Bitcoin Layer 2 trends: BitVM rollups and Citrea ZK-rollup growth

The Bitcoin scaling constraint

On January 27, 2026, Citrea’s mainnet posted its first zero-knowledge proof to Bitcoin and verified it through a BitVM2 bridge contract. This event is the first time a general-purpose rollup settled to Bitcoin’s Layer 1 without relying on a federation. While custodial wrappers like WBTC maintain a market cap between $8.9B and $9B as of May 2026, new technologies move the focus toward trust-minimized models. BitVM and BitVM2 allow arbitrary computation to be verified on Bitcoin using existing opcodes and challenge-response games without requiring a soft fork. Bitcoin targets a ten-minute block time and caps each block at roughly 4 million weight units. This ceiling is the price Bitcoin pays so that more than 23,000 globally distributed full nodes can validate every block on consumer hardware. Bitcoin Script is intentionally non-Turing-complete with no loops or unbounded execution. This design prevents the complexity that causes security vulnerabilities. The network reached a milestone on March 10, 2026, when it mined its 20 millionth coin, meaning more than 95% of the 21 million BTC supply is already in circulation.

Citrea and the BitVM2 bridge

Citrea operates as a ZK-rollup that batches thousands of transactions and produces validity proofs that it inscribes on Bitcoin. The Citrea mainnet launch on January 27, 2026, is the first time zero-knowledge proofs have been inscribed and natively verified within the Bitcoin blockchain, allowing for a programmable settlement layer without changing the base protocol. The network uses a Type 2 zkEVM built using RISC Zero, which allows Ethereum developers to deploy Solidity smart contracts without modification. Clementine, the Citrea bridge, uses signers, operators, and watchtowers to manage fund movements via BitVM. The signers form an N-of-N multisig for custody, while operators front-cover user withdrawals and receive reimbursement. Watchtowers monitor the system and challenge any fraudulent activity. Because the bridge relies on this challenge-response model, any honest watcher can contest a fraudulent withdrawal and the Bitcoin chain itself adjudicates the dispute. Any fraudulent bridge activity can be detected and challenged on the Bitcoin Mainnet with at least one honest party present.

The protocol launched with over 40 applications, including Valiant DEX, JuiceSwap, Fibrous, and Morpho. Citrea also provides the ctUSD stablecoin, which is a dollar-pegged asset backed by short-term U.S. Treasury bills and cash. This stablecoin allows users to deposit BTC, mint cBTC, and borrow ctUSD through a process verified by the Bitcoin network. The project received $16.7 million in funding from investors including Founders Fund and Galaxy. While Citrea competes with projects like BOB and Mezo, its use of zero-knowledge proofs differentiates its security model.

Staking and the growth of Bitcoin DeFi

Babylon attracted $3B to $3.4B in BTC for self-custodial staking by 2026. Phase 1 of Babylon’s self-custodial BTC staking launched on mainnet in August 2024, while Phase 2, the Babylon Genesis chain, went live in April 2025. This allows stakers to secure other proof-of-stake networks from their own wallets without leaving the Bitcoin network. Stacks, another established player, reported an sBTC TVL of approximately $437M at the end of Q1 2026. Stacks uses a Proof of Transfer consensus where miners bid BTC to produce blocks. The Nakamoto upgrade, which activated in October 2024, provides fast finality anchored to Bitcoin. The stablecoin volume on Stacks grew 23x since Q1 2025.

The distribution of capital in the Bitcoin ecosystem remains heavily concentrated. In the first quarter of 2026, total BTCFi TVL was approximately 91,332 BTC, which is 0.46% of the circulating supply. WBTC remains the dominant pool with a market cap near $8.9B to $9B. Stacks maintains a DeFi TVL of about $121M, while Rootstock holds roughly $272M in TVL. Lightning Network handles payments through channels rather than smart contracts, and its public capacity was roughly 4,965 BTC in recent snapshots. Will the declining BTCFi TVL prevent these technical breakthroughs from reaching mass adoption?

Security models and the trust spectrum

The security of a Bitcoin Layer 2 depends on the trust model of the bridge or consensus mechanism. You should evaluate the trust assumptions of an L2 before you evaluate the projected APY. The following table describes the different levels of trust required for various Bitcoin scaling solutions.

The BitVM2 and ZK-rollup architectures provide the most security for Bitcoin users. Lightning Network offers full trustlessness through bidirectional payment channels, but it introduces channel funding risk and watchtower risk. If a counterparty tries to close a channel using an outdated state, a node must remain online to contest it. In contrast, BitVM-based bridges like Clementine remove the need for an honest majority federation because the math is verified by Bitcoin. The BitVM2 and ZK-rollup architectures provide the most security for Bitcoin users.