional side effect is that this cost efficiency makes decentralized applications (dApps) more accessible and affordable for a broader range of users and developers.

    3) Increased security

    Although they process transactions off-chain, ZK-Rollups attempt to maintain the security guarantees of the underlying blockchain through cryptographic proofs and data availability mechanisms. This anchoring of transaction data to the main chain, combined with advanced cryptographic techniques, allows ZK-Rollups to provide robust security against fraud and tampering, and greater system integrity.

    4) Enhanced privacy

    The zero-knowledge proofs utilized in ZK-Rollups ensure that sensitive transaction details remain private while still being verifiable by the blockchain network. This enhanced privacy protection is particularly beneficial for applications dealing with sensitive financial or personal data, as it helps mitigate the risk of unauthorized access or exploitation.

    5) Blockchain interoperability

    ZK-Rollups can be implemented across various blockchain networks, enabling interoperability between different decentralized platforms. This intercommunication allows for seamless exchange and transfer of assets between disparate blockchain ecosystems, encouraging greater collaboration and innovation in the broader Web3 space.

    Limitations of ZK-Rollups

    Despite their innovative approach to scaling blockchain networks, ZK-Rollups are not without their challenges and constraints, which warrant careful consideration for developers and users alike.

    1) Technical expertise

    Implementing ZK-Rollups requires a deep understanding of cryptographic protocols and off-chain computation techniques. This can pose a barrier to entry for developers, especially ones with lesser experience.

    2) Setup costs

    Setting up the infrastructure for ZK-Rollups may require significant upfront investment in terms of time, resources, and expertise. This includes establishing off-chain computation environments, integrating with existing blockchain networks, and ensuring the availability of data.

    3) Data availability

    While ZK-Rollups provide strong security guarantees through cryptographic proofs, ensuring the availability of off-chain data remains a challenge in some scenarios. Failure to maintain adequate data availability can undermine the integrity and trustworthiness of the system, potentially leading to security vulnerabilities, exploitation, and mistrust that could hinder adoption.

    4) Security trade-offs

    While ZK-Rollups offer enhanced privacy and scalability, they may require more complex cryptographic computations. Depending on the implementation and configuration, ZK-Rollups could also potentially increase the attack surface or introduce new vulnerabilities, such as the risk of collusion among validators.

    5) Potential centralization

    Depending on the design and governance structure of ZK-Rollup solutions, there may be inherent centralization risks associated with the role of aggregators or operators responsible for transaction processing and submission to the main chain.

    Examples of ZK-Rollups

    Let's explore some real world implementations of ZK-Rollups in the digital economy.

    zkSync

    zkSync logo

    Developed by Matter Labs, ZKSync employs zero-knowledge proofs to significantly enhance Ethereum scalability, facilitating high throughput and low transaction costs for decentralized applications. Its architecture enables efficient token transfers and smart contract interactions for DeFi projects and NFT platforms.

    StarkNet

    StarkNet logo

    Utilizing StarkWare's StarkEx technology, StarkNet implements ZK-Rollups to bolster scalability on the Ethereum blockchain by processing large batches of transactions off-chain. It is commonly used as a scaling solution for decentralized finance protocols and decentralized applications.

    Loopring

    Loopring logo

    Loopring is a decentralized exchange protocol that utilizes ZK-Rollups to increase the scalability and privacy of its trading platform. It hopes to enhance throughput of the Ethereum blockchain and reduce transaction costs to offer higher performance, liquidity, and security for traders and liquidity providers.

    Polygon zkEVM

    Polygon zkEVM logo

    Developed by Polygon (formerly Matic Network), Polygon zkEVM integrates ZK-Rollups into the Ethereum Virtual Machine (EVM), enabling efficient scaling solutions for Ethereum-compatible decentralized applications (dApps) and smart contracts. Its aim is to preserve interoperability with the broader ecosystem of the Ethereum network while ensuring high security standards for user transactions and data.

    Mantle

    Mantle logo

    Mantle is building the future of decentralized finance with a focus on scalability, security, and capital efficiency. Now transitioning from an Optimistic Rollup to a Zero-Knowledge validity rollup through integration with Succinct’s SP1, Mantle delivers 1-hour finality, improved liquidity, and enhanced user experience. With modular architecture, EigenDA-powered data availability, and institutional-grade settlement capabilities, Mantle seeks to redefine what’s possible for builders, users, and on-chain finance.

    Linea

    Linea logo

    Linea, built by Ethereum core developers and backed by Consensys, is a high-performance ZK-rollup delivering speed at scale with low costs. Linea is focused on exceptional user and builder experiences and has integrations with leading Ethereum wallets like MetaMask. It offers cutting-edge tools, security, digital identity, and payment innovations—empowering developers to build powerful, scalable dApps with ease.

    ZK Rollups vs Optimistic Rollups

    Although ZK-Rollups and Optimistic Rollups are both common blockchain rollup types, there are some key differences between them:

    Feature

    ZK-Rollups

    Optimistic Rollups

    Transaction Speed

    Fast transaction validation using cryptographic proofs

    Faster than main chain but with delay for challenge periods

    Security

    High due to zero-knowledge proofs

    Moderate with challenge-based security

    Privacy

    Enhanced privacy with zero-knowledge proofs

    Limited privacy

    Resource Usage

    High due to cryptographic computations

    Lower resource usage

    Compatibility

    Compatible with smart contracts, but may require adjustments

    Compatible with smart contracts and existing tools

    Challenge Mechanism

    Not required

    Challenge period allows dispute resolution

    Access ZK-Rollups Today

    To fully experience ZK-Rollups for yourself, it helps to acquire the proper cryptocurrency first.

    MoonPay makes it easy to buy crypto that can be used for ZK-Rollups like Loopring (LRC), Ethereum (zkSync), and USDC (zkSync). Pay your way using a credit card, bank transfer, Apple Pay, Google Pay, and many other payment methods. 

    Note: Users in Canada are prohibited from purchasing Dai (zkSync), Tether (zkSync), and USDC (zkSync), while USDC (zkSync) is unavailable for customers in New York and Texas.

    You might also like

    guide+2
    embedded wallets end of seed phrases

    Embedded Wallets and The End of Seed Phrases

    For most of crypto's history, the price of admission was a ritual: write down 12 words, in order, on something that can't catch fire or get wet, and guard them for the rest of your life. Get it right and you're your own bank. Get it wrong o

    cryptocurrency+2
    Accepting Crypto Payments

    How to Accept Crypto Payments: Checkout, Settlement & Merchant Setup

    A customer just bought a $100 hoodie from your online store and paid in crypto. Quick question: where is that $100 right now?

    cryptocurrency+2
    chain abstraction explained

    Chain Abstraction Is the Next Step After Bridges and Network Switching

    Somewhere in your wallet right now there is probably money you can't easily spend. Not lost, not stolen. Just on the wrong network. USDC on Arbitrum when the app you want takes USDC on Base. ETH on mainnet when the game you're playing lives

    bitcoin+2
    crypto in prediction markets

    How Prediction Markets Work (and Where Crypto Fits In)

    A prediction market is a place where people put money on what happens next. Will the Fed cut rates in September? Will Bitcoin close the year above $150,000? Each question becomes a contract you can buy and sell, and the price of that contra

    cryptocurrency+2
    What is an MPC wallet? Benefits, Tradeoffs & Use Cases

    What is an MPC wallet? Benefits, Tradeoffs & Use Cases

    An MPC wallet is a crypto wallet that never stores your private key in one piece. The key is split into encrypted shares held in different places, and signing a transaction combines those shares without ever rebuilding the whole key. That d

    security+2
    Wallet as a Service (WaaS)

    What Builders Need to Know About Wallet as a Service (WaaS)

    You want to add a crypto wallet to your product. You start researching and hit three terms that all overlap: white-label wallets, embedded wallets, and wallet as a service. Marketing pages from infrastructure providers blur the lines. Most