Make bitcoin usable in lending and trading apps without trusting a custodian, by settling a fast app chain on Bitcoin and guarding the bridge so that a single honest party can block any theft.
Mainnet since Jan 27, 2026; ~$12M in DeFi deposits (Jun 2026); one sequencer, BitVM bridge live.
Updated 4 Jun 2026Checked 11 Oct0 updates this week
BTC goes to a Taproot address the signers control; if it isn't moved into the vault within 200 blocks, the user can take it back.
cBTC is the gas token; a sequencer orders transactions in 2-second blocks, and the chain's state is proven with zero-knowledge proofs.
On withdrawal an operator pays the user on Bitcoin, then claims repayment from the vault by posting a KickOff transaction.
For ~1.5 days anyone may challenge a claim; disputes are settled step by step on Bitcoin, and a cheating operator loses its whole bond.
| Spec | Citrea rollup and Clementine bridge |
|---|---|
| Block time | 2 sR (reported) |
| Block gas limit | 10MR (reported) |
| Bridge operator bond | ~2 BTCR (reported) |
| Payout challenge window | ~1.5 daysR (reported) |
| Bridge safe unless attacker holds | >45% of hash rate for 2 weeksR (reported) |
| DeFi deposits (Jun 2026) | ~$12MR (reported) |
| ctUSD supply (26 May 2026) | ~$24MR (reported) |
R reported by the company
Citrea (Chainway Labs)
Bitcoin ZK rollup, Clementine BitVM bridge
Citrea, built by Chainway Labs, is a zero-knowledge rollup that settles on Bitcoin: it runs Ethereum-style apps on its own chain and posts proofs and data to Bitcoin. Its Clementine bridge uses BitVM so that one honest participant can stop theft.
