Linea
Badges
About
Linea is a ZK Rollup powered by Consensys zkEVM, designed to scale the Ethereum network.
$1.17 B
8.63%
- Users' withdrawals can be censored by the permissioned operators.
- Upgrades executed by actors with more centralized control than a Security Council provide less than 7d for users to exit if the permissioned operator is down or censoring.
- Security Council members are not publicly known.
Badges
About
Linea is a ZK Rollup powered by Consensys zkEVM, designed to scale the Ethereum network.
...
Choose token
![](https://assets.coingecko.com/coins/images/36870/large/Foxy_Logo_Square_200x200.png?1712645286)
![](https://assets.coingecko.com/coins/images/37375/large/image.png?1714884543)
![](https://assets.coingecko.com/coins/images/34874/large/LogoCircular_200x200.png?1706462851)
![](https://assets.coingecko.com/coins/images/34828/standard/nile.png)
![](https://assets.coingecko.com/coins/images/33699/large/linda-logo-200.png?1705166731)
![](https://assets.coingecko.com/coins/images/31418/large/mendi_finance_token_logo_v1.png?1696530233)
![](https://assets.coingecko.com/coins/images/33070/large/Lube2-icon-200x200.png?1708581050)
![](https://assets.coingecko.com/coins/images/34753/large/eth_renzo_logo_%281%29.png?1705956747)
![](https://coin-images.coingecko.com/coins/images/33033/large/weETH.png?1701438396)
![](https://assets.coingecko.com/coins/images/33800/large/Icon___Dark.png?1702991855)
![](https://assets.coingecko.com/coins/images/33103/large/200_200.png?1702602672)
![](https://coin-images.coingecko.com/coins/images/33669/large/sUSDe-Symbol-Color.png?1716307680)
![](https://coin-images.coingecko.com/coins/images/33613/large/USDE.png?1716355685)
![](https://assets.coingecko.com/coins/images/279/large/ethereum.png?1595348880)
![](https://assets.coingecko.com/coins/images/6319/large/usdc.png?1696506694)
![](https://assets.coingecko.com/coins/images/7598/large/wrapped_bitcoin_wbtc.png?1696507857)
![](https://assets.coingecko.com/coins/images/325/large/Tether.png?1696501661)
![](https://assets.coingecko.com/coins/images/18834/large/wstETH.png?1696518295)
![](https://assets.coingecko.com/coins/images/9956/large/Badge_Dai.png?1696509996)
![](https://assets.coingecko.com/coins/images/14666/large/Group_3.png?1696514341)
![](https://assets.coingecko.com/coins/images/20805/large/SymbiosisFinance_logo-150x150.jpeg?1696520198)
![](https://assets.coingecko.com/coins/images/12504/large/uni.jpg?1696512319)
![](https://assets.coingecko.com/coins/images/11939/large/shiba.png?1696511800)
![](https://assets.coingecko.com/coins/images/14899/large/RwdVsGcw_400x400.jpg?1696514562)
![](https://assets.coingecko.com/coins/images/29850/large/pepe-token.jpeg?1696528776)
![](https://assets.coingecko.com/coins/images/877/large/chainlink-new-logo.png?1696502009)
![](https://assets.coingecko.com/coins/images/6595/large/Rune200x200.png?1696506946)
![](https://assets.coingecko.com/coins/images/1364/large/Mark_Maker.png?1585191826)
...
...
Open Testnet is Live
2023 Mar 28th
Linea has launched on the Goerli testnet, allowing users and developers to test the platform.
Funds can be stolen if
Funds can be frozen if
Users can be censored if
MEV can be extracted if
State validation
ZK proofs (SN)zkSNARKS are zero knowledge proofs that ensure state correctness, but require trusted setup.
Data availability
On chainAll of the data needed for proof construction is published on Ethereum L1. Unlike most ZK rollups, transaction data is posted instead of state diffs.
Exit window
NoneThere is no window for users to exit in case of an unwanted regular upgrade since contracts are instantly upgradable.
Sequencer failure
No mechanismThere is no mechanism to have transactions be included if the sequencer is down or censoring.
Proposer failure
Cannot withdrawOnly the whitelisted proposers can publish state roots on L1, so in the event of failure the withdrawals are frozen.
![Linea](/icons/linea.png)
- A complete and functional proof system is deployed.
- Users’ withdrawals can be censored by the permissioned operators.
- Upgrades executed by actors with more centralized control than a Security Council provide less than 7d for users to exit if the permissioned operator is down or censoring.
- Security Council members are not publicly known.
- Upgrades unrelated to on-chain provable bugs provide less than 30d to exit.
- The Security Council’s actions are not confined to on-chain provable bugs.
Validity proofs ensure state correctness
Each update to the system state must be accompanied by a ZK proof that ensures that the new state was derived by correctly applying a series of valid user transactions to the previous state. These proofs are then verified on Ethereum by a smart contract. Operator can finalize L2 state root without proof.
Funds can be stolen if the operator forces and finalizes L2 state root without proof.
Zero knowledge SNARK cryptography is used
Despite their production use zkSNARKs are still new and experimental cryptography. Cryptography has made a lot of advancements in the recent years but all cryptographic solutions rely on time to prove their security. In addition zkSNARKs require a trusted setup to operate.
Funds can be stolen if the cryptography is broken or implemented incorrectly.
All data required for proofs is published on chain
All the data that is used to construct the system state is published on chain in the form of cheap blobs or calldata. This ensures that it will be available for enough time.
Each update to the system state must be accompanied by a ZK proof that ensures that the new state was derived by correctly applying a series of valid user transactions to the previous state. These proofs are then verified on Ethereum by a smart contract.
The source code of the prover is currently not public.
The source code of the circuits is currently not public.
Funds can be lost if the proof system is implemented incorrectly.
Funds can be stolen if the prover is able to generate false proofs.
Given that the circuit is not public, the generation of the verification keys is not public either.
The system has a centralized sequencer
Only a trusted sequencer is allowed to submit transaction batches. A mechanism for users to submit their own batches is currently disabled.
MEV can be extracted if the operator exploits their centralized position and frontruns user transactions.
Funds can be frozen if the sequencer refuses to include an exit transaction (CRITICAL).
Users can't force any transaction
There is no general mechanism to force the sequencer to include the transaction.
Users can be censored if the operator refuses to include their transactions.
Regular exit
The user initiates the withdrawal by submitting a regular transaction on this chain. When the block containing that transaction is proven the funds become available for withdrawal on L1. Finally the user submits an L1 transaction to claim the funds. This transaction does not require a merkle proof. Note that withdrawal requests can be censored by the Sequencer. Currently, there is a general limit of 18750.0 ETH that can be withdrawn within each 1d time window.
Funds can be frozen if the operator censors withdrawal transaction.
The system uses the following set of permissioned addresses:
Admin of the Linea rollup. It can upgrade core contracts, bridges, update permissioned actors, and publish blocks by effectively overriding the proof system. This is a Gnosis Safe with 4 / 8 threshold. It uses the following modules: Roles.
Those are the participants of the AdminMultisig.
Module to the AdminMultisig. Allows to add additional members to the multisig via permissions to call functions specified by roles.
The operators are allowed to prove blocks and post the corresponding transaction data.
Address allowed to pause the ERC20Bridge, the USDCBridge and the core functionalities of the project.
![A diagram of the smart contract architecture](/images/architecture/linea.png)
The system consists of the following smart contracts on the host chain (Ethereum):
The main contract of the Linea zkEVM rollup. Contains state roots, the verifier addresses and manages messages between L1 and the L2. The contract is pausable by AdminMultisig. This contract stores the following tokens: ETH.
Upgrade delay: No delay
Owner of the ProxyAdmin and Verifier Setter. The current delay is 0s.
Currently used smart contract verifying the proofs for the the Linea zkEVM.
Contract used to bridge ERC20 tokens. This contract can store any token.
Upgrade delay: No delay
Contract used to bridge USDC tokens. This contract stores the following tokens: USDC.
Upgrade delay: No delay
Value Locked is calculated based on these smart contracts and tokens:
The current deployment carries some associated risks:
Funds can be stolen if a contract receives a malicious code upgrade. There is a 0s delay on code upgrades.