What Is an Optimistic Rollup?
An optimistic rollup works on a simple principle: assume every batch of transactions is valid unless someone proves otherwise. Operators process transactions off-chain in large batches, then post a short commitment — a block header — to the L1. The network gives anyone a window of time to challenge that commitment by submitting a fraud proof. If no valid challenge arrives, the batch is finalized. The word “optimistic” reflects the default assumption of honest behavior. The system is safe because any single honest watcher can catch and penalize dishonest operators, and the economics make cheating unprofitable.How the Sundial L2 Works
Operators run Sundial L2 nodes that maintain a local copy of the L2 ledger. When you submit a transaction, it enters the operator’s mempool. The operator gathers transactions, applies them to the ledger, and seals a new block. The block header — containing Merkle root hashes of the ledger state — is then posted to the L1 state queue contract.Block Headers and Merkle Patricia Tries
Every L2 block header contains Merkle Patricia Trie (MPT) root hashes. Think of an MPT as a highly efficient fingerprint of an entire dataset: it compresses the complete ledger state, transaction set, deposits, and withdrawals into a handful of short hashes. Anyone who has access to the underlying data can verify in seconds that a specific transaction is included — or that a block’s claimed state is inconsistent with its transactions. This structure is what makes fraud proofs practical. A watcher does not need to replay every transaction on-chain; they only need to pinpoint the exact step where the operator’s state transition diverges from the correct one. The deterministic UTxO execution model makes this pinpointing cheaper and more reliable than on account-based chains.The Maturity Period and Fraud Proofs
After a block header lands in the state queue, it enters a challenge window (also called the maturity period). During this time:- Watchers — particularly Provers — independently re-execute the block’s transactions against the claimed MPT roots.
- If a watcher finds an inconsistency, they submit a fraud proof to the L1 fraud-proof contracts.
- A successful fraud proof results in the invalid block being rejected and the dishonest operator’s entire bond being awarded to the challenger.
- If the challenge window closes with no valid challenge, the block is merged into the confirmed state and becomes final.
Transaction Throughput
The Sundial L2 imposes no hard protocol ceiling on transactions per second. Throughput scales with operator hardware and block size. Current benchmarks and targets are:
Throughput grows in two ways: increasing block size (more transactions per block at constant on-chain cost, since headers are fixed-size) and increasing operator commitment requirements (faster hardware, better connectivity). The L2 architecture is designed to be compatible with future L1 scaling enhancements — such as Hydrozoa/Gummiworm-style state channels — that could push throughput beyond 20,000 TPS.
Latency and Finality
- Transaction Latency
- Practical Finality
- True Finality
Latency is the time from submitting a transaction to it appearing in a confirmed block. In normal operation:
- Your transaction propagates to the operator node over the network.
- The operator includes it in the next block, typically within 20 seconds (one L1 slot interval).
- The block header is posted to the L1, making the transaction visible on-chain.
User Event Types
The Sundial L2 recognizes four types of user events that operators pick up from L1 and process into blocks:Deposits
You lock funds in the L1 deposit contract. The operator includes the deposit event in the next L2 block, crediting your L2 balance.
Transaction Requests
Standard L2 transactions submitted directly to an operator node. Processed on a best-effort basis in block order.
Transaction Orders
Guaranteed-inclusion transactions posted via the L1 contract. The operator is obligated to include these in the next eligible block, giving you censorship resistance even if an operator is uncooperative.
Withdrawals
You initiate a withdrawal on L2. After the challenge window, the L1 contract releases your funds back to your L1 address. Facilitator watchers can front the liquidity for immediate settlement.
The Escape Hatch
If the network stalls — for example, if no operator produces blocks for an extended period — the escape hatch activates. This is a special mechanism in the L1 contracts that allows you to exit the L2 and reclaim your funds directly on L1, without needing any operator’s cooperation. Your assets are never trapped.Why the UTxO Model Helps
Fraud proofs on account-based chains require replaying entire execution traces on-chain, which is expensive. On the L1, every script execution is deterministic: the same inputs always produce the same outputs, with no hidden global state. This means:- A fraud proof only needs to identify the single UTxO-level step where the operator went wrong.
- The on-chain verification is a targeted, bounded computation — not a full replay.
- Verification costs are low and predictable, making it economically viable for any watcher to challenge invalid blocks.
Related Pages
Architecture
How the L2 fits into Sundial’s 7-layer protocol stack
Network Roles
Operators, Provers, and Facilitators who keep the L2 running
Tokenomics
Operator bonds, fraud-proof rewards, and the wBTC fee model