# Introducing Bitcoin Collateral Vaults ### The Problem Bitcoin holders want to borrow against their BTC without surrendering custody. Today, this problem is solvable for institutional borrowers. They deposit their BTC collateral in a segregated custody account in the qualified custodian (like Anchorage or Bitgo) and borrow against it. The lender has recourse through a tri-party agreement and the borrower retains custody over their coins. However, this solution is not accessible for retail users. Qualified custodians are expensive, require KYC/B onboarding, and only make sense for multimillion dollar loans. As a result, retail investors have to surrender custody over their BTC in order to borrow against it - be it to a bridge, wrapper or validator set - in exchange for synthetic BTC tokens that they can post as collateral in DeFi. Existing solutions require high trust requirements, making them unsuitable for the majority of Bitcoin holders. After all, Bitcoiners own a piece of the most decentralised computing network - they are right in not wanting to give that up. ### The Solution: Bitcoin Collateral Vaults Bitcoin Collateral Vaults allow users to post native Bitcoin as collateral and participate in DeFi without leaving the Bitcoin blockchain. The Bitcoin stays on L1 in a self-custodial vault. Smart contracts on DeFi chains like Ethereum manage the lending flow on the other side. Users keep custody over their Bitcoin while borrowing stablecoins from the deepest liquidity pools in crypto. The only event in which BTC is moved onto a DeFi destination chain (like Ethereum) is in a liquidation event, which is when the borrower will lose custody over their Bitcoin in any case. Bitcoin Collateral Vaults isolate BTC collateral from DeFi tail risks like bridge failure, custodian failure, or failure of the destination chain. Even if the Ethereum blockchain goes down and never comes back online, the Bitcoin Collateral Vault timelock simply expires and the user gets their BTC back.
### How did Bitcoin Collateral Vaults become possible now? Recent developments in BitVM have made it possible to build a future of self-custodial yet fully programmable BTC collateral. The Zest Protocol team has been building in the Bitcoin lending space since 2021. The team was amongst the first users of wBTC on Aave, but quickly realised that this approach wouldn't unlock the full potential of Bitcoin as the world's most pristine collateral asset. The Zest Protocol team joined Trust Machines in 2021 to work under Stacks Founder Muneeb Ali to build the world's first Bitcoin L2 with fully programmable smart contracts. The team tinkered endlessly with Discreet Log Contracts (DLCs), FROST-enabled signer networks, and ended up spinning Zest Protocol out with the backing of Tim Draper and Yzi Labs to build the largest Bitcoin lending protocol on a Bitcoin layer. In early 2024, BitVM changed the landscape. For the first time, it became possible to verify arbitrary computations on Bitcoin without a consensus change. That meant zero-knowledge proofs could be checked on the Bitcoin base layer itself. A vault's spending conditions could be enforced by cryptographic proof of smart contract state on an external chain, not by a signer committee. The engineering has moved fast since then. On-chain challenge costs have dropped from over $14,000 with BitVM2 to sub-$100 with newer constructions. Now in 2026, production deployment has become realistic. Bitcoin Collateral Vaults hold BTC collateral in a UTXO on the Bitcoin base layer. In the endgame, BitVM verifies what happens on the DeFi chain and enforces the vault's spending conditions through cryptographic proofs. When a borrower repays or gets liquidated on Ethereum, a cryptographic proof of that event is submitted back to the Bitcoin vault. If the proof is valid, the BTC is released. If not, anyone can challenge it and block the withdrawal. This is the future of on-chain BTC backed lending. Zest Protocol understood the potential of Bitcoin Collateral Vaults in summer 2025 and has been building in stealth since. Zest now has a working mainnet prototype of Bitcoin Collateral Vaults and is accelerating towards Bitcoin mainnet. ### Understanding Bitcoin Collateral Vaults The fully realised version of Bitcoin Collateral Vaults reduces the trust model for Bitcoin-backed lending to its irreducible minimum: Bitcoin consensus and a single honest challenger. The mechanism is elegant. A user locks BTC into a Taproot UTXO on Bitcoin L1. The UTXO has two spend paths: one that returns the BTC to the depositor, one that forwards it to a liquidation address. Which path executes is determined by a zero-knowledge proof of the lending position's state on the destination chain, verified directly on Bitcoin via BitVM. Verification runs through an optimistic challenge protocol. To withdraw, a party posts a claim transaction on Bitcoin asserting that the relevant event has occurred (loan repayment for the borrower, liquidation breach for the liquidator). Any counterparty has a defined timelock window to challenge. On the happy path, no challenge is raised and the withdrawal completes after the timelock for the cost of three Bitcoin transactions, roughly $3 in fees. If a claim is challenged, the claiming party must post a signed ZK proof of the asserted event. A garbled circuit committed at vault creation makes invalid proofs self-incriminating: any signed-but-invalid proof leaks a cryptographic secret that the challenger posts on Bitcoin to block the withdrawal. Valid proofs pass; invalid proofs are caught with mathematical certainty. The depositor can serve as their own challenger, so trustlessness does not depend on any external party's liveness. The implications are concrete. A retail Bitcoiner with 0.1 BTC can borrow stablecoins from the deepest pools in crypto without surrendering custody, without KYC, and without trusting any party other than Bitcoin and the destination chain. The product that today is gated behind tri-party agreements at qualified custodians, accessible only to multimillion-dollar borrowers, becomes available to every Bitcoin holder at any size. If the destination chain goes offline and never comes back, the vault's timelock expires and the BTC returns to the depositor. If every party other than the depositor and Bitcoin itself disappears, the BTC is still recoverable. This is what Bitcoin-collateralised lending is supposed to look like. BTC stays on Bitcoin, while stablecoins flow from where the liquidity already is. Verification happens on the chain that is most expensive to attack, and the trust assumptions reduce to the ones that secure Bitcoin itself. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.zestprotocol.com/start/bitcoin-collateral-vaults/introducing-bitcoin-collateral-vaults.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.