USENIX Security2026Top-tier venue
Bridging Bitcoin to Second Layers via BitVM2
Robin Linus Woll, Lukas Aumayr, Zeta Avarikioti, Matteo Maffei, Andrea Pelosi, Orfeas Stefanos Thyfronitis Litos, Christos Stefo, David Tse, Alexei Zamyatin
Abstract
A holy grail in blockchain infrastructure is a trustless bridge between Bitcoin and its second layers or other chains. We make progress toward this vision by introducing the first light-client-based Bitcoin bridge. At its heart lies BitVM2-CORE, a novel paradigm that enables arbitrary program execution on Bitcoin, combining Turing-complete expressiveness with the security of Bitcoin consensus. BitVM2-BRIDGE advances prior approaches by reducing the trust assumption from an honest majority (t-of-n) to existential honesty (1-of-n) during setup. Liveness is guaranteed with only one rational operator, and any user can act as a challenger, enabling permissionless verification. A production-level implementation of BitVM2 has been developed, and a full challenge verification has been executed on the Bitcoin mainnet.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Cited by top-tier papers2
- Refinement-based Verification of Cryptographic Protocols with Quantitative ValuesItsaka Rakotonirina, Javier Gomez-Martinez, Aoxuan Li, Pedro Moreno-Sanchez et al.CCS 2026
- BABE: Verifying Proofs on Bitcoin Made 1000x CheaperSanjam Garg, Dimitris Kolonelos, Mikhail Sergeevitch, Srivatsan Sridhar et al.CCS 2026
Builds on4
- MuSig2: Simple Two-Round Schnorr Multi-signaturesJonas Nick, Tim Ruffing, Yannick SeurinCRYPTO 2021 · 147 citations
- zkBridge: Trustless Cross-chain Bridges Made PracticalTiancheng Xie, Jiaheng Zhang, Zerui Cheng, Fan Zhang et al.CCS 2022 · 131 citations
- Universal Atomic Swaps: Secure Exchange of Coins Across All BlockchainsSri Aravinda Krishnan Thyagarajan, Giulio Malavolta, Pedro Moreno-SanchezS&P 2022 · 112 citations
- MuSig-DN: Schnorr Multi-Signatures with Verifiably Deterministic NoncesJonas Nick, Tim Ruffing, Yannick Seurin, Pieter WuilleCCS 2020 · 2 citations
Related papers
- BitVM3: Efficient Bitcoin Bridges via Garbled CircuitsRobin Linus Woll, Ioannis Alexopoulos, Lukas Aumayr, Zeta Avarikioti et al.CCS 2026
- Glimpse: On-Demand PoW Light Client with Constant-Size Storage for DeFiGiulia Scaffino, Lukas Aumayr, Zeta Avarikioti, Matteo MaffeiUSENIX Security 2023
- Bitcontracts: Supporting Smart Contracts in Legacy BlockchainsKarl Wüst, Loris Diana, Kari Kostiainen, Ghassan Karame et al.NDSS 2021
- Ark: Offchain Transaction Batching in BitcoinPim Keer, Matteo Maffei, Marco Argentieri, Andrew Camilleri et al.CCS 2026
- BitML: A Calculus for Bitcoin Smart ContractsMassimo Bartoletti, Roberto ZuninoCCS 2018 · 79 citations
