Bitcoin research expands on design space for smart contracts

BitVM paper shows how Bitcoin can anchor off-chain smart contracts, but with caveats


Africa Studio/Shutterstock modified by Blockworks


The most popular smart contract solutions in crypto are based on Ethereum, which provides a decentralized Turing-complete virtual machine.

Bitcoin’s primary use case is as a store of value — digital gold — and, to a lesser extent, for payments, exemplified by the Lightning Network.

But new research shows how Taproot, Bitcoin’s 2021 scripting upgrade, can dramatically increase the theoretical capabilities of the chain, potentially making it far more useful, even with no additional changes.

A paper published by Robin Linus, whose non-profit ZeroSync recently completed a key component of a future zero-knowledge light client for Bitcoin, describes a so-called “BitVM” — which can be read as “Bitcoin Virtual Machine.”

Loading Tweet..

It’s essential to note that, unlike the Ethereum Virtual Machine (EVM), BitVM doesn’t execute computations on-chain but rather verifies them, similar to optimistic rollups.

As might be expected, Bitcoiners have been all a-twitter on the platform formerly known as…let’s just call it X.

“This is probably the most exciting discovery in the history of bitcoin script,” said Super Testnet, a pseudonymous software developer who reviewed the paper.

Eric Wall said he’s “cautiously excited, waiting for what the real-world experiments will yield.”

The key innovation is that Bitcoin “is able to be the trusted third party for an arbitrary [Turing] complete computation despite the fact bitcoin script is not able to actually execute it,” according to the helpful explainer from software engineer Gregor Pogačnik.

Despite the theoretical implications, Pogačnik doesn’t believe Ethereum-like smart contracts are feasible.

“I believe this is quite cumbersome and likely not even the primary design goal,” he said.

What’s novel is that it could, and all without requiring any changes to Bitcoin’s core software — no forks required. 

An early practical application of the technology could be to decentralize the oracles for Discreet Log Contracts (DLCs), according to Bob Bodily, CEO Bioniq, an ordinals marketplace.

DLCs are a type of smart contract for Bitcoin that allows two parties to create bets or derivatives without requiring a trusted third party.

BitVM could enhance the functionality, security, and versatility of DLC oracles by providing mechanisms for on-chain verification of oracle data, making them fully trustless.

Not a panacea

There are limitations. BitVM is limited to two specific participants — a prover and a verifier — although there may be workarounds

By contrast, Ethereum’s smart contracts can involve multiple parties and can be executed by any user, making Ethereum more versatile for multi-party applications.

Off-chain computation could lead to increased latency and complexity too.

Imagine you wanted to have the Bitcoin network enforce the rules of a chess game, for instance. If a given move requires an on-chain transaction (e.g., to resolve a dispute over its legality), then the players become subject to Bitcoin network’s 10-minute average block confirmation time.

You can forget about blitz or rapid games, but such a system might be suitable for correspondence chess, where moves can be exchanged over days and chess engine use is de rigueur.

So, while BitVM introduces an innovative approach to bring Turing-complete contracts to Bitcoin, practical limitations may prove to undermine its utility.

Even Blockstream CEO Adam Back was unimpressed, analogizing BitVM to 7-year-old research from Greg Maxwell during his tenure as Blockstream’s technology chief.

Linus responded that Back may have missed a few key differences that set BitVM apart.

Loading Tweet..

There also remains some debate over whether BitVM solves the problem of trustless bitcoin (BTC) bridging for sidechains. Bioniq’s Bodily and others have doubts, but further research will make that clear. 

Ethereum remains a more comprehensive platform for general-purpose smart contract development and execution. However, BitVM’s approach could be valuable for specific use cases or for those who prioritize Bitcoin’s security and decentralization properties.

A Telegram group set up today anyone interested in BitVM has already attracted several hundred members. One commenter fairly succinctly summed up the importance of the concept:

“Doesn’t require any change to bitcoin, but lots of work to make useful things with it.”

Don’t miss the next big story – join our free daily newsletter.


Upcoming Events

Hilton Metropole | 225 Edgware Rd, London

Mon - Wed, March 18 - 20, 2024

Crypto’s premier institutional conference returns to London in March 2024. The DAS: London Experience: Attend expert-led panel discussions and fireside chats Hear the latest developments regarding the crypto and digital asset regulatory environment directly from policymakers and experts.

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Top Icon.png


Osmosis thrived in H2 2023 on the back of increased DeFi activity deriving from recently launched Cosmos-related projects and better market conditions. With new value accrual mechanisms for the native token, Osmosis is well-positioned to continue its strong performance in 2024.



Though the opposing flow trend is likely to slow over time, industry watchers note, bitcoin fund assets could one day eclipse the $90 billion gold ETF space


Celestia had the first mover advantage. EigenDA has staked ether. What sets Avail apart?


Bitcoin moved 1% higher Monday morning in New York, Matrixport analysts say $62,000 could happen next month


It’s hard to believe right now that crypto — even with all of its flexibility and massive capabilities — could ever be like cash on the internet


Michael Saylor announced Monday morning that MicroStrategy bought 3k more bitcoin after the X account was compromised over the weekend


Plus, Pudgy Penguins grows its brand and a group of Autoglyphs sell for $14.5 million