Research summary
This review reaches an adverse assessment based on operational concentration and recent liveness failures, not on the architecture. Lighter (zkLighter) is a custom application-specific ZK rollup for perpetual futures. It uses genuine SNARK validity proofs to verify every state transition, a stronger cryptographic guarantee against invalid state than Hyperliquid Bridge's custom validator consensus, already rejected in this registry. But only three externally-owned accounts control sequencing and batch commitment, and they do not even form a multisig. A separate emergency multisig can also cut the standard 21-day upgrade timelock to zero. This is the same "no meaningful delay once an emergency path is invoked" pattern already priced into Base's cap, but here it comes with genuinely thin operational protection rather than a disclosed council. Multiple proof-submission and state-update outages in July and August 2026, including one a week before this review, add a live reliability concern to the governance gap. The proof system is a real strength and should make this a faster reopen than Hyperliquid or Unit once operational maturity catches up.
Observable review triggers
- Sequencer or batch-commitment control moves from three externally-owned accounts to a disclosed multisig of at least 4-of-7 with named or institutionally-accountable operators
- The emergency multisig's ability to zero out the 21-day upgrade timelock is removed or itself gated behind a minimum delay
- Ninety consecutive days with no proof-submission or state-update outage exceeding one hour
- A proposed-size withdrawal is demonstrated to clear under normal operation within a documented maximum time
Facts on file
- Verdict
- Rejected
- Type
- Other
- Chains examined
- Ethereum
- Reviewed
- Last confirmed