Ethereum Layer 2s Explained: Arbitrum, Base, Optimism & the Rollup Thesis
Why L2 rollups exist, how optimistic and ZK rollups differ, what actually secures your funds on Base or Arbitrum, and how to choose a chain for DeFi.
Ethereum settled on a scaling strategy years ago: keep the base layer maximally secure and decentralized, and push cheap, fast activity to Layer 2 rollups. Today most Ethereum DeFi transactions happen on L2s like Arbitrum, Base, and Optimism, with fees measured in cents. Here's how the machinery actually works and what it means for your funds.
What a rollup is
A rollup executes transactions on its own fast chain, then posts compressed transaction data back to Ethereum. Ethereum becomes the court of final settlement: even if every rollup operator vanished, the posted data lets anyone reconstruct the chain's state and exit with their funds. That inheritance of Ethereum's security is what separates a rollup from a mere sidechain — a sidechain (like Polygon PoS) has its own validators and its own, weaker security budget.
Optimistic vs. ZK rollups
Optimistic rollups (Arbitrum, Base, OP Mainnet) assume batches are valid but leave a ~7-day window during which anyone can submit a fraud proof against an invalid state. That window is why withdrawing to mainnet through the canonical bridge takes a week (third-party fast bridges front you the money for a fee — see our bridge guide).
ZK rollups (zkSync-style, Linea, Scroll, Starknet) post a cryptographic validity proof with every batch — Ethereum verifies the math before accepting it, so withdrawals need no challenge window. Historically harder to build for EVM compatibility; steadily catching up and widely considered the endgame design.
What you're actually trusting today
Rollup security is a spectrum, not a checkbox. In practice most major L2s still have training wheels:
- Sequencer centralization. One operator typically orders transactions. It can't steal funds, but it can go down (halting the chain) or censor briefly; forced-inclusion mechanisms via L1 exist as escape hatches.
- Upgrade keys. Many rollups can be upgraded by a multisig or security council. Whoever holds the keys could, in the worst case, deploy malicious code — mature L2s mitigate with timelocks and councils, and the ecosystem tracks each chain's "stage" of decentralization.
None of this has caused a major user-fund loss on a top rollup to date, but "secured by Ethereum" comes with asterisks worth knowing.
Choosing an L2 for DeFi
- Liquidity and apps: Arbitrum has the deepest DeFi ecosystem; Base has the fastest user growth and Coinbase's on-ramp; OP Mainnet anchors the Superchain family. Compare live TVL on our chains page.
- Fees: all are cents-level since EIP-4844 gave rollups cheap blob data; differences rarely matter for normal use.
- The same address works everywhere. Your wallet address is identical across EVM L2s — convenient, but double-check you're sending on the chain you intend, and track balances across all of them with our wallet tracker.
Bottom line
L2s made Ethereum DeFi affordable again without abandoning its security model. Use canonical bridges when patience allows, know who holds each chain's upgrade keys, and treat the L2 landscape as one ecosystem — capital, apps, and your own address flow across all of it.
Related articles
This article is for educational purposes only and is not financial advice. DeFi involves significant risk, including total loss of funds. Always do your own research.