Why Litecoin Needs a Rollup

A rollup is not a second blockchain bolted onto the first. It is a way of doing computation somewhere cheap while keeping the right to be correct anchored somewhere expensive. Once that distinction is clear, most of LitVM's design choices stop looking arbitrary.

The problem rollups actually solve

Every node on a base chain re-executes every transaction. That is what makes the chain trustworthy, and it is also what caps its throughput. Litecoin manages roughly 56 transactions per second. Ethereum manages around 15. Neither number moves much, because raising it means asking every participant to do more work, which pushes out smaller operators and centralises the network.

A rollup breaks the link between executing transactions and securing them:

1. 01

   Execute off chain

   A sequencer collects transactions and runs them in a fast environment that only it needs to execute. Thousands per second is routine here.

2. 02

   Compress and post

   Batches of transactions, or a commitment to them, are published so anyone can reconstruct the rollup's state independently.

3. 03

   Prove correctness

   The rollup convinces the base chain that its state transition was valid. How it does this is the single decision that defines the rollup family.

Step three is where the two schools diverge.

Optimistic rollups: guilty until challenged

An optimistic rollup posts its new state root and asserts, without proof, that it is correct. Anyone may dispute it within a challenge window, typically seven days. A dispute triggers an interactive fraud proof: the challenger and the proposer bisect the disputed computation until they isolate a single instruction, which the base chain executes directly and cheaply to settle who was lying.

• Strength. Execution is fast and cheap because in the happy path no cryptographic proof is generated at all.
• Weakness. Withdrawals must wait out the challenge window. Seven days is a long time to have capital in limbo.

Arbitrum Nitro is the mature implementation of this design, and it is what LitVM uses for execution.

Validity rollups: prove it up front

A validity rollup, usually called a zkRollup, generates a cryptographic proof that the batch was executed correctly according to the rules. The base chain verifies the proof. There is nothing to dispute, so there is no challenge window.

• Strength. Finality arrives as soon as the proof verifies, in minutes. Withdrawals are not delayed.
• Weakness. Proving is computationally expensive, and building a prover for a full EVM is genuinely hard engineering.

LitVM takes both

LitVM does not pick a side. It runs Arbitrum Nitro for optimistic execution and generates validity proofs with Succinct's SP1 zkVM over that execution.

The practical result: users get the responsiveness of an optimistic rollup and the finality of a validity rollup, with fraud proofs still sitting underneath as a second line of defence.

Data availability: the part everyone forgets

A proof that a state transition was valid is useless if nobody can reconstruct the state. If the sequencer vanishes with the transaction data, users cannot prove what they own, and the chain is effectively lost even though every proof verified.

This is the data availability problem, and it is where rollups make their real trust tradeoffs.

• Full rollup mode posts all transaction data to the base chain. Maximum security, maximum cost.
• AnyTrust and similar committee modes post data to a committee of nodes that sign an attestation, falling back to the base chain if the committee fails to produce data. Much cheaper, with an added honesty assumption about the committee.

The LiteForge testnet runs in AnyTrust mode. That is a deliberate and normal choice for a testnet, and it is the kind of parameter worth checking on any chain that calls itself a rollup.

Why Litecoin specifically

The general case for rollups is now well established. The specific case for Litecoin has three parts.

The base layer is already good at what a settlement layer must do. Fourteen years of uninterrupted proof of work, a widely distributed Scrypt mining base, 2.5 minute blocks that confirm faster than Bitcoin's ten. Settlement layers are judged on boring reliability, and Litecoin has a long record of it.

The asset has real monetary demand and no productive use. Billions of dollars of LTC sits idle because there is nothing on chain to do with it. A rollup does not need to invent demand for its base asset. It needs to give existing demand somewhere to go.

Bitcoin proved the pattern works. The Bitcoin layer two ecosystem showed that a UTXO chain with no smart contracts can still anchor a programmable environment. Litecoin, historically the network that adopts these ideas first, had conspicuously skipped this one.

Hard Money Web3

LitVM's stated position, and the thing that makes it more than a technical exercise, is that programmability should not require abandoning sound money properties.

Most smart contract platforms run on assets whose supply policy is set by governance and whose value derives from the platform itself. LitVM's gas token is zkLTC, backed one to one by real LTC locked on the Litecoin mainchain. Paying for computation means spending an asset whose issuance schedule nobody on the rollup controls.

That is the whole argument in one sentence: keep the money hard, make the computation programmable, and do not let the second compromise the first.

What to remember

• 01A rollup separates executing transactions from securing them, which is how it escapes base layer throughput limits.
• 02Optimistic rollups assume correctness and rely on a challenge window, typically seven days, to catch fraud.
• 03Validity rollups prove correctness cryptographically up front, so finality arrives in minutes.
• 04LitVM runs both: Arbitrum Nitro for execution and Succinct SP1 for validity proofs, at roughly $0.01 to $0.02 per transaction in proving cost.
• 05Data availability decides whether users can reconstruct state if the operator disappears. LiteForge testnet uses AnyTrust.
• 06The Litecoin case rests on a proven settlement layer, a large idle asset base, and a pattern Bitcoin already validated.
• 07Hard Money Web3 means gas is paid in an asset backed one to one by LTC, not in a token the rollup itself issues.

Primary sources

• LitVM Litepaper V1.2, sections 1.2 and 3.1
• Hard Money Web3: A Manifesto
• LitVM Docs: Architecture
• Arbitrum Docs: Inside Nitro

Ready for the Anvil?

Ten questions on this module. Answer 8 correctly and the badge unlocks. You can retake it as often as you like.

Take the quiz