Layer 2s, sidechains, and the word everyone uses wrong
"Layer 2" has become a marketing term. It gets applied to anything cheaper than Ethereum, which has quietly flattened a distinction that actually determines whether your money is safe.
The differences are not academic. Two chains can look identical in your wallet — same address, same signing flow, same tokens, same tooling — and rest on completely different assumptions about who could take your funds.
What "layer 2" is supposed to mean
A genuine layer 2 inherits its security from the layer 1 underneath it.
That's the whole definition, and it has a concrete test: if every operator of the L2 vanished tomorrow, could you still get your money out using only Ethereum? If yes, it's a layer 2. If no, it's something else wearing the name.
The way rollups achieve this is by doing the expensive part elsewhere and the trustworthy part on Ethereum. Transactions execute off-chain, in bulk, cheaply. But the transaction data gets posted to Ethereum, along with a mechanism for establishing that the resulting state is correct. Ethereum doesn't re-execute everything; it holds enough information that the correct state can always be reconstructed and enforced.
That's why a rollup is cheap. You're splitting the cost of Ethereum blockspace across thousands of transactions instead of paying for it alone — and since blob transactions gave rollups a dedicated, much cheaper way to post their data, the split got dramatically better.
Two ways to prove a rollup honest
Optimistic rollups assume the operator is telling the truth and let anyone challenge. If someone posts an invalid state, a watcher submits a fraud proof during a challenge window and the bad state is thrown out.
The challenge window is why native withdrawals from optimistic rollups take about a week. That delay isn't inefficiency — it's the security mechanism. The system needs a period long enough that an honest party could notice a lie and object.
Validity rollups, usually called ZK rollups, prove correctness mathematically instead. Each batch comes with a cryptographic proof that the state transition followed the rules. Ethereum verifies the proof, which is cheap, and there's nothing to dispute. Withdrawals wait only for proof generation and verification — hours, not days.
Neither is strictly better. Optimistic rollups were easier to build and handle arbitrary computation comfortably; validity rollups give faster finality and stronger guarantees at higher proving cost and complexity.
Sidechains are not layer 2s
A sidechain is a separate blockchain with its own consensus and its own validators, connected to Ethereum by a bridge. It does not derive security from Ethereum. It has its own.
Apply the test: if the sidechain's validators colluded, could Ethereum save you? No. Your funds on the sidechain are secured by that chain's validator set, and the assets backing the bridge are secured by whatever the bridge's design happens to be — which is precisely the category where the largest crypto hacks keep happening.
This is not a criticism of sidechains. They're often faster, cheaper, and perfectly reasonable to use. It is a criticism of describing them as layer 2s, because the phrase implies a safety net that isn't there.
And then there are chains that are simply their own layer 1 — independent networks that happen to run the same virtual machine. They aren't secured by Ethereum, connected to it, or accountable to it. They just speak the same language.
The uncomfortable version, using SSP's own chain list
Here's where it gets specific, and where we should be candid about our own interface.
SSP supports six EVM mainnets: Ethereum, Polygon, Base, BNB Smart Chain, Avalanche, and XDC.
Exactly one of them is a rollup. Base is an optimistic rollup that settles to Ethereum. Polygon PoS is a sidechain with its own proof-of-stake validator set. BNB Smart Chain, Avalanche's C-Chain, and XDC are independent layer 1s with their own consensus, their own validators, and no security relationship to Ethereum whatsoever.
In SSP's chain configuration all six carry the same chainType: 'evm'. That field is accurate — it describes the execution environment, which genuinely is the same across all of them. It's why one code path can serve every one of these chains, why your address looks the same everywhere, and why signing works identically.
But chainType: 'evm' says nothing about who can take your money, and the wallet groups these chains by what makes them technically interchangeable rather than by how their security works. Every wallet does this, ours included. The honest consequence is that the interface flattens a distinction it cannot express, and knowing which is which remains your job. Switching from Ethereum to BNB Smart Chain in a dropdown feels like changing a setting. It is closer to moving your money to a different bank in a different country.
The same address is a convenience and a trap
Because all EVM chains derive addresses the same way, your address on Ethereum is your address on Polygon, Base, BSC, Avalanche, and XDC. Convenient — and the source of a specific, expensive mistake.
Sending tokens to the correct address on the wrong chain is not a bounced transaction. It succeeds. The tokens arrive at an address you control, on a chain you may not have been thinking about. If you control the keys, that's recoverable: add the chain, and there they are.
If the destination was an exchange deposit address, it often isn't. Exchange addresses are frequently contracts, and a contract deployed on Ethereum does not exist at the same address on Avalanche unless someone deliberately deployed it there. Sending to a "correct" address on a chain where nothing is deployed to receive it is one of the more reliable ways to lose funds permanently — which is the deeper reason address formats matter more than they look.
Always confirm the network, not just the address. The address will look right regardless.
Sequencers, and what centralisation actually costs you
Most rollups today run a single sequencer, operated by the team that built the chain. It decides transaction ordering and produces blocks.
This is more centralised than people assume, and it's worth being precise about what it does and doesn't put at risk. A sequencer can censor your transaction, reorder transactions around it, or go offline and halt the chain. Base, Arbitrum and others have all had downtime.
What a sequencer generally cannot do is steal, because a well-designed rollup includes a forced-inclusion path: a way to submit your transaction through Ethereum directly, bypassing the sequencer entirely. That escape hatch is what makes "inherits security from L1" more than a slogan.
The honest caveat is that these mechanisms vary considerably in maturity across rollups, and the decentralisation of proving and upgrade control is a work in progress almost everywhere. Independent trackers grade rollups on exactly this, and most sit well below full decentralisation. An L2 with a centralised sequencer and an upgradeable contract controlled by a multisig is meaningfully safer than a sidechain — and meaningfully less safe than Ethereum itself.
Withdrawing, and the shortcut that undoes the point
Native withdrawal from an optimistic rollup means waiting out the challenge window. Roughly a week. People hate this, so an industry exists to remove it.
"Fast withdrawal" services work by having a liquidity provider front you the funds on Ethereum immediately, then claim the slow native withdrawal themselves. It's a useful service and often worth the fee.
Recognise the trade, though. The slow path is trust-minimised: it works because of Ethereum, and no one can stop it. The fast path is a loan from a counterparty, secured by that counterparty's solvency and the correctness of their bridge contract. You're converting a trust-minimised exit into a trusted one to save a few days. Frequently a fine trade. Just not a free one, and not the same thing.
What's actually worth knowing
Ask the vanishing test. If every operator disappeared, could you still get your money out through the base layer? That question sorts rollups from everything else better than any label.
Rollup, sidechain, and independent L1 are three different risk profiles — and only the first one is a layer 2 in the meaningful sense.
Cheap does not imply "secured by Ethereum." Many of the cheapest chains are cheap precisely because they aren't paying for Ethereum's security.
Verify the network before every cross-chain send. The address is not the check you think it is.
Match the chain to the stakes. A sidechain or alternative L1 is a perfectly sensible place for everyday amounts and experimentation. For a holding you'd be devastated to lose, the security model underneath is worth the extra fee.
None of this means you should avoid anything. It means the word "layer 2" is doing less work than the marketing suggests, and the two minutes it takes to find out which category a chain belongs to is time well spent before you put real money on it.
