What is fraud proof?

A challenge submitted to a base chain demonstrating that a rollup's posted state transition was wrong, causing the network to reject it.

Not yet verifiedHow we verify

3 min read

In this entry

A challenge submitted to a base chain demonstrating that a rollup's posted state transition was wrong, causing the network to reject it.

Fraud proofs are the security mechanism behind optimistic rollups and the reason those chains impose a withdrawal delay: the window exists so honest parties have time to look and object. The design assumes at least one watcher is running, is willing to pay to challenge, and is not censored. Whether a given rollup's fraud proof system is live and permissionless varies, and several launched without it.

The practical consequence people meet is the wait. A withdrawal from an optimistic rollup back to Ethereum takes days, and that delay is not a queue or a processing time. It is the challenge window, and it cannot be shortened by paying more.

How it works

An optimistic rollup posts transaction data and a claimed resulting state to the base chain without proving the computation. The claim is assumed correct, which is what makes it cheap. Security comes from the ability to disprove it.

  1. A proposer posts a state root along with the data needed to reconstruct what happened.
  2. A challenge window opens, commonly seven days on the major optimistic rollups, per their own documentation.
  3. Anyone running a node can re-execute the transactions and compare results.
  4. A challenger who finds a discrepancy submits a proof. Modern designs use an interactive bisection game that narrows the dispute to a single instruction the base chain can cheaply verify itself.
  5. If the challenge succeeds the state root is rejected and the proposer's bond is forfeited. If the window closes unchallenged, the state is accepted as final.

Contrast this with a validity proof, used by a zk rollup, which proves correctness up front. That removes the challenge window and the withdrawal delay entirely, at the cost of far more complex proving.

The assumption doing the work here is that at least one honest party is watching and able to act. That party needs the data, needs funds to post a bond and pay gas, and needs the base chain not to censor the challenge for the duration of the window.

Example

Illustrative timing. You bridge an asset from an optimistic rollup back to Ethereum. The withdrawal is initiated immediately on the rollup, then waits out the challenge window of about seven days before it can be claimed on the base chain. Bridge services will front you the funds sooner for a fee, taking on the wait themselves. That fee is the price of skipping a delay that exists for a security reason.

Why it matters when you buy

Buying a token on a rollup and moving it to an exchange means either waiting out the challenge window or paying a third party to bridge for you, and neither is free. Factor the exit before you buy on a layer 2, and check the network's characteristics at the chain pages.

optimistic rollup — the design this secures, validity proof — the alternative with no delay, rollup — the wider category, zk rollup — proof-based scaling, canonical bridge — the official exit path, sequencer — who orders rollup transactions.

Questions

Why does withdrawing from a rollup take a week?

Because the challenge window has to stay open long enough for an honest party to detect and dispute a bad state root. Shortening it would weaken the security assumption the design rests on.

Can I speed up a rollup withdrawal?

Only by using a third-party bridge that advances you the funds and waits on your behalf, for a fee. The protocol's own path cannot be accelerated.

Do all rollups have working fraud proofs?

No. Several optimistic rollups launched with the mechanism incomplete or permissioned. Check the specific network's own documentation for the current state of its proof system.