zk-Porter is a data availability scaling architecture proposed for the zkSync Era Layer 2 rollup. It functions as a hybrid system where users can choose between two security models: the highly secure zkRollup mode, where data is posted on-chain to Ethereum, and the highly scalable zkPorter mode, where data availability is managed by a separate, decentralized network of Guardians. This design allows for massive scalability—potentially over 20,000 transactions per second (TPS)—by moving the costly data storage off the main Ethereum chain while maintaining cryptographic security guarantees through zk-SNARK validity proofs.
zk-Porter
What is zk-Porter?
zk-Porter is a hybrid scaling solution for Ethereum, combining zero-knowledge proofs with a separate data availability layer to achieve high throughput and low transaction fees.
The core innovation of zk-Porter is its delegated data availability model. In this mode, transaction data is not published to Ethereum's calldata. Instead, it is held and attested to by a network of Guardians, who stake the native ZK token as collateral. Users' accounts are secured by the collective stake of these Guardians; if they sign an invalid state transition or withhold data, their stake can be slashed. This creates a strong cryptoeconomic security assurance distinct from, but complementary to, Ethereum's base-layer consensus.
From a user perspective, accounts in zk-Porter are composable with zkRollup accounts, meaning they can interact seamlessly within the same zkSync Era ecosystem. The primary trade-off is between cost and security: zk-Porter transactions will have fees orders of magnitude lower than the zkRollup mode, as they avoid Ethereum's gas costs for data. This makes it ideal for high-frequency, low-value transactions like micro-payments and high-throughput DeFi and gaming applications, where users prioritize ultra-low cost.
The architecture addresses the central challenge of blockchain trilemma—balancing scalability, security, and decentralization—by offering a choice. It provides a pragmatic path to scale without forcing all activity onto a single data layer. While the zkRollup mode offers Ethereum-level security for high-value assets, zk-Porter provides a sovereign validity environment where the state's correctness is still proven by zero-knowledge proofs, but its data availability relies on a separate, incentivized network.
In practice, zk-Porter can be seen as a validium or a volition, a category of scaling solutions that use off-chain data availability. Its integration within the zkSync stack demonstrates a modular approach to scaling, where different components (execution, settlement, data availability) can be optimized independently. This design is a key part of the roadmap to make Ethereum scalable for mass adoption while preserving user choice and robust security models.
How zk-Porter Works
zk-Porter is a hybrid scaling solution that combines zero-knowledge proofs with a data availability committee to dramatically reduce transaction costs for users.
zk-Porter is a layer-2 scaling architecture, originally proposed for the zkSync protocol, that uses zero-knowledge proofs (ZKPs) to batch thousands of transactions into a single proof submitted to Ethereum, but differs from pure zkRollups by storing transaction data off-chain with a Data Availability Committee (DAC). This hybrid model—securing funds with cryptographic proofs on-chain while keeping data off-chain—enables transaction fees that are a fraction of a cent, making it viable for micro-transactions and mass adoption. The core trade-off is a shift in security assumptions from Ethereum's base layer to the honesty of the DAC members.
The system operates with two parallel channels: a zkRollup channel with full Ethereum-level security (data on-chain) and a zkPorter channel with lower security but minimal fees. Users explicitly choose which channel to use for their accounts. In the zkPorter channel, Guardians—a pre-selected, staking committee—are responsible for signing off on the availability of the transaction data for each new state batch. A state update is only accepted if a cryptographic proof of validity is verified on-chain and a sufficient threshold of Guardians attests to data availability. This prevents the operator from withholding data and freezing funds.
From a user's perspective, the experience is seamless. Wallets and dApps can abstract the choice between the secure rollup and the ultra-cheap porter account. However, the security model is distinctly different: zkPorter accounts are protected by cryptoeconomic security. Guardians stake substantial assets (e.g., the protocol's native token) which can be slashed for malicious behavior, such as signing for unavailable data. This creates a strong financial incentive for the committee to remain honest and available, though it introduces a trust assumption not present in pure rollups.
The primary advantage of zk-Porter is its extreme cost efficiency. By not publishing calldata to Ethereum—the main cost driver for rollups—it achieves estimated fees 100x lower than zkRollup mode. This makes it ideal for high-frequency, low-value applications like play-to-earn gaming, micropayments, and social media interactions on-chain. Its design is part of a broader exploration into validiums and volitions, which give users a choice between security and cost for different asset types or use cases within the same ecosystem.
In summary, zk-Porter represents a pragmatic scaling trade-off. It leverages Ethereum for ultimate settlement and proof verification while delegating data availability to a staked, incentivized committee. This architecture directly tackles the blockchain trilemma by offering a scalable, low-cost option without compromising on decentralization or security for users who opt for the full rollup experience, providing a flexible framework for application-specific needs.
Key Features of zk-Porter
zk-Porter is a hybrid scaling solution for the zkSync Era network, combining zero-knowledge proofs for security with a data availability committee for lower transaction costs.
Hybrid Data Availability
zk-Porter uses a hybrid data availability model. Critical transaction data is secured on-chain via the main zkSync Era rollup, while less critical data is managed by a decentralized Data Availability Committee (DAC). This separation allows users to choose between higher security (on-chain data) and lower fees (off-chain data).
Guardians & Economic Security
The off-chain data is secured by a permissionless set of Guardians who stake the network's native token. They cryptographically attest to data availability. If they act maliciously, their stake can be slashed, providing strong economic security for users who opt into the zk-Porter chain.
Ultra-Low Transaction Fees
By moving most data off the Ethereum mainnet, zk-Porter dramatically reduces gas costs. Transactions can cost less than $0.01, making it viable for micro-transactions and high-frequency use cases like gaming and social media, which are prohibitively expensive on Layer 1.
Native Account Abstraction
zk-Porter inherits zkSync Era's built-in support for account abstraction. This allows for features like:
- Sponsored transactions (gas paid by dApps)
- Batch transactions
- Social recovery and multi-sig wallets
- Custom security logic, improving user experience.
Seamless Composability
Assets can move trustlessly and instantly between the zkSync Era rollup (zkSync) and the zk-Porter chain. This creates a unified liquidity environment where developers can build applications that leverage the security of the rollup and the low costs of zk-Porter without fragmentation.
Volition Model (User Choice)
zk-Porter implements a volition architecture. For each transaction, users can choose the data availability layer:
- zkSync (Rollup Mode): Data on Ethereum, higher security, higher cost.
- zkPorter (Validium Mode): Data with Guardians, strong economic security, minimal cost. This puts the security-cost trade-off directly in the user's control.
zk-Porter vs. On-Chain Data Availability
A comparison of two primary data availability solutions for zk-rollups, focusing on security, cost, and performance trade-offs.
| Feature / Metric | zk-Porter (Off-Chain) | On-Chain (via Calldata) | On-Chain (via Blobs) |
|---|---|---|---|
Data Storage Location | zkSync Guardian Network | Ethereum Execution Layer | Ethereum Consensus Layer (Blobspace) |
Security Model | Cryptoeconomic (Guardian Staking) | Ethereum Consensus (Full Security) | Ethereum Consensus (Full Security) |
Primary Cost Driver | Guardian Service Fees | Ethereum Gas (Calldata) | Ethereum Blob Gas |
Cost per Byte (Estimate) | ~$0.0001 | ~$0.01 - $0.10 | ~$0.001 - $0.005 |
Throughput (TPS Impact) | Very High (100k+ TPS) | Low (< 100 TPS) | Medium (1k+ TPS) |
Data Availability Guarantee | Probabilistic (1-of-N honest Guardian) | Deterministic (Ethereum Finality) | Deterministic (Ethereum Finality) |
Withdrawal Period (Time to Challenge) | ~1 week | Instant (No Challenge Period) | Instant (No Challenge Period) |
Requires Active Monitoring |
Security Model & Considerations
zk-Porter is a hybrid scaling solution for zkRollups, combining a zkRollup data availability committee with a separate, high-throughput validium chain. This creates a trade-off between security and scalability.
Data Availability Committee (DAC)
The core security component of zk-Porter. A decentralized set of trusted entities, known as attesters, signs off on the availability of transaction data for the validium chain. Users must trust that a majority of this committee is honest and will not collude to withhold data, preventing state updates. This is a weaker security guarantee than having data posted directly to Ethereum L1.
Validium Mode
The high-throughput side of zk-Porter. Transactions are processed off-chain, and only a zero-knowledge validity proof (zk-SNARK) is posted to Ethereum. The transaction data itself is kept by the Data Availability Committee, not on-chain. This allows for massive scalability (e.g., ~20,000 TPS) and extremely low fees, but inherits the data availability risk of the DAC model.
zkRollup Mode
The fully secure, Ethereum-equivalent side of the system. Users can opt to have their assets secured in this mode, where all transaction data is published as calldata on Ethereum L1. This provides the same robust security and data availability guarantees as a canonical zkRollup, but with higher fees and lower throughput compared to Validium mode.
User-Selected Security
A key innovation of zk-Porter. Individual accounts or assets can choose their security model. A user can hold stablecoins in zkRollup mode for maximum safety while conducting high-frequency trades in Validium mode for low cost. This creates a flexible, application-specific security trade-off within a single unified ecosystem.
Data Withholding Attack
The primary security risk for assets in Validium mode. If the Data Availability Committee colludes to withhold transaction data, users cannot generate proofs to withdraw their funds. While validity proofs ensure no invalid state transitions, data availability is critical for liveness. Mitigations include using fraud proofs or cryptographic techniques like Proof of Data Possession (PoDP) to detect malicious committees.
Comparison to Volition
zk-Porter is a specific implementation of the broader volition architectural pattern, pioneered by StarkWare. A volition lets users choose per-transaction between zkRollup (data on-chain) and validium (data off-chain) security. zk-Porter implements this using a DAC for the validium data layer, whereas other designs might use alternative off-chain data availability solutions.
Etymology & History
The name **zk-Porter** reflects its core technological lineage, combining zero-knowledge proofs with a novel data availability architecture pioneered by the zkSync team.
The term zk-Porter is a portmanteau of zk (for zero-knowledge proofs) and Porter, a name chosen to evoke its role as a carrier or conduit for data. It was introduced by Matter Labs, the developers behind the zkSync Layer 2 scaling solution, as part of their zkSync 2.0 (later rebranded to zkSync Era) roadmap. The concept emerged as a direct response to the data availability problem, a primary cost bottleneck for scaling blockchains using validity proofs like ZK-Rollups.
Historically, ZK-Rollups require all transaction data to be posted on-chain (Layer 1) for verifiability, which incurs significant gas fees. zk-Porter proposed a hybrid model to drastically reduce costs. It splits the network into two distinct security "channels": a zkRollup channel with full Ethereum-level security and a zkPorter channel with a different data availability model. This design was a pivotal evolution, moving beyond a one-size-fits-all approach to scalability by offering users a choice between maximum security and minimum cost.
The key innovation was its guardian-based data availability committee (DAC). In the zkPorter channel, transaction data is not published to Ethereum but is held and attested to by a decentralized set of guardians who stake the native ZK token. This shifts the security assumption from pure cryptographic guarantees (like in a zkRollup) to a cryptoeconomic one, where malicious data withholding would result in the slashing of the guardians' stakes. This model drew inspiration from and aimed to improve upon earlier off-chain data solutions like Validium.
While the original zk-Porter architecture was a major part of zkSync's public discourse from 2020-2022, its implementation evolved. Core concepts, particularly the focus on alternative data availability solutions, directly influenced the development of zkSync Era's system architecture and the broader ecosystem's exploration of volition models, which let users choose their data storage layer. The term remains a historically significant marker in the development of Layer 2 scaling solutions.
Ecosystem Implementation
zk-Porter is a hybrid scaling solution for zkSync Era that combines zkRollup security with a separate, high-throughput data availability layer for ultra-low-cost transactions.
Hybrid Data Availability Model
zk-Porter's core innovation is its dual-layer data availability (DA) system. It separates users into two distinct security tiers:
- zkRollup accounts: Data is posted on-chain (Ethereum L1), inheriting full Ethereum security.
- zkPorter accounts: Data is posted to a separate, off-chain network of Guardians (zkSync token stakers) who cryptographically attest to data availability, enabling fees 100x lower than L1. Users can interact seamlessly between both account types within the same wallet.
Guardian Network & Economic Security
The security of zkPorter accounts is enforced by a decentralized network of Guardians. These are stakers of the zkSync token who must:
- Run a light client to monitor the zkPorter data availability chain.
- Provide continuous, signed attestations that data is available.
- Have their stake slashed if they sign an invalid state transition or become unresponsive. This creates a cryptoeconomic security model where the cost of attacking the network is tied to the total value staked.
Seamless User Experience & Composability
A key design goal is maintaining a unified experience. From a user's perspective:
- A single wallet can hold both zkRollup and zkPorter account types.
- Transactions between the two types are permissionless and nearly instant.
- Composability is preserved; a DeFi protocol can have liquidity pooled from users in both security tiers, as all state transitions are verified by the same zk-SNARK validity proof on Ethereum L1.
Target Use Cases & Fee Structure
zk-Porter is optimized for specific, high-volume applications where ultra-low cost is critical, even at a different security trade-off:
- Microtransactions & Gaming: Enables sub-cent fees for in-game item trades and actions.
- High-Frequency DeFi Swaps: For strategies where cost minimization is paramount.
- Social & Mass Adoption: Makes onboarding and frequent interactions economically viable. Fees are paid in the native token of the zkSync Era network and are dramatically lower than standard L2 transaction fees.
Comparison to Validium & Volition
zk-Porter is a specific implementation of a broader design pattern. It's important to distinguish:
- Validium: A general term for any zkRollup variant using off-chain data availability.
- Volition: A system (coined by StarkWare) where users choose per-transaction whether data goes on-chain or off-chain.
- zk-Porter: Matter Labs' implementation where the choice is at the account level, and the off-chain DA is secured by a Proof-of-Stake guardian network, differing from other Validium models that might use committees or DACs.
Common Misconceptions
zk-Rollups are a leading Layer 2 scaling solution, but their architecture and trade-offs are often misunderstood. This section clarifies frequent points of confusion, particularly around data availability, security models, and the differences between major implementations like zkSync and StarkNet.
No, a zk-Rollup's security is not inherently compromised by its data availability model; the critical distinction is between validium and rollup modes. A zk-Rollup posts all transaction data to the Ethereum mainnet as calldata, inheriting Ethereum's full security and data availability. A zk-Validium (like zkPorter's base layer) keeps data off-chain with a separate committee, trading some data availability assurance for lower fees. The zero-knowledge proof itself, which verifies state correctness, is always posted on-chain and is equally secure in both modes. The risk in validium mode is data unavailability, not proof invalidity.
Frequently Asked Questions
zk-Porter is a hybrid scaling solution for zkSync Era that combines the security of zkRollups with the low cost of Validiums. These questions address its architecture, security model, and practical use cases.
zk-Porter is a data availability solution for the zkSync Era L2 network that operates as a Validium, where transaction data is stored off-chain by a committee of Guardians instead of on Ethereum. It works by generating ZK-SNARK validity proofs for transaction batches that are posted to Ethereum's L1, guaranteeing computational correctness, while the associated data is made available through a separate, permissioned network. This separation allows for drastically lower transaction fees compared to a standard zkRollup, as users avoid paying for L1 data storage, but it introduces a different security assumption regarding data availability.
Get In Touch
today.
Our experts will offer a free quote and a 30min call to discuss your project.