ZKM + GOAT Network: An End-to-End Stack for Bitcoin-scaling

Share on

A question that frequently arises is: “What is the relationship between ZKM and GOAT Network?”

ZKM built the core proving and execution stack - Ziren (ZKM’s MIPS-based zkVM), the distributed prover, and the verification toolchain - that underpins GOAT Network. GOAT is the first production deployment where Ziren is the default proving engine across the system: proving L2 state transitions, securing the native bridge, and enabling low-latency proof generation for Bitcoin-aligned flows.

In short: ZKM provides the core ZK infrastructure; GOAT Network operationalizes it as the primary, end-to-end user of Ziren. 

The beginning

As outlined in CEO Kevin Liu’s article in May ‘24, which explored how a general-purpose zkVM can achieve network effects, ZKM’s strategy has been straightforward: validate Ziren in a real network to drive adoption and network effects, similar to how early L2 success pulled open stacks into broad use.

As ZKM’s roadmap shifted from hybrid rollups to solving liquidity fragmentation via Entangled Rollups, Bitcoin became the first integration target given its large idle liquidity and settlement gravity. GOAT Network was born - the Bitcoin-native rollup adopting Ziren as its proving backend to anchor security, performance, and predictable settlement.

Why is Ziren a good fit for Bitcoin L2 design?

“Ziren is well-suited for research and development of MIPS-based zero-knowledge applications, particularly Bitcoin L2 implementations” - Prooflab Research Collective

In order to preserve invariants across upgrades, align trade-offs among proof size, latency, and cost with the target networks, and prevent circuit rework driven by external API changes, ZKM kept ownership of the core zkVM rather than outsourcing it.

And furthermore, the ISA choice matters. In the beginning, there was only one other general-purpose zkVM in development - and it was built on top of the RISC-V ISA. The ZKM founders decided that it was necessary to build a zkVM using MIPS, with primary considerations being its stability, dense opcodes, and predictable circuit footprints - factors that reduce guest-side friction for systems code and crypto workloads common in rollup infra. On the verification side, STARKs provide speed and a post-quantum-aligned core; recursive compression plus optional SNARK wrapping offers multiple settlement paths, including cost-efficient verification environments.

This combination aligns with Bitcoin-anchored rollups that need verifiable bridges and consistent settlement bounds - and Ziren is still the only production-ready MIPS-based zkVM on the market.

What does Ziren contribute to GOAT Network in practice?

Ziren provides the guest execution environment (MIPS32r2), arithmetization (AIR/FRI), and a proving pipeline designed for throughput and flexible verification. Proofs can be STARK-native for speed and post-quantum alignment, recursively compressed for constant-size outputs, and optionally wrapped on BN254 for practical on-chain verification. The distributed prover coordinates CPU/GPU workers to meet latency targets, and a WASM verifier supports browser-level checks - useful for light clients and user-facing proof confirmations.

These properties map cleanly to Bitcoin L2 requirements: fast off-chain proving, deterministic verification costs, and verifiable bridge mechanics.

The end state

With Ziren as its proving engine, GOAT Network becomes the central hub for off-chain Bitcoin activity: L2 execution secured by proofs and a native bridge with verifiable state transitions.

Its decentralized sequencer model is the basis for sustainable BTC yield: sequencer revenues (ordering fees, protocol fees, and proof-attested bridge/settlement fees) are BTC-denominated and flow to participants according to transparent, on-chain rules, without inflationary emissions.

Real-time proving keeps UX responsive while preserving verifiability, making GOAT the coordination layer for Bitcoin-aligned applications rather than a siloed sidechain.

What to watch out for next

ZKM’s near-term roadmap includes broader guest support and simpler verifier interfaces relevant to Bitcoin rollups, plus BitVM-aligned bridge components. GOAT Network will continue to operationalize these capabilities to deliver verifiable state transitions and predictable settlement for end users.

For contributors and developers evaluating the stack, defer to ZKM’s technical posts for history and rationale, and to ProofLab’s evaluation for an external read on current performance and risks.

The bottom line: ZKM supplies the zkVM and proving infrastructure; GOAT Network is the first full-stack production user applying Ziren to Bitcoin-centric L2 design and operations.

More articles
没有桥梁的跨链资产转移——第一部分
为了完成跨链资产转移,目前可用的大多数解决方案都基于桥梁,即一个独立的中间实体,通常信任该实体在交易的某个时期持有这些资产。这种信任假设是不可取的,因为它提供了很大的攻击机会。在这篇文章中,我将解释,假设存在 zkRollup,人们无需额外的信任假设(例如桥梁)即可实现跨链资产转移。
通用的 zkVM 如何实现网络效果?
正如安德鲁·陈(a16z)在《冷启动问题》一书中定义的那样,网络效应描述了当产品随着使用者越来越多而变得更有价值时会发生什么。作为一个核心基础设施项目的创始人,该项目正在构建一个通用 zkVM 来统一区块链间的流动性,如何为较低层基础设施项目实现网络效果是我整天都在思考的问题。
ZKM + GOAT Network: An End-to-End Stack for Bitcoin-scaling

A question that frequently arises is: “What is the relationship between ZKM and GOAT Network?”

ZKM built the core proving and execution stack - Ziren (ZKM’s MIPS-based zkVM), the distributed prover, and the verification toolchain - that underpins GOAT Network. GOAT is the first production deployment where Ziren is the default proving engine across the system: proving L2 state transitions, securing the native bridge, and enabling low-latency proof generation for Bitcoin-aligned flows.

In short: ZKM provides the core ZK infrastructure; GOAT Network operationalizes it as the primary, end-to-end user of Ziren. 

The beginning

As outlined in CEO Kevin Liu’s article in May ‘24, which explored how a general-purpose zkVM can achieve network effects, ZKM’s strategy has been straightforward: validate Ziren in a real network to drive adoption and network effects, similar to how early L2 success pulled open stacks into broad use.

As ZKM’s roadmap shifted from hybrid rollups to solving liquidity fragmentation via Entangled Rollups, Bitcoin became the first integration target given its large idle liquidity and settlement gravity. GOAT Network was born - the Bitcoin-native rollup adopting Ziren as its proving backend to anchor security, performance, and predictable settlement.

Why is Ziren a good fit for Bitcoin L2 design?

“Ziren is well-suited for research and development of MIPS-based zero-knowledge applications, particularly Bitcoin L2 implementations” - Prooflab Research Collective

In order to preserve invariants across upgrades, align trade-offs among proof size, latency, and cost with the target networks, and prevent circuit rework driven by external API changes, ZKM kept ownership of the core zkVM rather than outsourcing it.

And furthermore, the ISA choice matters. In the beginning, there was only one other general-purpose zkVM in development - and it was built on top of the RISC-V ISA. The ZKM founders decided that it was necessary to build a zkVM using MIPS, with primary considerations being its stability, dense opcodes, and predictable circuit footprints - factors that reduce guest-side friction for systems code and crypto workloads common in rollup infra. On the verification side, STARKs provide speed and a post-quantum-aligned core; recursive compression plus optional SNARK wrapping offers multiple settlement paths, including cost-efficient verification environments.

This combination aligns with Bitcoin-anchored rollups that need verifiable bridges and consistent settlement bounds - and Ziren is still the only production-ready MIPS-based zkVM on the market.

What does Ziren contribute to GOAT Network in practice?

Ziren provides the guest execution environment (MIPS32r2), arithmetization (AIR/FRI), and a proving pipeline designed for throughput and flexible verification. Proofs can be STARK-native for speed and post-quantum alignment, recursively compressed for constant-size outputs, and optionally wrapped on BN254 for practical on-chain verification. The distributed prover coordinates CPU/GPU workers to meet latency targets, and a WASM verifier supports browser-level checks - useful for light clients and user-facing proof confirmations.

These properties map cleanly to Bitcoin L2 requirements: fast off-chain proving, deterministic verification costs, and verifiable bridge mechanics.

The end state

With Ziren as its proving engine, GOAT Network becomes the central hub for off-chain Bitcoin activity: L2 execution secured by proofs and a native bridge with verifiable state transitions.

Its decentralized sequencer model is the basis for sustainable BTC yield: sequencer revenues (ordering fees, protocol fees, and proof-attested bridge/settlement fees) are BTC-denominated and flow to participants according to transparent, on-chain rules, without inflationary emissions.

Real-time proving keeps UX responsive while preserving verifiability, making GOAT the coordination layer for Bitcoin-aligned applications rather than a siloed sidechain.

What to watch out for next

ZKM’s near-term roadmap includes broader guest support and simpler verifier interfaces relevant to Bitcoin rollups, plus BitVM-aligned bridge components. GOAT Network will continue to operationalize these capabilities to deliver verifiable state transitions and predictable settlement for end users.

For contributors and developers evaluating the stack, defer to ZKM’s technical posts for history and rationale, and to ProofLab’s evaluation for an external read on current performance and risks.

The bottom line: ZKM supplies the zkVM and proving infrastructure; GOAT Network is the first full-stack production user applying Ziren to Bitcoin-centric L2 design and operations.