Zero-knowledge Rollups Get Cheaper With Scale

As the race to deploy zero-knowledge technology heightens, we look into how zk rollups will make transactions more affordable


Africa Studio/Shutterstock modified by Blockworks


Ethereum scaling with zero-knowledge (zk) proof technology has rapidly moved from theory to functioning public mainnet, with dueling zero-knowledge Ethereum Virtual Machines (zkEVMs) from Matter Labs and Polygon launching in the past week.

Soon to follow will be ConsenSys, the Ethereum blockchain infrastructure company, which recently deployed its zkEVM onto an Ethereum testnet.

Zk rollups are considered a breakthrough in crypto technology, as zero-knowledge proofs allow information to be proven to be valid or invalid without revealing the information itself.

On Ethereum layer-2 rollups, this means that transactions can be batched and validated by Ethereum without revealing the specifics involved in the individual transactions on the Ethereum mainnet. 

This type of technology can considerably lower transaction costs by compressing the data, making more efficient use of Ethereum blockspace.

How do zk rollups lower transaction fees?

Zk rollups built on Ethereum offload the computation and execution of smart contracts to a separate layer-2 blockchain built on top of the base layer.

This means that, rather than having the Ethereum mainnet validators process individual transactions, the rollup instead offloads that responsibility to a prover and verifier on the layer-2 network.

“Anyone can download the data and check if it is correct for some period of time,” Blockworks Research said.

Unlike Ethereum mainnet, where more users and more transactions lead to increased gas fees, the costs of writing data to mainnet from a zk rollup in fact decline as the number of users increases since the otherwise fixed cost is divided between all users whose transactions are in a batch, DeFi researcher who goes by the ​​pseudonym Ignas tweeted.

“When there are fewer transactions the fixed cost is distributed among fewer users, leading to higher average gas fees per transaction. As transaction volume increases, the fixed cost gets spread out, and fees drop,” Ignas said.

Mikhail Komarov, founder of zk infrastructure developer =nil; Foundation, agrees, but with a caveat.

“In terms of L-1 transactions, this is true. But a user pays an L-2 fee, not an L-1 fee,” Komarov told Blockworks. “This means a rollup can charge some larger or smaller end-user fee with the only difference of using its own L-2 token for that.”

Current zk rollups, however, do not charge fees in a native token — if they have one — but instead use ether.

What exactly gets posted back to Ethereum mainnet depends on the specifics of the rollup implementation.

For instance, Polygon’s zkEVMs posts full transactions to mainnet, Bartek Kiepuszewski of L2Beat explained on Twitter, Tuesday. By contrast, both zkSync and StarkNet only submit changes in the state of the EVM that occur as a result of those transactions. 

Loading Tweet..

“Right now, we have to differentiate between systems that are EVM-equivalent and EVM-compatible,” Kiepuszewski said at Devcon Bogota, in October 2022. “I think we’re going to see a very interesting competition between systems that try to emulate the EVM as close as possible and systems that will prefer to make sure that the proving is optimized for the particular VM — and in this category I would definitely put zkSync and StarkNet. The competition between these two approaches is will be very interesting to watch.”

Similar to how transactions on layer-1 cost a gas fee, posting data from layer-2 validity proofs also requires a fee. Currently, transactions are posted through ordinary Ethereum “calldata” in a transaction. But this will change under EIP-4844, Blockworks research said. 

“It will be posted to these things called blobs that will have a separate fee market to normal transactions making it cheaper,” Blockworks Research said.

EIP-4844, also known as Proto-Danksharding, will the part of the next major Ethereum upgrade after Shanghai, dubbed Cancun.

“I would say the only thing which can drive down data availability cost is a better compression (proof and circuits ‘quality’),” Komarov said. “The better the compression — the smaller the L-1 [data availability] charge.”

Ultimately, technological and hardware improvements will reduce the costs of data availability further and, over the long run, transaction fees on Ethereum layer-2s using zk proofs will continue to come down, Blockworks Research said.

Updated March 30, 2023 at 12:02 pm ET: Additional comments.

Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.


Upcoming Events

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Screenshot 2024-05-23 091855.png


Bitcoin L2s aim to boost scalability while preserving decentralization and security, unlocking a better user experience, and new avenues for Bitcoin-powered innovations. However, no existing Bitcoin L2 leverages the full security of Bitcoin.



The convergence of AI and blockchain on Polkadot represents a groundbreaking opportunity for investors and developers alike


The company is making public a previously private offer rejected by Bitfarms’ board of directors last month


Semler Scientific, a publicly traded medical tech company, joined MicroStrategy by buying up millions of bitcoin


As someone who’s been knee-deep in the trenches of blockchain development, I can’t help but wonder if these behemoths are really cutting it anymore


UNI and MKR are suffering from the successes of their respective protocols


Maybe there’s no silver bullet to avoiding most tokens dumping after launch…