A sidechain is a separate blockchain that runs alongside a main chain (like Ethereum) with its own consensus mechanism and validator set. It connects to the main chain through a bridge, letting you move assets back and forth. Unlike rollups, sidechains do NOT inherit the main chain's security. If the sidechain validators collude or go offline, your funds on that sidechain are at risk.
What Is a Sidechain?
3 min read
The short version
A sidechain is like a separate highway system connected to the main road by an interchange (bridge). Traffic moves faster and cheaper on the side highway because it has different rules and fewer cars. But the side highway has its own police force (validators). If that police force is corrupt or disappears, you have no protection from the main road's police. Rollups, by contrast, always have the main road's police backing them up.
How It Works
How sidechains work: (1) You bridge assets from the main chain to the sidechain by locking them in a bridge contract on L1, and the sidechain mints equivalent tokens for you. (2) You transact on the sidechain using its own block production, consensus, and fee market (typically much faster and cheaper than L1). (3) To return: you burn tokens on the sidechain, and the bridge releases your locked assets on L1. Key difference from rollups: a sidechain does not post transaction data or proofs to L1. If all sidechain validators collude to steal funds, L1 has no mechanism to intervene. Examples: Polygon PoS (technically a commit chain with its own validators, often called a sidechain), Gnosis Chain (formerly xDai), Ronin (Axie Infinity's sidechain, famously exploited for $625M in 2022). Trade-offs: much cheaper and faster than L1. Security relies entirely on the sidechain's own validator set, which is typically smaller and less decentralized than L1.
The Ronin Bridge hack as a sidechain security failure
Ronin was a sidechain built for Axie Infinity with 9 validators. Only 5-of-9 signatures were needed to approve bridge withdrawals. In March 2022, a hacker compromised 5 validator keys (4 controlled by one company, Sky Mavis, plus 1 from a third party that had forgotten to revoke access). The hacker signed withdrawals draining 173,600 ETH + $25.5M USDC ($625M total) from the bridge. Because Ronin is a sidechain (not a rollup), there was no L1 fraud proof or validity proof mechanism to block this. The theft went unnoticed for 6 days. If Ronin had been a rollup posting data to Ethereum, the invalid withdrawal would have been challenged and reversed within the dispute period.
What People Get Wrong
Sidechains and L2 rollups are the same thing
Fundamentally different security models. Rollups inherit L1 security (you can always prove fraud or verify validity against L1 data). Sidechains have independent security (if their validators fail, L1 cannot help). This distinction matters enormously for how much value you should trust to each.
Polygon is an L2
Polygon PoS is technically a sidechain/commit chain with its own validator set. Polygon also builds actual L2 solutions (Polygon zkEVM is a ZK rollup that inherits Ethereum security). "Polygon" the ecosystem includes both, but the original PoS chain is not a true L2 by the rollup definition.
Sidechains are always less secure
They are always less secure than L1 by definition (fewer validators, less decentralized). But the practical security depends on the specific validator set size, their stakes, and the bridge design. A well-run sidechain with 100 high-stake validators is reasonably secure for moderate amounts. It is the theoretical ceiling that differs, not necessarily the day-to-day reality.
Keep Reading
Sources & Further Reading
- L2Beat Risk Analysis
Comprehensive risk assessment distinguishing sidechains from rollups
- Polygon PoS Docs
Documentation for the Polygon PoS sidechain/commit chain
Questions People Also Ask
- When should I use a sidechain vs. a rollup?
- Sidechains: for smaller amounts where you prioritize low fees and speed (gaming, microtransactions, testing). Rollups: for larger amounts where security matters (DeFi with significant capital). As rollup fees continue to drop with EIP-4844, the case for sidechains over rollups weakens for most use cases.
- Is my money safe on Polygon PoS?
- Polygon PoS has 100+ validators and has operated securely since 2020 with billions in TVL. Practically, it has been reliable. But the security guarantee is its own validator set, not Ethereum's. For very large amounts or maximum security, Ethereum L1 or a true rollup is preferable.
- Can sidechains become rollups?
- Some are transitioning. Polygon is building Polygon zkEVM (a ZK rollup) alongside its PoS chain. Gnosis Chain is exploring validity proof integration. The trend is toward rollup security even for chains that started as sidechains.