Lighter

Badges

About

Lighter is an application-specific zk rollup on a mission to revolutionize trading by building provably fair, secure, and scalable infrastructure for finance.

Total Value SecuredTVS

$834.74 M2.04%

Past day UOPSDaily UOPS

633.3033.3%

Stage

Type

ZK Rollup

Purpose

Exchange

Tokens breakdown

Value secured breakdown

0.00% with additional trust assumptions

View TVS breakdown

Interop protocols used

Tokens transferred

+6 more

Sequencer failureState validationData availabilityExit windowProposer failure

Explore more in Discovery UI

Badges

About

Lighter is an application-specific zk rollup on a mission to revolutionize trading by building provably fair, secure, and scalable infrastructure for finance.

Value Secured View TVS breakdown

Exclude restricted RWA tokens

Total

Canonically BridgedCanonically Bridged ValueCanonical

Natively MintedNatively Minted TokensNative

Externally BridgedExternally Bridged ValueExternal

ETH & derivatives

Stablecoins

BTC & derivatives

Other

View TVS breakdown

Volume and flows Explore Interop

15/21Chains

+10

Avg value per second ≈ $8.52 K|1 particle ≈ $125

Chain stats

Stats

Total volume$16.65 M

Volume in$11.15 M

Volume out$5.50 M

Net flow$5.64 M

Total transfers887

Transfers in655

Transfers out232

Avg. transfer value$18.77 K

Connected5 chains

Avg. value per second$192.73/s

Top routes

Top tokens

Top bridges

Data source: Lighter API

2025 Oct 02 — 2026 Jun 15

Past Day UOPS

633.3033.3%

Past Day Ops count

54.71 M

Max. UOPS

5.29 K

2025 Nov 14

Past day UOPS/TPS Ratio

1.00

Onchain costs

The section shows the operating costs that L2s pay to Ethereum.

2025 Jun 15 — 2026 Jun 15

Total cost

$227.57 K

Avg cost per L2 UOP

$0.000005

Avg cost per day

$623.49

Data posted

This section shows how much data the project publishes to its data-availability (DA) layer over time. The project currently posts data to; previously it posted toEthereum.

2025 Jun 15 — 2026 Jun 15

Data posted

21.71 GiB

Avg size per day

60.90 MiB

Avg size per L2 UOP

0.55 B

Liveness

This section shows how "live" the project's operators are by displaying how frequently they submit transactions of the selected type. It also highlights anomalies - significant deviations from their typical schedule.

No ongoing anomalies detected

2026 May 16 — Jun 15

Avg. proof subs. interval

2 minutes

Avg. state updates interval

6 minutes

Past 30 days anomalies

97% normal uptime

Last 30 day anomalies

All liveness anomalies detected for this project in the last 30 days, helping you review recent downtime and availability issues.

No State updates were performed for 7h 31m 48s (from 2026 Jun 05, 13:28 UTC until 2026 Jun 05, 21:00 UTC). These typically occur every 6min 48s on average.

No Proof submissions were performed for 7h 11m 48s (from 2026 Jun 05, 13:48 UTC until 2026 Jun 05, 21:00 UTC). These typically occur every 2min 32s on average.

No State updates were performed for 6h 6m (from 2026 May 27, 09:32 UTC until 2026 May 27, 15:38 UTC). These typically occur every 6min 48s on average.

No Proof submissions were performed for 6h 12s (from 2026 May 27, 09:35 UTC until 2026 May 27, 15:35 UTC). These typically occur every 2min 32s on average.

No Proof submissions were performed for 2h 20m 48s (from 2026 May 17, 13:42 UTC until 2026 May 17, 16:03 UTC). These typically occur every 2min 32s on average.

Milestones & Incidents

Lighter experiences 4.5h of downtime

2025 Oct 10th

Lighter experiences 4.5 hours of downtime due to DB growth issues.

Learn more

Lighter launches public mainnet

2025 Oct 2nd

Lighter launches public mainnet after 8 months of private beta.

Learn more

Risk summary

Sequencer failureState validationData availabilityExit windowProposer failure

Sequencer failure

Force via L1

Users can force the sequencer to include a transaction by submitting a request through L1. If the sequencer censors or is down for for more than 14d, users can use the exit hatch to withdraw their funds.

State validation

Validity proofs (SN)

SNARKs are succinct zero knowledge proofs that ensure state correctness, but require trusted setup.

Data availability

Onchain (SD)

All of the data (SD = state diffs) needed for proof construction is published onchain.

Exit window

None

There is no window for users to exit in case of an unwanted upgrade since contracts are instantly upgradable.

Proposer failure

Use escape hatch

Users are able to trustlessly exit by submitting a zero knowledge proof of funds.

Stage

Lighter is a

Stage 0

Appchain

ZK Rollup.

Learn more about Stages

Please keep in mind that these stages do not reflect project security, this is an opinionated assessment of project maturity based on subjective criteria, created with a goal of incentivizing projects to push toward better decentralization. Each team may have taken different paths to achieve this goal.

Data availability

Data published onchain

Account delta data is published onchain as blobs. A prover migration (gnark/MIMC → plonky2/Poseidon2) at block 23,711,820 left pre-migration blobs undecodable, but Lighter published a full state snapshot at batch #166859 (blobs.zip) that closes the gap. L2BEAT reproduced the snapshot state root from blobs and verified the roll-forward to chain head, confirming the live state is reconstructable from L1.

Learn more about the DA layer here:

Ethereum

State validation

Each update to the system state must be accompanied by a ZK proof that ensures that the new state was derived by correctly applying a series of valid transactions to the previous state. This includes user transactions originating from L1 and L2, as well as internal transactions created by L2 operators. In the desert mode, valid proofs of exit must be generated. These proofs are then verified on Ethereum by a smart contract.

Prover Architecture

This repo contains the circuits and prover code for both normal and desert operation mode of Lighter. It includes the logic to generate and verify proofs of valid state transition according to the Lighter matching engine.

ZK Circuits

Lighter transition is proven with custom Plonky2 circuits, compiled into ZK Lighter Verifier and Desert Verifier. ZK Lighter verifier implements the perp DEX and spot trading logic and could be found in this prover repo. Desert verifier consists of circuits proving valid L2 -> L1 withdrawals in the desert mode. More details in ZK Catalog.

Verification Keys Generation

Lighter wraps its validity proof into a Plonk-based proof system which requires a trusted setup. The verification keys are hardcoded in the verifier contract on-chain. Lighter prover repo contains a script that regenerates circuits and verification keys.

PROVER

Lighter

Trusted Setups

Onchain verifier

ZkLighterVerifier

DesertVerifier

Used in

Onchain verifier

ZkLighterVerifier

DesertVerifier

Used in

Upgrades & Governance

Regular upgrades are initiated by the “network governor” and executed with a 21d delay. The “security council” is allowed to reduce the upgrade delay to zero in case of an emergency. The security council does not currently satisfy the Stage 1 requirements. The network governor also retains the ability to add or remove validators.

Updates

2026 June 04, 13:40 UTC

High severity

18changes

New zk lighter verifier deployed, successfully reproduced from sources.

	contract Lighter (eth:0x3B4D794a66304F130a4Db8F2551B0070dfCf5ca7) [lighter/ZkLighterWithSpot] {
	+++ description: The main rollup contract. It processes L2 batches, manages token deposits and withdrawals, allows users to submit censorship-resistant L2 transactions and controls desert mode (escape hatch). Logic is split between two contracts because of code-size limits, many operations are delegated to AdditionalZKLighter.
	sourceHashes.1:
-	"0xcd208d248bde92753c9b72b60864c4e7985f46c4b2c5a6fcead7552029b7e8b8"
+	"0xea510c6fde95f555b31105692afec66f16fd2244264f4f3c1f8e553f3c14baf7"
	values.$implementation.0:
-	"eth:0xc4F38883af6d07D826A20A581cB21fFc2a58009C"
+	"eth:0x831EF69BaB8AF8B1037a4961B8d0674b124E7008"
	values.getTarget:
-	"eth:0xc4F38883af6d07D826A20A581cB21fFc2a58009C"
+	"eth:0x831EF69BaB8AF8B1037a4961B8d0674b124E7008"
	implementationNames.eth:0xc4F38883af6d07D826A20A581cB21fFc2a58009C:
-	"ZkLighter"
	implementationNames.eth:0x831EF69BaB8AF8B1037a4961B8d0674b124E7008:
+	"ZkLighter"
	}

	contract UpgradeGatekeeper (eth:0x94da8A995D0D82Ef0fE7E509C6D76c22603B6f67) [lighter/UpgradeGatekeeper] {
	+++ description: Governance contract functioning like an upgrade timelock for downstream contracts. The current delay is 21d and can be entirely skipped by eth:0x92b12c9d85BF7bd2EF5d2F53F4cd4Ce0BE432045.
	values.versionId:
-	58
+	60
	}

	contract ZkLighterVerifier (eth:0xac3Ce44B6ff4E402858C99D5699ff63131572BaA) [lighter/ZkLighterVerifier] {
	+++ description: The main ZK verifier of Lighter, settles the proofs of correct L2 state transition in the case of normal rollup operation.
	sourceHashes.1:
-	"0xc5b23d2a9631b15ef2c834426594aba91acd8cbe91587ada60318431d4feb357"
+	"0x2cd881cfae823474fa05eed998178949d59cb45e2c799c860d06a546ac43ec67"
	values.$implementation:
-	"eth:0xaa76aC5cC406037be638d483d8c1daF2AFDC1A68"
+	"eth:0xAa0b5b65890162C5C96D82F088822247EC5Df5D6"
	values.getTarget:
-	"eth:0xaa76aC5cC406037be638d483d8c1daF2AFDC1A68"
+	"eth:0xAa0b5b65890162C5C96D82F088822247EC5Df5D6"
	implementationNames.eth:0xaa76aC5cC406037be638d483d8c1daF2AFDC1A68:
-	"ZkLighterVerifier"
	implementationNames.eth:0xAa0b5b65890162C5C96D82F088822247EC5Df5D6:
+	"ZkLighterVerifier"
	}

2026 May 18, 10:47 UTC

High severity

29changes

Small upgrade of the lighter rollup contract: https://disco.l2beat.com/diff/eth:0x13d4Ed7Db9d2cF73C7A45bfA6e23aa9742e8598C/eth:0xc4F38883af6d07D826A20A581cB21fFc2a58009C, it refactors performDesert function. Also new lighter verifier and desert verifier deployed, succesfully regenerated from the sources.

Also new lighter verifier and desert verifier deployed, succesfully regenerated from the sources.

	contract Lighter (eth:0x3B4D794a66304F130a4Db8F2551B0070dfCf5ca7) [lighter/ZkLighterWithSpot] {
	+++ description: The main rollup contract. It processes L2 batches, manages token deposits and withdrawals, allows users to submit censorship-resistant L2 transactions and controls desert mode (escape hatch). Logic is split between two contracts because of code-size limits, many operations are delegated to AdditionalZKLighter.
	sourceHashes.1:
-	"0x9569dcd94342470829bda3bb0fd36074a965e17d37bedd39697db12f774365e1"
+	"0xcd208d248bde92753c9b72b60864c4e7985f46c4b2c5a6fcead7552029b7e8b8"
	values.$implementation.0:
-	"eth:0x13d4Ed7Db9d2cF73C7A45bfA6e23aa9742e8598C"
+	"eth:0xc4F38883af6d07D826A20A581cB21fFc2a58009C"
	+++ severity: HIGH
	values.desertVerifier:
-	"eth:0xd4460475F00307845082d3a146f36661354FBc67"
+	"eth:0x2aDBd91742B64105a097bC37D20Ebbca9a496085"
	values.getTarget:
-	"eth:0x13d4Ed7Db9d2cF73C7A45bfA6e23aa9742e8598C"
+	"eth:0xc4F38883af6d07D826A20A581cB21fFc2a58009C"
	implementationNames.eth:0x13d4Ed7Db9d2cF73C7A45bfA6e23aa9742e8598C:
-	"ZkLighter"
	implementationNames.eth:0xc4F38883af6d07D826A20A581cB21fFc2a58009C:
+	"ZkLighter"
	}

	contract Lighter Multisig (eth:0x92b12c9d85BF7bd2EF5d2F53F4cd4Ce0BE432045) [GnosisSafe] {
	+++ description: None
	values.$members.0:
+	"eth:0xD80037fade5d25b9c8B23e5c43bB0577C165Dcf9"
	values.$members.1:
+	"eth:0xb08564C7fc68C3Ab1cD81300C8Ad150e04411F85"
	values.$members.1:
-	"eth:0x037C8e6aF4AEB15A597FC3C2a6F1B30B4b0Ae2B1"
	values.$threshold:
-	3
+	4
	values.multisigThreshold:
-	"3 of 6 (50%)"
+	"4 of 7 (57%)"
	}

	contract UpgradeGatekeeper (eth:0x94da8A995D0D82Ef0fE7E509C6D76c22603B6f67) [lighter/UpgradeGatekeeper] {
	+++ description: Governance contract functioning like an upgrade timelock for downstream contracts. The current delay is 21d and can be entirely skipped by eth:0x92b12c9d85BF7bd2EF5d2F53F4cd4Ce0BE432045.
	values.versionId:
-	56
+	58
	}

	contract ZkLighterVerifier (eth:0xac3Ce44B6ff4E402858C99D5699ff63131572BaA) [lighter/ZkLighterVerifier] {
	+++ description: The main ZK verifier of Lighter, settles the proofs of correct L2 state transition in the case of normal rollup operation.
	sourceHashes.1:
-	"0x01d2d0bcda8de284060e58013910fa6454b5a8fd3d146e173364e231f0cf04e0"
+	"0xc5b23d2a9631b15ef2c834426594aba91acd8cbe91587ada60318431d4feb357"
	values.$implementation:
-	"eth:0x21c7480b72c47fe93102BE5B865d18b770338098"
+	"eth:0xaa76aC5cC406037be638d483d8c1daF2AFDC1A68"
	values.getTarget:
-	"eth:0x21c7480b72c47fe93102BE5B865d18b770338098"
+	"eth:0xaa76aC5cC406037be638d483d8c1daF2AFDC1A68"
	implementationNames.eth:0x21c7480b72c47fe93102BE5B865d18b770338098:
-	"ZkLighterVerifier"
	implementationNames.eth:0xaa76aC5cC406037be638d483d8c1daF2AFDC1A68:
+	"ZkLighterVerifier"
	}

-	Status: DELETED
	contract DesertVerifier (eth:0xd4460475F00307845082d3a146f36661354FBc67) [lighter/DesertVerifier]
	+++ description: ZK verifier used to verify forced exits during desert mode.

+	Status: CREATED
	contract DesertVerifier (eth:0x2aDBd91742B64105a097bC37D20Ebbca9a496085) [N/A]
	+++ description: None

2026 May 12, 09:59 UTC

High severity

14changes

New verifier deployed (no sources published yet). Also, rotated two multisig members for upgrade master MS. Config: use the new flattener implementation

New verifier deployed (no sources published yet). Also, rotated two multisig members for upgrade master MS.

Config: use the new flattener implementation

	contract UpgradeGatekeeper (eth:0x94da8A995D0D82Ef0fE7E509C6D76c22603B6f67) [lighter/UpgradeGatekeeper] {
	+++ description: Governance contract functioning like an upgrade timelock for downstream contracts. The current delay is 21d and can be entirely skipped by eth:0x92b12c9d85BF7bd2EF5d2F53F4cd4Ce0BE432045.
	values.versionId:
-	54
+	56
	}

	contract Lighter Multisig 2 (eth:0x97A90Ec950B6BCd9B190b566525B2Bb92A2C03a2) [GnosisSafe] {
	+++ description: None
	values.$members.0:
+	"eth:0x2994d343b6b17EC23E9E4a08082184Fd43F763a3"
	values.$members.1:
-	"eth:0x89f550Fce5c191b34AF95671c28bCF6CCDF1203a"
	values.$members.2:
-	"eth:0x6d340Dd53b89b1f0bD94b473227612427125Bc8D"
+	"eth:0xa0B3781B830DF57B1f018C434c58551c2Fc6b3Af"
	}

	contract ZkLighterVerifier (eth:0xac3Ce44B6ff4E402858C99D5699ff63131572BaA) [lighter/ZkLighterVerifier] {
	+++ description: The main ZK verifier of Lighter, settles the proofs of correct L2 state transition in the case of normal rollup operation.
	sourceHashes.1:
-	"0x5bee4c4522233c699516029292bf16813f3dea03e484fe718e479ac2ace77653"
+	"0x01d2d0bcda8de284060e58013910fa6454b5a8fd3d146e173364e231f0cf04e0"
	values.$implementation:
-	"eth:0x01E5D9B6Db77FAA52Fc4Db1299A0163e5DaF5F82"
+	"eth:0x21c7480b72c47fe93102BE5B865d18b770338098"
	values.getTarget:
-	"eth:0x01E5D9B6Db77FAA52Fc4Db1299A0163e5DaF5F82"
+	"eth:0x21c7480b72c47fe93102BE5B865d18b770338098"
	implementationNames.eth:0x01E5D9B6Db77FAA52Fc4Db1299A0163e5DaF5F82:
-	"ZkLighterVerifier"
	implementationNames.eth:0x21c7480b72c47fe93102BE5B865d18b770338098:
+	"ZkLighterVerifier"
	}

2026 May 04, 10:44 UTC

High severity

10changes

New verifier deployed (no sources published yet).

	contract UpgradeGatekeeper (eth:0x94da8A995D0D82Ef0fE7E509C6D76c22603B6f67) {
	+++ description: Governance contract functioning like an upgrade timelock for downstream contracts. The current delay is 21d and can be entirely skipped by eth:0x92b12c9d85BF7bd2EF5d2F53F4cd4Ce0BE432045.
	values.versionId:
-	53
+	54
	}

	contract ZkLighterVerifier (eth:0xac3Ce44B6ff4E402858C99D5699ff63131572BaA) {
	+++ description: The main ZK verifier of Lighter, settles the proofs of correct L2 state transition in the case of normal rollup operation.
	sourceHashes.1:
-	"0x75000ee054e0747281836448e78e3cd5bf503d1f6a9e49a7e7ce4d7386542c8d"
+	"0x5bee4c4522233c699516029292bf16813f3dea03e484fe718e479ac2ace77653"
	values.$implementation:
-	"eth:0xD76E5C5507C56D721BB9cE6601DCd379d09AFaD2"
+	"eth:0x01E5D9B6Db77FAA52Fc4Db1299A0163e5DaF5F82"
	values.getTarget:
-	"eth:0xD76E5C5507C56D721BB9cE6601DCd379d09AFaD2"
+	"eth:0x01E5D9B6Db77FAA52Fc4Db1299A0163e5DaF5F82"
	implementationNames.eth:0xD76E5C5507C56D721BB9cE6601DCd379d09AFaD2:
-	"ZkLighterVerifier"
	implementationNames.eth:0x01E5D9B6Db77FAA52Fc4Db1299A0163e5DaF5F82:
+	"ZkLighterVerifier"
	}

2026 April 27, 14:04 UTC

High severity

26changes

Upgraded the main Rollup contract: https://disco.l2beat.com/diff/eth:0xE315CbEDc21c5beC186bF478D899e91A604a6bC8/eth:0x13d4Ed7Db9d2cF73C7A45bfA6e23aa9742e8598C. Main changes: - Removed events when creating or updating assets on L2, so this data is removed from disco. - Expanded registerAsset with new parameters priceDecimals , loanToValue , liquidationThreshold , liquidationFactor , and liquidationFee to move to a more collateral-oriented design. - Some code refactor like additional sanity checks on pubkey and moving asset validation logic into a separate function. Also upgraded the verifier, sources are not published.

Upgraded the main Rollup contract: https://disco.l2beat.com/diff/eth:0xE315CbEDc21c5beC186bF478D899e91A604a6bC8/eth:0x13d4Ed7Db9d2cF73C7A45bfA6e23aa9742e8598C. Main changes:

Removed events when creating or updating assets on L2, so this data is removed from disco.
Expanded registerAsset with new parameters _priceDecimals, loanToValue, liquidationThreshold, liquidationFactor, and liquidationFee to move to a more collateral-oriented design.
Some code refactor like additional sanity checks on pubkey and moving asset validation logic into a separate function.

Also upgraded the verifier, sources are not published.

	contract Lighter (eth:0x3B4D794a66304F130a4Db8F2551B0070dfCf5ca7) {
	+++ description: The main rollup contract. It processes L2 batches, manages token deposits and withdrawals, allows users to submit censorship-resistant L2 transactions and controls desert mode (escape hatch). Logic is split between two contracts because of code-size limits, many operations are delegated to AdditionalZKLighter.
	sourceHashes.1:
-	"0x9196f787ee56fceda2cb5edc19619ee00a4261076f58a5096729585a79c5c474"
+	"0xc3634a3489804f8dab544a9e3a5e4dd76fd81bfe5bbe3f69c88caf99c672e30f"
	values.$implementation.0:
-	"eth:0xE315CbEDc21c5beC186bF478D899e91A604a6bC8"
+	"eth:0x13d4Ed7Db9d2cF73C7A45bfA6e23aa9742e8598C"
	values.$implementation.1:
-	"eth:0x84E480C589e715D0CE7de004b1EEA69f8D714936"
+	"eth:0x22F05515497ce8D78f3898088C474403Ac9C668f"
	values.additionalZkLighter:
-	"eth:0x84E480C589e715D0CE7de004b1EEA69f8D714936"
+	"eth:0x22F05515497ce8D78f3898088C474403Ac9C668f"
	values.getTarget:
-	"eth:0xE315CbEDc21c5beC186bF478D899e91A604a6bC8"
+	"eth:0x13d4Ed7Db9d2cF73C7A45bfA6e23aa9742e8598C"
	values.MIN_ORDER_BASE_AMOUNT:
-	1
	values.NIL_ORDER_BASE_AMOUNT:
-	0
	implementationNames.eth:0xE315CbEDc21c5beC186bF478D899e91A604a6bC8:
-	"ZkLighter"
	implementationNames.eth:0x84E480C589e715D0CE7de004b1EEA69f8D714936:
-	"AdditionalZkLighter"
	implementationNames.eth:0x13d4Ed7Db9d2cF73C7A45bfA6e23aa9742e8598C:
+	"ZkLighter"
	implementationNames.eth:0x22F05515497ce8D78f3898088C474403Ac9C668f:
+	"AdditionalZkLighter"
	}

	contract UpgradeGatekeeper (eth:0x94da8A995D0D82Ef0fE7E509C6D76c22603B6f67) {
	+++ description: Governance contract functioning like an upgrade timelock for downstream contracts. The current delay is 21d and can be entirely skipped by eth:0x92b12c9d85BF7bd2EF5d2F53F4cd4Ce0BE432045.
	values.versionId:
-	49
+	53
	}

	contract ZkLighterVerifier (eth:0xac3Ce44B6ff4E402858C99D5699ff63131572BaA) {
	+++ description: The main ZK verifier of Lighter, settles the proofs of correct L2 state transition in the case of normal rollup operation.
	sourceHashes.1:
-	"0x04265b02f2d070121154f7b50d4de98012a3d8647ca41f78f926e9150b4799cd"
+	"0x75000ee054e0747281836448e78e3cd5bf503d1f6a9e49a7e7ce4d7386542c8d"
	values.$implementation:
-	"eth:0x7B2cAc7b45E87d0392ACCf7c88764b7d2288938f"
+	"eth:0xD76E5C5507C56D721BB9cE6601DCd379d09AFaD2"
	values.getTarget:
-	"eth:0x7B2cAc7b45E87d0392ACCf7c88764b7d2288938f"
+	"eth:0xD76E5C5507C56D721BB9cE6601DCd379d09AFaD2"
	implementationNames.eth:0x7B2cAc7b45E87d0392ACCf7c88764b7d2288938f:
-	"ZkLighterVerifier"
	implementationNames.eth:0xD76E5C5507C56D721BB9cE6601DCd379d09AFaD2:
+	"ZkLighterVerifier"
	}

Operator

Centralized operators

Only the centralized operators can submit batches and verify them with a ZK proof, i.e. advance the state of the protocol.

MEV can be extracted if the operator exploits their centralized position and frontruns user transactions.

Users can force their transactions on L1

If the centralized operators fail to include user transactions, users can force them themselves through L1. The possible transaction types that users can force are: deposits, withdrawals, order creation, order cancellation, and burning of pool shares. If the operators do not process forced transactions within 14d, the system can be frozen (desert mode) and users can exit using the latest settled state. All open positions are settled using the latest index price.

Withdrawals

Regular exit

The user initiates the withdrawal by submitting a regular transaction on this chain. When the block containing that transaction is settled the funds become available for withdrawal on L1. ZK proofs are required to settle blocks. Finally the user submits an L1 transaction to claim the funds.

Escape hatch through ZK proofs

If the centralized operators fail to process forced transactions after the deadline, the system can be frozen (desert mode) and users are expected to exit by reconstructing the latest settled state and providing a ZK proof of balance. The desert exit circuit and a full state snapshot at batch #166859 are public, and the deployed DesertVerifier matches a rebuild from that circuit. L2BEAT reproduced the snapshot state root from L1 blobs and verified the roll-forward to chain head.

Desert exit circuit + state snapshot

Other considerations

External oracles used for index prices

Lighter uses a combination of oracles to determine index prices, with Stork as the primary source. External signatures are currently not verified and the sequencer must be trusted to truthfully report data.

Funds can be lost if the oracle prices are manipulated.

Lighter docs - Fair Price Marking

Permissions

A dashboard to explore contracts and permissions

Go to Disco

Explore in Disco

Ethereum

Actors:

Lighter Multisig0x92b1…2045

A Multisig with 4/7 threshold.

Can interact with UpgradeGatekeeper
- can reduce the upgrade delay to zero seconds

Participants (7):

0xD800…Dcf9 0xb085…1F85 0xEc58…0FA6 0x57cc…045d 0x0bF0…169D 0x8B01…B6f6 0x06eD…a90A

Lighter Multisig 20x97A9…03a2

A Multisig with 3/5 threshold.

Can upgrade with 21d delay
- Lighter UpgradeGatekeeper with 21d delay
- Governance UpgradeGatekeeper with 21d delay
- ZkLighterVerifier UpgradeGatekeeper with 21d delay
Can interact with Governance
- manage validators, update the address that manages the insurance fund, update the treasury address that collects fees from markets, add and update markets and assets

Participants (5):

0x2994…63a3 0x67d6…536E 0xa0B3…b3Af 0x6FEe…b9ed 0xF65F…7835

Safe0x3dD7…4daE

A Multisig with 2/3 threshold.

Participants (3):

0x6160…F99E 0x6FEe…b9ed 0xAeD3…22D0

Safe0x9ccE…7310

A Multisig with 3/5 threshold.

Participants (5):

0xfDb3…4A41 0x8D92…507f 0xDe81…6a0E 0x6FEe…b9ed 0xf711…A23a

3 EOAs

EOA 1 EOA 2 EOA 3

Can interact with Governance
- can commit, verify, execute batches, and revert committed but not yet executed batches

Smart contracts

A dashboard to explore contracts and permissions

Go to Disco

Explore in Disco

A diagram of the smart contract architecture

Ethereum

DesertVerifier0x2aDB…6085

Lighter

Escrow

0x3B4D…5ca7 Implementation #1 (Upgradable)Implementation #2 (Upgradable)Admin

The main rollup contract. It processes L2 batches, manages token deposits and withdrawals, allows users to submit censorship-resistant L2 transactions and controls desert mode (escape hatch). Logic is split between two contracts because of code-size limits, many operations are delegated to AdditionalZKLighter.

Roles:
- admin: UpgradeGatekeeper; ultimately Lighter Multisig 2

The following tokens are included in the value secured calculation:

Can be upgraded by:

Lighter Multisig 2 with 21d delay

UpgradeGatekeeper0x94da…6f67

Governance contract functioning like an upgrade timelock for downstream contracts. The current delay is 21d and can be entirely skipped by Lighter Multisig.

Roles:
- getMaster: Lighter Multisig 2
- securityCouncilAddress: Lighter Multisig

Governance0xa464…81A1 Implementation (Upgradable)Admin

Manages the list of validators and the network governor.

Roles:
- admin: UpgradeGatekeeper; ultimately Lighter Multisig 2
- networkGovernor: Lighter Multisig 2
- validators: EOA 1, EOA 2, EOA 3

Can be upgraded by:

Lighter Multisig 2 with 21d delay

ZkLighterVerifier0xac3C…2BaA Implementation (Upgradable)Admin

The main ZK verifier of Lighter, settles the proofs of correct L2 state transition in the case of normal rollup operation.

Roles:
- admin: UpgradeGatekeeper; ultimately Lighter Multisig 2

Can be upgraded by:

Lighter Multisig 2 with 21d delay

The current deployment carries some associated risks:

Funds can be stolen if a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL).

Search

Lighter

Badges

About

Links: Website, Docs, etc.

Badges

About

Last 30 day anomalies

Funds can be stolen if

Funds can be lost if

MEV can be extracted if

Data published onchain

Trusted Setups

Centralized operators

Users can force their transactions on L1

Regular exit

Escape hatch through ZK proofs

External oracles used for index prices

Ethereum

Actors:

Ethereum