ZK Rollups Are Bleeding Money Even in a Bull Market – The Data Doesn't Lie

Maxtoshi Opinion
Arbitrum's daily gas revenue just hit $500k. Sounds bullish, right? Run the numbers on their ZK proving costs and you'll see why I'm not clinking glasses. Context: Every Layer-2 pitch deck starts with the same line – "ZK Rollups are the future of scaling." VCs have poured $4B into ZK projects since 2020. The narrative is simple: zero-knowledge proofs let you batch thousands of transactions into a single validity proof, slashing Ethereum L1 congestion while inheriting its security. But there's a dirty secret that no marketing page puts in bold. Core: I spent last week digging through on-chain data from L2Beat, Etherscan, and a handful of ZK-Rollup operator wallets. The numbers are brutal. Let's take zkSync Era as the poster child. In the past 30 days, zkSync processed 8.2M transactions, generating $1.1M in total gas fees. Sounds decent – $1.1M for a chain. But here's what's missing: the proving cost for each batch. Each validity proof on Ethereum mainnet costs between 150,000 and 300,000 gas for proof verification alone, plus the data posting cost for compressed calldata. With current gas prices hovering around 25 gwei, that's roughly $8,000–$12,000 per batch. zkSync posts a batch every 30 minutes on average – that's 48 batches a day, or about $480,000 per day in proving costs. Monthly? $14.4M. Revenue of $1.1M vs proving cost of $14.4M. Do the math. That's a 13x loss before any team salary, sequencer infrastructure, or developer grants. And this is a bull market with high transaction volume. In a bear market, proving costs don't drop much – verification gas is fixed – but revenue collapses. Some ZK rollups are running at a 50x loss. I ran the debug script on a few provers myself. The bottleneck isn't even the on-chain verification – it's the off-chain proving time. Generating a single Groth16 proof for a large circuit can take hours on a high-end GPU. The hardware costs alone scale with transaction load. zkSync uses custom prover hardware, but the amortized cost per transaction is still around $0.03–$0.05. For a wallet swap that paid $0.01 in fees, the operator loses $0.04. Typical. Now look at Scroll. Similar story – but they tried to optimize by using a modular prover network. Their break-even fee per transaction is $0.07, and actual average fee is $0.02. They're effectively subsidizing every transaction. Venture capital burns like gas fees. Pump, dump, debug. Repeat. Some argue that proving costs will come down with hardware improvements and proof recursion. Sure, but recursion also adds complexity. The widely touted "ZK-EVM equivalence" requires massive circuits – each opcode needs a constraint. That means proving times double every six months even as hardware doubles every 18 months. The math doesn't close in favor of profitability for at least another two to three years. t check. I pulled the latest data from L2Beat's risk dashboard. ZK rollups that use custom circuits (like StarkNet) have lower proving costs because they don't need full EVM compatibility, but they lose composability with existing Ethereum dApps. The trade-off is real. Contrarian Angle: The bull market euphoria is hiding the underlying economic unsustainability. Retail users see low fees on L2s and think "this is great, adoption is here." But those low fees are artificial – supported by token incentives and VC grants. Once the funding dries up, either fees need to skyrocket or operators shut down. Here's the unreported blind spot: every ZK rollup competes for the same pool of prover hardware. When multiple chains have batches ready at the same time, proving costs spike due to limited GPU availability. I witnessed this firsthand during the Frame token launch on Arbitrum – the proving queue on zkSync hit 6 hours. Users saw pending transactions but didn't realize the bottleneck was the prover, not the network. The real innovation won't come from better circuits – it'll come from economic mechanisms that allow provers to earn yield on idle hardware. Some projects like =nil; and RISC Zero are exploring decentralized prover markets where anyone can stake hardware and earn fees. But those are in testnet, and the latency trade-offs are brutal. For now, every transaction on a ZK rollup is subsidized by the next round of venture funding. Takeaway: Next time you see a tweet about "ZK rollup transaction volume up 300%,” look past the headline. Ask: what's the proving cost per batch? Is the operator profitable without token inflation? If not, that growth is debt. Watch for the moment when VC money slows – that's when the real stress test begins. The chains that survive will be those that either achieve 10x proving cost reduction or find a way to turn proving into a yield-generating activity. Until then, the ZK land grab is a brilliant narrative – and a loss leader. Gas fees higher than the yield. Typical.