CoinYQ Dossier

Lighter proved the exchange rules, then left the operator map visible

Lighter’s achievement is narrower and more useful than “a decentralized exchange as fast as a CEX.” Custom proofs can bind an off-chain order book to published rules and Ethereum state. The remaining question is who orders transactions, operates proving, changes code, admits users, and directs the token programs when a proof cannot answer those policy choices.

The product began by making an exchange engine provable

Orders, liquidations, oracle updates and withdrawals become deterministic computations. The sequencer orders signatures and gives soft confirmation; the prover checks price-time priority, margin and liquidation transitions, and Ethereum updates the root only after verification.

That architecture is application-specific. The whitepaper calls digital-asset perpetuals the initial focus and describes spot, prediction markets, lending, and a sidecar virtual machine as future work. Current product documents now price both perpetual and spot trading, evidence that some scope advanced, but a roadmap paragraph is never proof that every proposed primitive is live.

Ethereum checks the batch, not the operator’s availability

Compressed blob data reconstructs balances, positions and pools. If a priority request expires, Escape Hatch freezes normal commitments. Open positions are then valued at the latest posted mark price, and users prove balances, unrealized profit or loss and pool shares before withdrawing.

Proofs prevent invalid state transitions, but do not sequence themselves. The operator serves order flow and APIs, and proving infrastructure must remain live. The liquidation engine also decides when an account crosses configured thresholds: it restricts risk, cancels orders and attempts closes before LLP takeover and ADL. The proof constrains that waterfall; it does not remove the oracle and parameter choices that feed it.

The published contracts name the people-shaped controls

The open Governance contract has a networkGovernor that can replace itself and activate or deactivate validators. The deployment factory assigns a governor, one initial validator, a security-council address, and an upgrade gatekeeper. These are privileged control paths, even though “Governance” sounds like a community institution.

The upgrade code normally provides a three-week withdrawal window after an upgrade begins. A security-council address can reduce the approved notice to zero, and upgrades are blocked after Desert mode begins. This is a deliberate emergency tradeoff. The repository describes the design, but without matching live addresses and role events it cannot identify who holds those powers today.

Fee tiers gave LIT utility without ownership

Current Standard accounts pay no maker or taker fee while accepting documented maker, taker, and cancel latency. Premium accounts opt into fees for lower taker latency and no added delay on cancellations or post-only orders; staking LIT moves them through discount tiers. “Zero fee” therefore describes one account class, not every participant or every economic cost.

LIT staking has a three-day unstaking lock, opens LLP deposits of up to 10 USDC per staked LIT and currently advertises a fixed 6% APR. The page identifies the wallet from which LIT is bought for rewards, but it does not guarantee how long that rate or funding route will continue.

The Ethereum token contract was created on October 27, 2025. Its verified source mints exactly one billion LIT to a single constructor recipient and contains ordinary ERC-20 and permit behavior without a later mint function. That proves the code-level ceiling, but not the vesting, treasury, or circulation schedule behind recipient transfers.

Current documentation says protocol trading-fee revenue buys LIT and describes staking access, rewards, LLP capacity, and Premium discounts. It does not promise that bought tokens are burned or distributed to all holders, and it does not grant voting, corporate equity, redemption, or a fixed revenue claim. Elliot’s terms also preserve control over the interface, API, promotions, and eligibility, separating a transferable token from guaranteed access.

How the project changed

  1. 2025-04-08
    The audit trail starts before public launch

    The security index lists an early Block audit, beginning a series of contract and circuit reviews rather than a blanket safety guarantee.

  2. 2025-09-22
    Lighter Core receives a dated review

    Nethermind’s listed review examines core contracts and privileged upgrade paths before the late-2025 product transition.

  3. 2025-09-30
    Private Beta points close

    The official points record marks the final Season 1 Private Beta distribution, separating testing incentives from later token rights.

  4. 2025-10-27
    One billion LIT are minted

    The fixed-supply Ethereum contract creates the entire supply for one constructor recipient and exposes no later mint method.

  5. 2025-11-24
    A spot audit joins the index

    The audit page records a dedicated spot review, evidence of product expansion beyond the whitepaper’s initial perpetual focus.

  6. 2025-12-29
    Elliot defines the access boundary

    Updated terms cover the interface, API, protocol, and LIT while reserving geographic, account, API, and promotion controls.

Evidence and primary sources

Last evidence review: 2026-09-05

What is Lighter?

Lighter is a live Layer 2 trading protocol and exchange interface for perpetual and spot order books. Its sequencer orders signed transactions, custom circuits prove batches, and Ethereum contracts custody deposits and record the canonical state root. LIT is a separate fixed-supply ERC-20 used in current staking and access programs.

What problem does Lighter solve?

Centralized order books are fast but make traders trust an operator’s matching and liquidation engine. Lighter moves execution off Ethereum for speed and proves prescribed state transitions back to Ethereum. The proof narrows what an operator can fake; it does not make the sequencer, prover service, frontend, market configuration, or upgrade keys disappear.

How does Lighter work?

Users deposit through Ethereum contracts and sign L2 orders. A sequencer supplies soft finality and FIFO ordering, witness generators feed the prover, and an aggregated proof plus compressed state data is posted to Ethereum. Priority requests and an Escape Hatch provide an exit path if inclusion deadlines fail. Published contract code also assigns validator selection and upgrades to privileged roles.

Key facts

  • Lighter Core is an application-specific rollup for a trading venue, not a general-purpose Ethereum-equivalent chain.
  • The whitepaper makes perpetuals the initial focus and places spot, prediction markets, lending, and a sidecar VM in future-work language; current docs now list both perpetual and spot fees, so individual markets still require live verification.
  • Standard accounts currently pay zero maker and taker fees but accept added order latency. Premium accounts pay fees for lower taker latency and no added cancel or Post Only delay, with LIT-based discounts. Plus accounts charge 0.5 bps in exchange for higher API rate limits.
  • The architecture uses one sequencer for soft finality and separate prover infrastructure; Ethereum accepts state updates after proof verification.
  • Priority exits can trigger Escape Hatch mode when the sequencer misses deadlines, freezing normal state progression so users can prove claims from posted data.
  • Liquidation moves through initial, maintenance and close-out thresholds: the engine first restricts risk, then cancels orders and attempts position closes; LLP takeover and finally ADL backstop deeper shortfalls.
  • The published contract design gives a network governor power to change the governor and activate validators; an upgrade master and security council control upgrade timing.
  • LIT contract 0x232c…4ee2 minted exactly 1 billion tokens to one constructor recipient on October 27, 2025 and exposes no later mint function.
  • Current LIT documentation promises staking access, LLP capacity, rewards, Premium fee discounts, and protocol buybacks; it does not document token-holder voting, equity, redemption, or a contractual revenue share.

Official links

Categories

Related coins

Frequently asked questions

What does Lighter’s ZK proof verify?

It verifies that a proposed batch follows encoded execution rules and that posted data is sufficient for the described state reconstruction. It does not prove the sequencer was continuously available, the interface admitted every user, or every market parameter was economically wise.

Is Lighter fully decentralized?

That word hides several layers. Ethereum verifies proofs and holds canonical assets and state, but Lighter documents a sequencer, proving services, API infrastructure, a network governor, an upgrade master, and a security council. Current role holders were not reconstructed in this review.

Can users exit if the sequencer stops?

The design lets users place priority exit operations on Ethereum. A missed inclusion deadline can trigger Escape Hatch mode, freeze normal processing, and let users prove balances, positions, or pool shares from Ethereum-posted data.

Are all Lighter trades free?

No. Standard accounts currently have zero maker and taker fees with added latency. Premium accounts pay fees for lower latency and can reduce them through LIT staking. Plus accounts pay 0.5 bps for higher API rate limits.

What rights come with LIT?

The current utility page documents staking rewards, LLP access, Premium fee discounts, and buybacks. The reviewed materials do not grant ordinary holders protocol voting, company equity, redemption against assets, or a fixed share of revenue.

Can more than one billion LIT be minted?

The verified source mints one billion once in the constructor and has no later mint function or burn function. Transfers change wallet balances and distribution, but not the one-billion total supply recorded by this code.

What happens when a leveraged account falls below margin?

Below maintenance margin, Lighter cancels open orders and tries full-position IOC closes, with up to a 1% liquidation fee sent to LLP. Below close-out margin, LLP takes positions only while it stays above its own initial-margin requirement; remaining positions can enter ADL.

Does a buyback pay every LIT holder?

Not automatically. The documentation says trading-fee revenue funds protocol purchases. It does not say each holder receives cash, that purchases must be burned, or that the policy cannot change.

External trackers

Choose a tracking site for Lighter: