Every complex blockchain decision made outside of Bitcoin's primary ledger has historically relied on a single point of trust — and there was no way to natively verify it.
Citrea is a decentralized infrastructure network built to solve that problem, enabling cryptographically verifiable execution at scale directly on top of Bitcoin blockspace.
This guide covers everything you need to know: how Citrea works, what makes it different, a full breakdown of CTR tokenomics, and how to buy CTR on MEXC.
Key Takeaways
Citrea is a decentralized Bitcoin scalability network where every off-chain compute batch is cryptographically verified via zero-knowledge validities settled permanently on layer-1.
Its Hybrid architecture separates transactional execution from layer-1 verification, delivering fast transaction speed with absolute blockchain-grade trust guarantees.
CTR is the native token powering long-term economic coordination, structural staking, validator alignment, and decentralized governance across the network.
CTR has a fixed total supply of 10,000,000,000 tokens, utilizing a dual-treasury architecture to ensure long-term ecosystem development and sustainability.
Citrea currently hosts a fully compatible Type II zkEVM, enabling developers to deploy industry-standard smart contracts and decentralized applications without altering native source code.
Citrea is a decentralized network purpose-built for high-throughput execution, where every transaction batch can be cryptographically verified without trusting any single external consensus party. Today, when a traditional sidechain or alternative scaling protocol moves money, processes an application, or manages a portfolio, there is no mechanism for the underlying Bitcoin network to natively verify which state transitions occurred or whether the system was tampered with.
Citrea changes this by running smart contract logic on a permissionless network of specialized sequencers and nodes, generating succinct validity proofs, and settling those proofs on-chain inside primary Bitcoin blocks via its BitVM-based trust-minimized two-way peg program, making the entire pipeline fully auditable.
As of its mainnet launch in May 2026, the network operates a highly compatible EVM execution environment, supporting decentralized apps (bApps) and scaling infrastructure directly on top of Bitcoin's ledger.
It was engineered by Chainway Labs and is backed by a robust network of strategic validation operators and institutional digital asset groups, raising the necessary capital to build what it calls the foundational infrastructure layer for a user-led Bitcoin economy.
Understanding the network requires a clear separation between the protocol layer and the economic asset layer.
Citrea represents the collective decentralized network infrastructure, inclusive of its zero-knowledge rollup circuits, validation paths, and its Type II zkEVM processing environment.
Conversely, CTR is the native utility, coordination, and governance token engineered to align participants across the ecosystem. It is critical to note that while CTR directs network governance and treasury variables, the actual transactional gas fees across the network are paid natively using cBTC native currency, ensuring that Bitcoin remains the baseline denominating asset for transactional execution.
Bitcoin infrastructure is rapidly experiencing exponential interest, creating intense demand for its blockspace. However, contemporary scaling proposals introduce systemic risks that directly affect anyone who depends on decentralized applications.
Citrea addresses four core failures of the current landscape:
When a scaling protocol moves assets or processes an application, the Bitcoin base layer cannot verify the correctness of those off-chain transactions. Citrea solves this by producing zero-knowledge proofs for every transaction batch, settling them permanently onto Bitcoin blocks to inherit full layer-1 verifiability.
Traditional sidechains establish alternative blockspaces that compete with Bitcoin for fee revenue and security budget over the long term. Citrea eliminates this dependency by driving demand directly back to Bitcoin blockspace, embedding its state diffs and proofs into the primary ledger.
Most scaling solutions force users to trust centralized multi-sig federations or vulnerable bridge setups to move assets. Citrea introduces the BitVM-based Clementine bridge, establishing a trust-minimized, two-way peg program that functions under an N-of-committee model where only a single honest signer is required for asset safety.
Traditional networks often compound vendor lock-in and opaque fee distributions, leaving users and early developers with zero control over protocol parameters. Citrea utilizes its unique governance token layout to permanently close the ownership gap, transferring total network execution control to long-term value creators.
Citrea was founded with a clear vision to build verifiable smart contract infrastructure before the blockchain space became fully dependent on alternative, non-Bitcoin scaling architectures.
The project was developed by Chainway Labs, bringing together structural blockchain engineers and cryptographic professionals to solve the historic throughput limits of Bitcoin blockspace.
Development progressed through an intensive testnet phase where the network verified proof settlement mechanics against deep reorg buffers, ensuring robust performance under real-world network disruptions.
The mainnet infrastructure launched officially in May 2026, co-supported by top-tier institutional validation partners like Galaxy Digital and Coinsummer, marking the formal transition to a fully functional live network.
At the core of Citrea is a Type II zkEVM execution environment, which solves a fundamental problem: Bitcoin cannot natively process complex smart contracts because its scripting language is intentionally non-programmable and slow. The Type II zkEVM maintains absolute bytecode-level compatibility with the Ethereum Virtual Machine up to the Pectra upgrade standard, allowing developers to deploy existing applications seamlessly using standard tools like Hardhat and Foundry.
Instead of forcing every validator to handle identical burdens, Citrea optimizes operations through a modular network of specialized node types:
Sequencers: Responsible for transaction aggregation, ordering, and producing rapid off-chain blocks.
Provers: Specialized GPU hardware workers that generate succinct validity proofs confirming the correctness of executed transaction batches.
Full Nodes: Entities that download state diffs directly from Bitcoin to reconstruct and verify the entire network state independently from genesis.
Unlike protocols that store transactional histories on fragile external storage networks, Citrea utilizes Bitcoin directly for absolute data availability. State commitments, batch proofs, and state diffs are inscribed directly into Bitcoin blocks, meaning the rollup cannot be reordered or compromised without executing a deep reorg of the underlying Bitcoin blockchain itself.
Autonomous financial programs where every smart contract transaction inherits the absolute censorship-resistant properties of Bitcoin. Anyone can verify the complete state validity chain on-chain, providing full audit trails for decentralized lending protocols, automated market makers, and stablecoin clearinghouses.
Developers can implement highly customized, high-performance appchains that inherit Citrea's settlement guarantees. These networks can tap alternative data availability layers like Celestia for high-frequency gaming or real-world asset trading while routing final cryptographic proofs back to Bitcoin via Citrea.
By linking native EVM logic directly with Bitcoin via the Clementine bridge framework, Citrea enables complex financial cross-chain strategies, allowing users to deploy native capital into productive DeFi yield paths without surrendering self-custody to risky centralized bridges.
Token Allocation
| Allocation Category | Percentage | Lockup |
| Initial Claims | 12.00% | Will be distributed via the Genesis Airdrop and other TGE-related activities, including prior community sale activities |
| Incentives and Treasury | 25.16% | Governed by xCTR holders to fund the gauge system, ecosystem incentives, and payments to councils or service providers |
| Ecosystem Growth and R&D | 22.83% | Unlocked at genesis for delegations, strategic, multi-year deployment toward research, developer support, ecosystem development and operations |
| Investors | 19.35% | Unlocked over 4 years with a 1 year cliff |
| Early Contributors | 20.66% | Unlocked over 4 years with a 1 year cliff |
CTR has a fixed total supply of 10,000,000,000 tokens — non-inflationary, with no additional tokens ever to be minted beyond the genesis configuration.
The tokenomics model implements a Dual Treasury architecture structured to protect the network from speculative volatility while securing long-term technical development:
Foundation Treasury: Directed exclusively toward continuous protocol research, core client engineering, and public developer grants.
Governance Treasury: Controlled completely by active on-chain network stakeholders to incentivize ecosystem alignment.
The distribution parameters ensure that team and investor allocations are subject to meaningful lock-up durations, prioritizing decentralized community alignment from day one of the token launches.
CTR serves as the foundational economic asset to align interests between sequencers, provers, and application developers across the decentralized scaling ecosystem.
To participate in the governance matrix, holders stake their liquid CTR into the network vault to receive non-transferable xCTR. This mechanism locks long-term capital to maximize voting power stability.
Through the accumulation of xCTR, holders gain absolute voting power over the distribution schedules of the community-driven Governance Treasury, funding ecosystem expansions.
Decisions that affect the underlying zero-knowledge infrastructure belong to those with an economic stake. xCTR holders vote directly on protocol upgrades, supported node configurations, and gas policy adjustments.
Converting xCTR back into liquid CTR introduces a strict 90-day cooldown window. Users requesting an immediate exit incur a flat 50% penalty on their principal. This penalty decays linearly to 0% at day 90 for any staker maintaining their position for the past 14 days, defending the network from hostile short-term governance manipulation.
Citrea's roadmap centers on expanding the verified execution ecosystem while systematically scaling down administrative safeguards.
In its initial mainnet phase, the platform implements a specialized Security Council consisting of 5 distinct cryptographic keys embedded natively within the zero-knowledge circuit compilation. Critical hotfixes or prover logic updates require a 3-of-5 multi-signature threshold among these council members to defend early capital from software vulnerabilities.
Longer-term, as the zero-knowledge proving framework reaches total technical maturity, the protocol will systematically dismantle the council's override powers. The ultimate milestone is transitioning total network administration to automated mathematical proofs and decentralized on-chain voting driven exclusively by xCTR stakers.
Citrea operates in the highly competitive blockchain scaling sector, where several paradigms offer alternative approaches.
Ethereum Layer-2 networks provide mature ecosystem toolsets and substantial liquidity, but they settle entirely on Ethereum, failing to tap into Bitcoin's extensive security budget or store data availability within its ledger.
Alternative Bitcoin sidechains offer smart contract compatibility but function over entirely separate consensus models or federated multi-sig bridges, meaning they fail to inherit Bitcoin’s security properties and introduce external validator risks.
Validium solutions move data availability completely off-chain to reduce operational fees, which introduces data withholding risks and compromises the trustless guarantees required for sovereign asset settlement.
Citrea's core differentiator is its end-to-end verifiability combined with native data availability inscription on Bitcoin. Its Type II zkEVM execution environment, combined with the trust-minimized mechanics of the BitVM-based Clementine bridge, creates a technical moat that delivers web2-grade performance without sacrificing layer-1 decentralization.
CTR is available for trading on MEXC, one of the leading global cryptocurrency exchanges.
MEXC offers both spot and futures trading options for CTR, providing deep liquidity, competitive trading fee structures, and a highly intuitive user interface tailored for both retail participants and institutional traders.
Visit MEXC to access CTR trading pairs and remain informed on the latest promotional events, staking options, and launchpool allocations.
Buying CTR on MEXC — Step by Step:
Step 1: Visit the official MEXC website and create a personal user account using a secure email address or phone number.
Step 2: Complete the mandatory KYC (identity verification) protocol to unlock full trading, fiat deposit, and digital asset withdrawal functionalities.
Step 3: Deposit funds into your centralized MEXC wallet —The standard trading pairs accept USDT or other supported base cryptocurrencies.
Step 4: Navigate directly to the Spot Trading interface and enter CTR into the asset search dashboard to locate the active CTR/USDT trading pair.
Step 5: Select your preferred execution order type — a market order fills instantly at the prevailing market price, while a limited order enables you to establish a specific maximum entry price.
Step 6: Confirm your transaction parameters. Your acquired CTR tokens will reflect within your secure MEXC wallet balance instantly.
Step 7: Following your purchase, you can hold CTR securely inside your platform wallet, transfer the assets to an external Web3 wallet for self-custody, or explore advanced futures trading options.
Note on Futures Trading: MEXC also offers CTR futures trading, which allows you to trade with leverage. Futures involve amplified risk—leverage can multiply both gains and losses—and may not be suitable for all investors. Please assess your risk tolerance carefully before trading futures.
Spot Trading: Maintain your token positions within the MEXC spot interface to take advantage of structural market cycles and price action.
Futures Hedging: Engage with leveraged futures contracts to implement directional strategies or hedge against systemic downside market volatility.
Join MEXC Launchpool: Allocate your digital holdings into the MEXC Launchpool to participate in new project distributions and secure passive crypto rewards.
Trusted by Millions: Recognized globally as a highly secure, reliable cryptocurrency exchange serving a massive international user base.
Highly Secure Infrastructure: Employs advanced multi-tier cold storage architecture and cutting-edge security protocols to safeguard user balances.
Ultra-Low Fee Schedules: Features highly competitive trading fee matrices, preserving your investment capital efficiency.
Versatile Leverage Mechanics: Provides comprehensive futures instruments with adaptable leverage metrics to suit sophisticated trading methodologies.
Airdrop+: Participate in exclusive exchange distribution windows to capture free token allocations from emerging protocols.
DEX+: Experience decentralized, on-chain execution with non-custodial asset routing directly through the exchange ecosystem.
Financial Calculator: Access built-in analytical tools to compute clear profit margins, target ratios, and precise liquidation points prior to market exposure.
This comprehensive technical guide is compiled for educational and informational purposes only and does not constitute financial, investment, legal, or tax advice. Trading digital currencies, zero-knowledge rollups, and decentralized staking protocols involves substantial economic risk and capital exposure. Staking parameters, linear cooldown penalties, and protocol upgrade timelines are subject to change via on-chain governance mechanisms and are never guaranteed. Conduct independent due diligence before allocating capital to any digital asset network.