> For the complete documentation index, see [llms.txt](https://docs.zestprotocol.com/start/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.zestprotocol.com/start/bitcoin-collateral-vaults/introducing-bitcoin-collateral-vaults.md). # Introducing Bitcoin Collateral Vaults Learn how Bitcoin Collateral Vaults let holders borrow against BTC while their collateral remains in a vault on Bitcoin. Zest Protocol is the capital layer for Bitcoin, turning Bitcoin from an idle asset into productive capital. Bitcoin Collateral Vaults let holders use BTC as collateral while it remains in a vault on Bitcoin. Holders can borrow stablecoins against it on a destination chain without wrapping or bridging their BTC. ### The Problem Bitcoin is the strongest collateral asset ever created, yet putting it to work has required a trade. Institutional borrowers can place BTC in segregated accounts with qualified custodians and borrow through managed lending agreements. That model works at scale, but its cost, onboarding and operational requirements put it beyond most holders. The common onchain alternative is to wrap or bridge BTC into a token on another chain. The holder can then use that representation in DeFi, but the collateral itself has left Bitcoin and the holder depends on the system behind the wrapped asset. Bitcoin Collateral Vaults create another path: the BTC stays on Bitcoin while its value works elsewhere. ### How Bitcoin Collateral Vaults work A holder deposits BTC into a Taproot vault on Bitcoin. The vault fixes the permitted settlement paths when it is created, limiting where the BTC can move. A collateral record on the destination chain represents that specific Bitcoin vault. The holder can use it to borrow stablecoins from a connected lending market while the underlying BTC remains on Bitcoin. The BTC is not pooled or commingled with other users’ BTC. Each position remains tied to its own Bitcoin vault. Bitcoin Collateral Vaults isolate BTC collateral from DeFi tail risks like bridge failure, custodian failure, or failure of the destination chain. Even if the Ethereum blockchain goes down and never comes back online, the user gets their BTC back with nothing but their own key.
### How did Bitcoin Collateral Vaults become possible now? Recent advancements in BitVM have made it possible to build a future of self-custodial yet fully programmable BTC collateral. The Zest Protocol team has been building in the Bitcoin lending space since 2021. The team was amongst the first users of wBTC on Aave, but quickly realised that this approach wouldn't unlock the full potential of Bitcoin as the world's most pristine collateral asset. We joined Trust Machines in 2021 to work with Stacks Founder Muneeb Ali to build the world's first Bitcoin L2 with fully programmable smart contracts. We tinkered endlessly with Discreet Log Contracts (DLCs), FROST-enabled signer networks, and ended up spinning Zest Protocol out with the backing of Tim Draper's Draper Associates and Yzi Labs to build the largest DeFi market on Bitcoin L2s. In early 2024, BitVM changed the landscape. For the first time, it became possible to verify arbitrary computations on Bitcoin without a consensus change. That meant zero-knowledge proofs could be checked on the Bitcoin base layer itself. A vault's spending conditions could be enforced by cryptographic proof of smart contract state on an external chain, not by a signer committee. The engineering has moved fast since then. On-chain challenge costs have dropped from over $14,000 with BitVM2 to sub-$100 with newer constructions. Today, production deployment has become realistic. Bitcoin Collateral Vaults hold BTC collateral in a UTXO on the Bitcoin base layer. BitVM verifies what happens on the DeFi chain and enforces the vault's spending conditions through cryptographic proofs. When a borrower repays or gets liquidated on Ethereum, a cryptographic proof of that event is submitted back to the Bitcoin vault. If the proof is valid, the BTC is released. If not, anyone can challenge it and block the withdrawal. This is the future of on-chain BTC backed lending. We understood the potential of Bitcoin Collateral Vaults in summer 2025 and have been building in stealth since. We now have a working mainnet prototype of Bitcoin Collateral Vaults and are accelerating towards Bitcoin mainnet deployment. ### Understanding Bitcoin Collateral Vaults Bitcoin Collateral Vaults reduce the trust model for Bitcoin-backed lending to its irreducible minimum: Bitcoin consensus and a single honest challenger. The mechanism is elegant. A user locks BTC into a Taproot UTXO on Bitcoin L1. The conditions under which that BTC can move are fixed at deposit and enforced by Bitcoin consensus itself — no party can add an outcome, alter an amount, or redirect a payout afterwards. Which outcome executes is determined by a zero-knowledge proof of the lending position's state on the destination chain, verified directly on Bitcoin via BitVM. {% hint style="info" %} Unlike designs where a Bitcoin vault can only ever be released in full, Zest Protocol's Bitcoin Collateral Vaults are **divisible**: the protocol settles at exact amounts against a single UTXO, on Bitcoin, in native BTC.\ \ The result is the best BTC-backed borrowing experience. Borrowers can top up Bitcoin Collateral Vaults at any time or withdraw excess collateral as Bitcoin appreciates. During liquidations only the collateral that the debt requires is taken. The remainder returns to the vault in native BTC. And perhaps most importantly, the borrower only needs their ordinary Bitcoin key to reclaim their BTC collateral - no recovery files or session artifacts. {% endhint %} Verification runs through an optimistic challenge protocol. To withdraw, a party posts a claim transaction on Bitcoin asserting that the relevant event has occurred (loan repayment for the borrower, liquidation breach for the liquidator). Any counterparty has a defined window to challenge. On the happy path, no challenge is raised and the withdrawal completes after the window for the cost of three Bitcoin transactions. If a claim is challenged, the claiming party must post a signed ZK proof of the asserted event. The challenge construction committed at vault creation makes invalid proofs self-incriminating: any signed-but-invalid proof leaks a cryptographic secret that the challenger posts on Bitcoin to block the withdrawal. Valid proofs pass; invalid proofs are caught with mathematical certainty. The implications are concrete. A Bitcoiner with 0.1 BTC can borrow stablecoins from the deepest pools in crypto without surrendering custody, without KYC, and without trusting any party other than Bitcoin and the destination chain. The product that today is gated behind tri-party agreements at qualified custodians, accessible only to multimillion-dollar borrowers, becomes available to every Bitcoin holder at any size secured by Bitcoin consensus itself. If the destination chain goes offline and never comes back, the BTC returns to the depositor with nothing but their own Bitcoin key. If every party other than the depositor and Bitcoin itself disappears, the BTC is still recoverable. This is what Bitcoin-collateralised lending is supposed to look like. BTC stays on Bitcoin, while stablecoins flow from where the liquidity already is. Verification happens on the chain that is most expensive to attack, and the trust assumptions reduce to the ones that secure Bitcoin itself. To dive deeper into the path to mainnet check out [How Zest Protocol brings Bitcoin Collateral Vaults to mainnet](/start/bitcoin-collateral-vaults/how-zest-protocol-brings-bitcoin-collateral-vaults-to-mainnet.md). For further technical details and integration opportunities with Bitcoin Collateral Vaults, contact the Zest Protocol team.