BitcoinOS Grail Bridge on LitVM

The BitcoinOS Grail Bridge is a trustless bridge protocol that enables native Litecoin (LTC) to move directly onto LitVM without a centralized custodian or multisig federation. It locks LTC in Taproot scripts on the Litecoin mainchain and mints zkLTC at a 1:1 ratio using BitSNARK verification with a 300-byte zero-knowledge proof. This architecture operates under a 1-of-n honest verifier security model, meaning the bridge remains secure as long as at least one participant in the verifier set acts honestly.

LitVM operates as a hybrid rollup rather than a pure zkRollup, combining optimistic execution via Arbitrum Nitro with validity proofs from the Succinct SP1 zkVM. The Grail Bridge acts as the native asset gateway for the network, providing the base gas token—zkLTC—while preserving the underlying security guarantees of the Litecoin mainchain.

Mechanism: Taproot, BitSNARK, and zkLTC Minting

Traditional cross-chain bridges rely on trusted federations, centralized custodians, or threshold signature schemes to hold locked assets. The Grail Bridge eliminates these intermediaries through zero-knowledge cryptography implemented directly on UTXO-based chains using BitcoinOS technology.

The bridging lifecycle follows a deterministic, non-custodial sequence:

1. Locking LTC: A user sends LTC to a specialized Taproot address on the Litecoin mainchain. This address is controlled by script logic rather than an external keyholder or multisig committee.
2. Proof Generation and Verification: BitcoinOS BitSNARK generates a zero-knowledge validity proof verifying the deposit. The resulting proof is compact, measuring roughly 300 bytes in size, which allows verification without overloading the settlement environment.
3. Minting zkLTC: Upon proof verification, LitVM mints zkLTC at an exact 1:1 ratio. The supply of zkLTC is elastic, expanding and contracting strictly in sync with the volume of LTC locked on the mainchain.
4. Redemption and Unlocking: When a user bridges back to Litecoin L1, zkLTC is burned on LitVM. The 1-of-n verification network confirms the burn, which satisfies the Taproot spending script on the Litecoin mainchain and releases the locked LTC back to the user's L1 address.

Because zkLTC is backed 1:1 by mainchain LTC and serves as the network's gas token, transaction fees on LitVM are denominated in an asset the rollup itself cannot arbitrarily issue or inflate.

Security Model: 1-of-n Verification vs. Multisigs

Conventional cross-chain bridges often use an m-of-n threshold signature scheme (such as 5-of-9 or 12-of-20 multisigs), where a compromised majority of signers can steal the underlying collateral. The Grail Bridge uses a 1-of-n honest verifier model backed by BitSNARK proofs.

Under a 1-of-n model, collateral cannot be stolen unless every single verifier in the network is compromised or colludes. If even one verifier remains honest, fraudulent withdrawal attempts are rejected and invalid state transitions cannot unlock the Taproot-secured LTC on the mainchain.

Feature	BitcoinOS Grail Bridge	Traditional Wrapped Asset Bridges	Arbitrum Bridge on LitVM
Target Assets	Native LTC	BTC, LTC, or other L1 assets	ETH, USDC, USDT, ERC-20 tokens
Custody Model	Non-custodial (Taproot script)	Centralized custodian or multisig	Smart contract escrow
Trust Assumption	1-of-n honest verifier	m-of-n honest majority / trusted party	Optimistic-plus-ZK hybrid
Cryptographic Proof	300-byte BitSNARK proof	None (signatures only)	Nitro assertions + SP1 proofs
Minted Asset	zkLTC (1:1 backing)	Wrapped token (e.g., wLTC)	Bridged ERC-20 assets
Underlying Collateral	Locked on Litecoin L1	Held in centralized reserves / multisig	Locked in settlement contracts

Dual Bridge Architecture on LitVM

LitVM maintains two separate bridging mechanisms to handle native Litecoin liquidity and EVM-native assets independently.

While the Grail Bridge is dedicated exclusively to native LTC and zkLTC, the network uses the Arbitrum Bridge for EVM assets including ETH, USDC, USDT, and standard ERC-20 tokens. The Arbitrum Bridge relies on bridge contracts operating under an optimistic-plus-ZK trust model. Separating these pathways ensures that EVM-specific asset logic remains isolated from the non-custodial UTXO locking mechanics of the Litecoin base layer.

Bridge Operations Across Settlement Phases

The Grail Bridge operates across all three scheduled settlement phases of LitVM:

• Phase 1 (Settlement on Ethereum): LitVM launches with execution on Arbitrum Nitro and proving via SP1 zkVM, settling batches on Ethereum. During this phase, both the Grail Bridge and the Arbitrum Bridge are fully active, with Espresso handling permissionless sequencing and zkLTC serving as the gas token.
• Phase 2 (Dual Anchoring to Litecoin): Finalised transaction batches are additionally anchored to the Litecoin mainchain using standard extended transactions to inscribe proofs, without requiring hard forks or changes to the Litecoin protocol.
• Phase 3 (Canonical Litecoin Settlement): LitVM migrates its canonical settlement layer entirely off Ethereum to Litecoin, where finality is secured directly by Litecoin's Scrypt proof-of-work consensus.

Current Status and Operational Facts

As of 15 August 2026, the LitVM network operates on its testnet, LitVM LiteForge (Chain ID 4441, EVM version Shanghai), which has processed 237.1 million transactions across 40.5 million blocks and 13.1 million unique wallets since launching in April 2026. Mainnet has not yet launched and will follow third-party security audits and the Token Generation Event (TGE).

The network's governance token, $LITVM, does not exist as a tradeable asset. Any token currently circulating under the $LITVM ticker is fraudulent. The official $LITVM token will be generated following the testnet phase, with 51% of its fixed supply allocated to the community under the oversight of a five-seat Treasury Board.

Questions

How does the Grail Bridge move LTC without a custodian?

The Grail Bridge uses BitcoinOS BitSNARK technology to lock native LTC in Taproot scripts on the Litecoin mainchain. It produces 300-byte zero-knowledge proofs verified under a 1-of-n honest verifier model, allowing zkLTC to be minted 1:1 on LitVM without relying on a multisig or centralized custodian.

What is the difference between the Grail Bridge and the Arbitrum Bridge on LitVM?

The Grail Bridge handles native LTC, locking it via Taproot and minting zkLTC with BitSNARK proofs under a 1-of-n security assumption. The Arbitrum Bridge separately handles EVM-native assets like ETH, USDC, USDT, and ERC-20 tokens through smart contracts governed by an optimistic-plus-ZK trust model.

What does a 1-of-n security model mean for the Grail Bridge?

In a 1-of-n security model, the bridge remains secure and funds cannot be stolen as long as a single verifier in the network acts honestly. This differs from traditional m-of-n multisig bridges, where a colluding majority can compromise locked assets.

Can I trade $LITVM or use the Grail Bridge on mainnet today?

No. LitVM is currently running on the LiteForge testnet, and mainnet has not launched. Furthermore, $LITVM does not exist as a tradeable asset yet, and any tokens claiming to be $LITVM are fraudulent.