Linea logoLinea

Value Locked

$55.03 M

3.26%

Canonically Bridged
$55.03 M (100%)
Externally Bridged
$0.00 (0%)
Natively Minted
$0.00 (0%)
View TVL Breakdown
  • Breakdown
  • Daily TPS
    1.2318.24%
  • 30D tx count
    3.87 M
  • Stage
    Stage 0
  • Technology
    ZK Rollup
  • Purpose
    Universal

    • ...

    View tokens

    Choose a token

    Canonically Bridged Tokens (Top 15)

    Can't find a token?

    Request it here

    Milestones

    Mainnet Alpha Launch

    2023 Jul 12th

    Linea has launched on the Ethereum mainnet.

    Learn more

    Open Testnet is Live

    2023 Mar 28th

    Linea has launched on the Goerli testnet, allowing users and developers to test the platform.

    Learn more
    Show more

    Description

    The circuit of the program being proven is not public.

    Linea is a zkRollup powered by Consensys zkEVM, designed to scale the Ethereum network.

    If you find something wrong on this page you can submit an issue or edit the information.

    Risk Analysis

    Sequencer failureState validationData availabilityUpgradeabilityProposer failure

    State validation

    ZK proofs (SN)

    ZK-SNARKS are zero knowledge proofs that ensure state correctness, but require trusted setup.

    Data availability

    On chain

    All of the data needed for proof construction is published on chain. Unlike most zk rollups, transaction data is posted instead of state diffs.

    Upgradeability

    Yes

    The code that secures the system can be changed arbitrarily and without notice.

    Sequencer failure

    No mechanism

    There is no mechanism to have transactions be included if the sequencer is down or censoring.

    Proposer failure

    Cannot withdraw

    Only the whitelisted proposers can publish state roots on L1, so in the event of failure the withdrawals are frozen.

    Rollup stage

    LineaLinea is aStage 0ZK Rollup.
    Learn more about Rollup stages
    Please keep in mind that these stages do not reflect rollup security, this is an opinionated assessment of rollup maturity based on subjective criteria, created with a goal of incentivizing projects to push toward better decentralization. Each team may have taken different paths to achieve this goal.

    Technology

    Validity proofs ensure state correctness

    Each update to the system state must be accompanied by a ZK Proof that ensures that the new state was derived by correctly applying a series of valid user transactions to the previous state. These proofs are then verified on Ethereum by a smart contract.

    1. ZkEvmV2.sol#L275 - Etherscan source code, _verifyProof() function

    All transaction data is recorded on chain

    All executed transactions are submitted to an on chain smart contract. The execution of the rollup is based entirely on the submitted transactions, so anyone monitoring the contract can know the correct state of the rollup chain.

    1. ZkEvmV2.sol#L221 - Etherscan source code, _processBlockTransactions() function

    Operator

    The system has a centralized sequencer

    Only a trusted sequencer is allowed to submit transaction batches. A mechanism for users to submit their own batches is currently disabled.

    • MEV can be extracted if the operator exploits their centralized position and frontruns user transactions.

    • Funds can be frozen if the sequencer refuses to include an exit transaction (CRITICAL).

    1. ZkEvmV2.sol#L125 - Etherscan source code, onlyRole(OPERATOR_ROLE) modifier

    Users can't force any transaction

    There is no general mechanism to force the sequencer to include the transaction.

    • Users can be censored if the operator refuses to include their transactions.

    Withdrawals

    Regular exit

    The user initiates the withdrawal by submitting a regular transaction on this chain. When the block containing that transaction is proven the funds become available for withdrawal on L1. Finally the user submits an L1 transaction to claim the funds. This transaction does not require a merkle proof. Note that withdrawal requests can be censored by the Sequencer. Currently, there is a general limit of 6250.0 ETH that can be withdrawn within each 1d time window.

    • Funds can be frozen if the operator censors withdrawal transaction.

    1. L1MessageService.sol#L115 - Etherscan source code, claimMessage() function

    Permissions

    The system uses the following set of permissioned addresses:

    AdminMultisig 0x892b…1DD3

    Admin of the Linea rollup. It can upgrade core contracts, bridges, change the verifier address, and publish blocks by effectively overriding the proof system. This is a Gnosis Safe with 4 / 8 threshold.

    AdminMultisig participants 0x4975…B6aB0x239d…aEFE0x12d6…bea90x5822…40AE0x36a0…F87B0x4CB4…fAD40xab23…55A10xB4dA…dBcb

    Those are the participants of the AdminMultisig.

    Operators 0x9228…Ad64

    The operators are allowed to prove blocks and post the corresponding transaction data.

    Smart Contracts

    The system consists of the following smart contracts:

    zkEVM 0xd19d…876FImplementation (Upgradable)Admin

    The main contract of the Linea zkEVM rollup. Contains state roots, the verifier addresses and manages messages between L1 and the L2. The contract is pausable by 0x892bb7EeD71efB060ab90140e7825d8127991DD3. This contract stores the following tokens: ETH.

    Can be upgraded by: AdminMultisig

    Upgrade delay: No delay

    1. ZkEvmV2.sol#L275 - Etherscan source code, state injections: stateRoot and exitRoot are part of the validity proof input.
    PlonkVerifierFull 0xc01E…2B32

    Plonk verifier contract used by the Linea zkEVM rollup.

    PlonkVerifierFull2 0xC848…ED27

    Plonk verifier contract used by the Linea zkEVM rollup.

    PlonkVerifierFullLarge 0xa4F1…8CaC

    Plonk verifier contract used by the Linea zkEVM rollup.

    ERC20Bridge 0x051F…3319Implementation (Upgradable)Admin

    Contract used to bridge ERC20 tokens. This contract can store any token.

    Can be upgraded by: AdminMultisig

    Upgrade delay: No delay

    USDCBridge 0x504A…88ceImplementation (Upgradable)Admin

    Contract used to bridge USDC tokens. This contract stores the following tokens: USDC.

    Can be upgraded by: AdminMultisig

    Upgrade delay: No delay

    Value Locked is calculated based on these smart contracts and tokens:

    The current deployment carries some associated risks:

    • Funds can be stolen if a contract receives a malicious code upgrade. There is a delay on code upgrades.