In the race to inherit and build on Native Bitcoin Security, we've seen accelerating progress on multiple fronts. First, @robin_linus introduced BitVM. Then, he published an exciting update, with BitVM2. Then, we unveiled GOAT BitVM2, a breakthrough that turbo-charged BTCFi and enabled sustainable BTC yield, via zkRollup (rather than MPC). GOAT BitVM2 combined both tech and economic standards to create a new Bitcoin zkRollup standard, solving the operator double-spending issue and introducing multi-round randomized challenges to improve challenge efficiency. At the Bitcoin Economy Conference by @HouseofZK (part of Bitcoin Vegas 2025), Linus revealed his new idea: BitVM3, which leverages Garbled Circuits to optimize fraud proofs. He then published the first BitVM3 paper earlier this month. Today, we're proud to present a breakthrough in Bitcoin security and scalability, with a new iteration of BitVM3. Here are a few ways that our BitVM3 update changes the landscape for Bitcoin: 1) Without any security compromises, BitVM3 is much more practical compared to BitVM2; BitVM3 makes Bitcoin zkRollup feasible, while BitVM3 makes Bitcoin zkRollup practical. BitVM3 significantly accelerates the mass adoption of Bitcoin zkRollups. Conservatively speaking, When Robin Linus first published his BitVM standard, he estimated 5 to 10 years to push BitVM2 to a real-world use case. BitVM3 slashes that timeframe, down to 6-12 months. 2) Core difference: BitVM2's script size is up to roughly 1GB. That means it needs the Bitcoin Network to support non-standard transactions (NST) for a challenger to post a fraud proof. BitVM3's fraud proof transaction size, on the other hand, is less than 200KB, which means we no longer need to reply on NSTs. This smaller script size also incentivizes more and more challengers to submit optimistic challenges. This is consistent with one of GOAT's core philosophies: create the right economic model for challengers and other network participants, and you get more people working together to improve the liveness and security of the zkRollup. tl;dr - For our approach, compared to the first BitVM3 paper (by Robin Linus), we achieve: -- 1,000x reduction in off-chain data size (from hundreds of gigabytes to just a few megabytes); -- Reusable garbled circuits with no pre-set usage limits; -- ZK proofs for label commitment consistency of inputs and outputs only, avoiding expensive full circuit proofs generation. So what does all this mean for builders, and BTCFi users, on GOAT? Our BitVM3-based Bitcoin zkRollup extends Bitcoin from the consensus layer to the application layer. This enables any off-the-shelf BTCFi applications to be deployed quickly, securely, and easily on GOAT Network. Given that BTC stakers earn real, sustainable BTC yield on GOAT in a variety of ways (from self-custody to more advanced liquid staking and borrow/lend options, with room for many more), that's great news for everyone who wants to advance Bitcoin's core mission and reach, or just stack Sats!

For a deeper technical dive into our BitVM3 update, check out our latest update on our GOAT Blog: And read our latest BitVM3 Paper, by GOAT Network Tech Lead @sd_eigen and collaborators, here: