How Does BOB (Build on Bitcoin) Work?
BOB (Build on Bitcoin) is a hybrid Layer 2 that bridges Bitcoin and Ethereum ecosystems — it's an Optimism Stack rollup where Bitcoin holders can use their BTC in EVM-compatible DeFi without moving to a separate network. Backed by $23M in funding, BOB offers Bitcoin-native wallets that interact directly with EVM applications. The current BTC bridge uses a federated multisig model (similar to tBTC or WBTC), with a planned upgrade to BitVM-based trust-minimized bridging. BOB has grown to $180M TVL, primarily from BTC liquidity seeking DeFi yield.
TVL
$180M
Sector
L2
Risk Grade
C
Value Grade
C
Core Mechanisms
Rollup > Optimistic
OP Stack rollup with Bitcoin as additional data layer
Standard OP Stack architecture extended for Bitcoin ecosystem compatibility
Bridge > Federated Multisig
NovelCurrent tBTC/WBTC bridge with BitVM planned migration
Hybrid approach: federated bridge now, BitVM trust-minimized bridge planned
Bridge > Lock-Mint
Ethereum bridge using standard OP bridge
Standard OP Stack bridge for ETH/ERC-20 assets
Account Abstraction > Passkeys
NovelBitcoin-native AA enabling Bitcoin wallet interactions
Allows Bitcoin wallet users to interact with EVM DeFi without key conversion
Execution > EVM
Full EVM compatibility on Bitcoin-secured L2
Standard EVM execution environment on the rollup
Proof > BitVM
NovelBitVM-based fraud proofs for Bitcoin-anchored security (planned)
Novel use of BitVM for bridging Bitcoin security to EVM rollup — still in research/development
How the Pieces Interact
BTC bridge multisig compromise drains all wrapped BTC used as collateral in BOB DeFi
Sequencer downtime prevents Bitcoin bridge interactions, locking BTC deposits
Migration from federated to BitVM bridge introduces transition period vulnerability window
Key translation layer between Bitcoin and EVM accounts creates novel phishing surface for wallet drainers
Dual blockchain dependency means both Ethereum AND Bitcoin network issues affect BOB simultaneously
What Could Go Wrong
- Hybrid Bitcoin-EVM bridge creates dual attack surface across both Bitcoin and Ethereum ecosystems
- Novel Bitcoin L2 architecture with untested security assumptions under adversarial conditions
- Optimism Stack bridge carries standard 7-day withdrawal delay with centralized sequencer risk
- BitVM-based trust-minimized bridge still in development — current bridge relies on multisig federation
Federated BTC Bridge Multisig Compromise
TailTrigger: BTC bridge federation multisig keys compromised, enabling attacker to drain all Bitcoin locked in the bridge
- 1.Attacker compromises threshold of bridge federation multisig keys — Control over all BTC locked in bridge; ability to redirect withdrawals
- 2.Bitcoin drained from bridge federation addresses — Wrapped BTC on BOB becomes unbacked; WBTC/tBTC price collapses on BOB
- 3.BTC collateral in DeFi protocols triggers cascade liquidations on bad debt — BOB DeFi ecosystem insolvent; TVL collapses; user losses across all BTC-backed positions
Risk Profile at a Glance
Overall: C (46/100)
Lower score = safer