Layer 2: what it is and what changes for self-custody

A layer 2 is a network built on top of another blockchain to process transactions faster and cheaper, using the network underneath, the layer 1, as its security and final settlement layer. On Ethereum, these are networks like Arbitrum, Optimism, Base, zkSync and Starknet; on Bitcoin, the Lightning Network. For someone doing self-custody, they change three things: the fee you pay, the network you must choose when sending, and what does or does not enter your taxes. This guide explains the mechanism without jargon and goes straight to what matters in practice.

The problem a layer 2 solves

A blockchain like Ethereum processes a limited number of transactions per block, and they all compete for the same space. When demand rises, fees rise, as gas fees: what they are and why they change explains. A layer 2 takes most of the work off the main network: it executes thousands of transactions outside it, compresses everything into a batch and publishes that batch on the layer 1. Security keeps coming from the network underneath; the cost is split among all the transactions in the batch.

Ethereum's Dencun upgrade, on March 13, 2024, created a cheap data space for those batches, the "blobs". The effect was immediate: fees on Arbitrum, Optimism and Base fell more than 90% within a week. Ethereum's documentation, checked in October 2026, cites an average cost of US$ 0.12 per transaction on mainnet against US$ 0.0016 on layer 2s.

Optimistic rollups and ZK rollups

Ethereum's layer 2s are mostly rollups, and there are two kinds. The practical difference is on the way out.

Optimistic rollups (Arbitrum One, Optimism, Base) publish transactions on the layer 1 and assume they are correct, opening a window for anyone to challenge fraud. That is why withdrawing from the layer 2 to mainnet through the official bridge takes about seven days: it is the challenge period. Third-party bridges advance the funds in minutes, for a fee, taking on that risk in the user's place.

ZK rollups (zkSync Era, Starknet, Scroll, Linea) publish, alongside the transactions, a mathematical proof that they are valid. The layer 1 verifies the proof and the withdrawal clears in minutes or hours, with no challenge period. The cost is heavier computation to generate the proof.

On Bitcoin, the Lightning Network works differently: payment channels between peers, settled on the main network only when the channel opens and closes. It serves small, frequent payments, not reserves.

What changes for self-custody

This is the part most guides skip.

Same seed, same wallet. Ethereum's layer 2s use the same address format and the same key as mainnet. Your "0x..." address exists on Arbitrum, Base and Optimism at the same time, and your Ledger or Trezor signs transactions on all of them with the same seed. There is no new wallet to create.

The network is a choice on every send. This is where most mistakes come from. Withdrawing from an exchange "over Arbitrum" to an address you only used on Ethereum loses nothing, because the key is the same, but the balance only shows once you add the network to the wallet. The full case is in sent crypto on the wrong network: can it be recovered?.

Native coin for the fee. On most Ethereum layer 2s the fee is paid in ETH, but ETH on that network. Holding ETH on mainnet does not pay the fee on Arbitrum. Keep a small buffer on each network you use.

Where the reserve lives. Layer 2 is great for use: payments, swaps, protocol deposits. For the long-term reserve, the main network (Ethereum or Bitcoin) remains the place with the fewest moving parts: no sequencer, no bridge, no withdrawal delay. The logic is the same as in hot wallet vs cold wallet: what circulates lives on the cheap layer, what is stored lives on the simplest layer.

The risks a low fee hides

Sequencer. Almost every layer 2 today has a single operator ordering transactions. If it stops, the network stops or slows down until the emergency mechanism allows withdrawing directly through the layer 1. The money does not vanish, but it can be stuck for a while.

Bridge. The way in and out is a bridge, and bridges hold the largest thefts in crypto history. The network's official bridge is the safest; third-party ones, not necessarily. The post crypto bridges: what they are, risks and when not to use one goes into detail.

Maturity. New networks mean new code. Prefer the ones that have existed for years, publish audits and carry meaningful volume.

Layer 2 and Brazilian income tax

Moving your own asset from mainnet to a layer 2, or between layer 2s, is not a sale: you still own the same asset. It creates no capital gain. The ETH fee paid for the transfer is a small disposal, worth recording. A token swap inside the layer 2, however, is an exchange of assets, and exchanges count as disposals for Brazil's tax authority even with no reais involved, as the guide crypto taxes in Brazil explained covers. Vault Tax reads addresses on Ethereum-compatible networks and separates own transfers from swaps.

Rules checked in October 2026, based on Normative Instruction RFB 1,888/2019; there is no specific tax guidance on layer 2s, and the conservative approach is to record everything.

Crypto assets carry high risk, including significant volatility and the possibility of losing the invested capital. Vault Capital is a securities advisory firm authorized by Brazil's CVM under CVM Resolution 19/2021 and never holds custody of client assets.

Frequently asked questions

Do I need another wallet to use a layer 2?

Not on Ethereum's layer 2s. The same address and the same seed work on Arbitrum, Optimism, Base and others. Just add the network to the wallet or to the software that talks to your Ledger or Trezor.

Why does withdrawing from Arbitrum to Ethereum take seven days?

Because Arbitrum is an optimistic rollup: transactions are assumed correct and there is a challenge window before final settlement. Third-party bridges advance the funds in minutes, for a fee, taking on that risk.

Is it safe to hold crypto on a layer 2?

For use, yes, on mature networks. For a long-term reserve, mainnet has fewer moving parts (no sequencer, no bridge, no withdrawal delay) and remains the simplest choice.

Does moving crypto to a layer 2 trigger tax in Brazil?

No. It is a transfer of the same asset between your own wallets, with no disposal. Swapping one token for another inside the layer 2 does: an exchange of assets counts as a disposal.

Let's talk

If you want to understand in practice where each asset should live, how to send between networks without mistakes and how to keep the reserve on the simplest layer, Vault's Self-Custody Immersion does it in one weekend, in person, with the setup validated by a specialist.