Introduction to ZK-Rollup
Last updated
Last updated
The DeGate protocol is a trading protocol designed to achieve high throughput while minimizing gas costs. The protocol uses zkSNARKs technology to generate zero-knowledge proofs after processing requests off-chain, and submits the proofs on-chain for verification and data availability.
A crucial component of the protocol, the Operator is mainly responsible for：
Producing zkBlocks: The Operator processes each batch of ZK-Rollup events based on predetermined rules and generates zkBlocks.
Generating zero-knowledge proofs: The Operator calls the circuit to generate proofs for zkBlocks.
Submitting zkBlock data: The Operator calls Postman to submit zkBlocks data to the on-chain smart contract to confirm state changes.
Off-chain transactions that require zero-knowledge proof and verification in the DeGate protocol include the following:
No-op
Null transactions used to fill zkBlocks that are not fully filled with off-chain transactions
AccountUpdate
This allows users to create or update their account asset private key
AppKeyUpdate
This allows users to create, update, and configure the trading private key's permissions
SpotTrade 1️
The off-chain matching of two orders
BatchSpotTrade
The aggregation of SpotTrade is performed by the operator to increase transaction throughput and lower the on-chain cost for users
OrderCancel 2️
This allows users to perform an on-chain order cancellation operation which guarantees that the order can never be used by the operator for order matching
Add
This confirms the user's L1 fund addition which will credit the user's balance in L2
Send
Move the user's asset from L2 to L1
Transfer
Assets are moved between two L2 accounts
1️: Orders are not directly submitted on-chain. This only happens when an order is filled.
2️: Cancelling an order or a grid strategy involves only informing the trading system of the cancellation with a user’s signature without any proofs submitted on-chain. Therefore, it is not a ZK-Rollup event. To prevent the DeGate node from “doing evil” with the signature a user provides when placing the order, DeGate provides a OrderCancel method, which allows the user to request the submission of a proof that the order has been cancelled.
zkBlocks can be regarded conceptually as DeGate’s “L2 block”. Depending on the number of events, one or more sequential zkBlocks are generated for each batch of events that the Operator processes. These zkBlocks are then passed to the circuit for zk-proof computation.
This is not a physical circuit, but a zkSNARK circuit. The Circuit is responsible for describing events that require zero-knowledge proofs, such as order completions and deposits, and thus an important part of zero-knowledge proofs. The Circuit receives inputs, and the input signal generates an output through the path of the electric gate to produce zk-proofs for the corresponding zkBlocks.
To improve computing and storage efficiencies, DeGate has implemented data selection and compression. As Merkle tree balances complexity, computing time, and user-friendliness, the protocol has created two Merkle trees: Entire Merkle Tree and Asset Merkle Tree.
The Entire Merkle Tree ensures the data security of DeGate protocol as it records all the information regarding accounts, assets, and transactions on DeGate.
The Asset Merkle Tree guarantees users’ self-custody of their assets. Even when the DeGate node operator cannot provide any services, users can still withdraw their assets safely. The Asset Merkle Tree records all DeGate accounts and assets information.
Once the zk proof of a zkBlock is generated, the Operator calls the submitBlocks method of the DeGate smart contract through Postman to submit zkBlock-related data on-chain for confirmation of status change (multiple zkBlocks can be submitted simultaneously in strict accordance with the sequence of block generation ). These data mainly include:
The root hash of the Entire Merkle Tree
The root hash of the Asset Merkle Tree
Zero-knowledge proofs
Change of account permissions and asset balance
Additional data for deposit, withdrawal, and account update transactions
As the Node operator has to pay ETH as Gas to submit zkBlocks on-chain, users will be charged gas fees.
The on-chain DeGate smart contract is responsible for storing user funds, verifying the zero-knowledge proofs submitted by the off-chain node and storing the latest Merkle tree roots. It consists of multiple contracts, the main contracts of which are:
Exchange: interactions where the Operator submits zkBlock or users’ deposits or mandatory withdrawals.
Deposit: stewarding the assets deposited by users, and providing the providing the functions of deposit, withdrawal and transfer.
Loopring: the Exchange contract parameters configuration.
BlockVerify: registering verifying key and verifying zero-knowledge proofs.
The Operator calls the DeGate smart contract through Postman, and submits zkBlocks' data on chain in strict accordance with the sequence of zkBlocks generation.
Observing all on-chain transactions of the DeGate smart contract, such as fund additions, mandatory withdrawals, and Rollup transactions, and notifying the node after a transaction is confirmed.
The above is a brief description of the ZK-Rollup part of the DeGate protocol. For more information, please refer to the protocol design document.
