Tezos is an open-source, decentralized blockchain platform designed to support decentralized applications (dApps) and smart contracts, with a strong emphasis on security, sustainability, and long-term evolution. Launched in 2018 but conceived in 2014 by Arthur and Kathleen Breitman [1], Tezos gained early attention through one of the largest initial coin offerings (ICOs) in cryptocurrency history, raising over $230 million in 2017. At its core, Tezos employs a unique Liquid Proof of Stake (LPoS) consensus mechanism, where token holders, known as bakers, validate transactions and secure the network based on their stake in the native XTZ token (also called tez). A defining feature of Tezos is its on-chain governance model, enabling stakeholders to propose, vote on, and implement protocol upgrades without requiring contentious hard forks, thus ensuring a more cohesive and adaptable network. This self-amending capability is supported by the Tenderbake consensus algorithm, which provides deterministic finality and enhances network stability. Tezos also prioritizes security through formal verification, allowing developers to mathematically prove the correctness of smart contracts written in its native stack-based language, Michelson, or higher-level languages like LIGO and SmartPy. The platform supports a growing ecosystem of applications in decentralized finance (DeFi), non-fungible tokens (NFTs), and enterprise solutions, with notable partnerships from organizations like McLaren and tZERO. Governance is decentralized, though the Tezos Foundation plays a supportive role in funding development and fostering community growth. Recent upgrades such as Paris and Tallinn have improved scalability, reduced block times, and introduced adaptive issuance to balance inflation and staking rewards, reinforcing Tezos' position as a resilient and forward-looking blockchain in the evolving digital economy [2].
History and Founding
Tezos was conceived in 2014 by Arthur and Kathleen Breitman, a husband-and-wife team with backgrounds in quantitative finance and engineering [1]. The project was initially introduced through a series of whitepapers authored by Arthur Breitman under the pseudonym "L.M. Goodman," outlining a novel blockchain architecture designed for long-term sustainability, formal verification, and on-chain governance [4]. The Breitmans envisioned a self-amending blockchain that could evolve without contentious hard forks, addressing a key limitation observed in early platforms like Bitcoin and Ethereum.
The project gained significant momentum with its initial coin offering (ICO) in July 2017, which raised approximately $232 million in a matter of days, making it one of the largest and most high-profile ICOs in cryptocurrency history [5]. The fundraising was conducted by the newly established Tezos Foundation, a Swiss non-profit organization tasked with overseeing the development and promotion of the network. However, the aftermath of the ICO was marked by internal conflict and legal disputes between the Breitmans and Johann Gevers, then-president of the Tezos Foundation, over control and management of the funds [6]. These governance issues delayed the network’s launch and led to multiple class-action lawsuits from investors, which were eventually settled in 2019.
Despite these early challenges, the Tezos mainnet, known as the "Carthage" protocol, was successfully launched in September 2018 [2]. The launch marked the beginning of a decentralized, community-driven development model, with core protocol development led by independent teams such as Nomadic Labs, Dynamic Ledger Solutions (DLS), and Tarides. The network’s design emphasized resilience and adaptability, incorporating a unique Liquid Proof of Stake (LPoS) consensus mechanism and a formalized on-chain governance process that allowed stakeholders to vote on protocol upgrades.
Governance and Community Development
From its inception, Tezos was designed to avoid the hard fork risks that had fragmented other blockchains. Its on-chain governance model enabled stakeholders to propose, debate, and vote on protocol amendments through a structured five-phase cycle—Proposal, Exploration, Cooldown, Promotion, and Adoption—each lasting approximately 14 days [8]. This process was first successfully executed in 2019 with the activation of the "Athens" upgrade, marking a historic milestone as one of the first major blockchains to implement a formal, decentralized governance mechanism [9].
Over time, the network demonstrated its capacity for continuous evolution. Subsequent upgrades such as "Ithaca 2" introduced the Tenderbake consensus algorithm, which provided deterministic finality and improved network stability [10]. Later upgrades like "Nairobi" in 2023 increased transaction throughput by up to eight times, while "Paris," activated in June 2024, introduced an adaptive issuance model and a data availability layer to support scalable Layer 2 solutions [11][12].
The early concentration of XTZ tokens among the Tezos Foundation, DLS, and large ICO participants initially raised concerns about centralization of governance power [13]. However, the liquid delegation model allowed token holders to participate in governance without running a node, promoting broader stake distribution. Over time, the network evolved into a more decentralized ecosystem, with hundreds of active bakers and a growing base of developers and users contributing to its expansion in areas such as decentralized finance (DeFi), non-fungible tokens (NFTs), and enterprise applications.
Technological Vision and Long-Term Evolution
The founding vision of Tezos centered on creating a blockchain that could adapt to changing technological and regulatory landscapes without fracturing the community. This philosophy was reflected in its support for formal verification, a mathematical method for proving the correctness of smart contracts, which enhanced security for critical applications [2]. The native smart contract language, Michelson, was specifically designed for verifiability and deterministic execution, setting it apart from more permissive languages like Solidity.
The Breitmans’ decision to build a self-amending protocol underscored a long-term commitment to sustainability and decentralization. By integrating governance directly into the protocol, Tezos aimed to create a truly autonomous digital commonwealth, where upgrades are driven by stakeholder consensus rather than centralized authority [15]. This foundational principle has enabled Tezos to remain cohesive through multiple major upgrades, including the 20th protocol amendment, "Tallinn," which reduced block times to 6 seconds and significantly cut storage costs for developers in January 2026 [16].
Today, Tezos stands as a testament to the viability of on-chain governance and community-driven innovation. Its history—from a controversial ICO to a resilient, evolving blockchain—reflects both the challenges and possibilities of decentralized coordination. The platform continues to attract interest from institutions and developers seeking a secure, sustainable, and adaptable foundation for building the next generation of decentralized applications.
Consensus Mechanism and Network Security
Tezos employs a sophisticated and innovative consensus mechanism known as Liquid Proof of Stake (LPoS), which underpins its network security, efficiency, and long-term sustainability. Unlike energy-intensive Proof of Work systems used by networks like Bitcoin, LPoS is designed to be environmentally friendly while maintaining robust security through economic incentives and cryptographic guarantees. This consensus model is tightly integrated with Tezos’ on-chain governance and security architecture, enabling the network to evolve securely without contentious hard forks.
Liquid Proof of Stake (LPoS) and the Role of Bakers
At the heart of Tezos’ consensus is the LPoS protocol, where network participants known as bakers are responsible for creating and validating new blocks. To become a baker, an individual or entity must hold a minimum of 6,000 XTZ (also called tez), the native cryptocurrency of the Tezos network, and operate a full node with the necessary software. Bakers are selected pseudo-randomly based on the amount of XTZ they hold or have delegated to them, ensuring that the probability of being chosen to bake a block is proportional to their stake [17].
A defining feature of LPoS is liquid delegation, which allows any holder of XTZ to delegate their staking rights to a baker without transferring ownership of their tokens. This means that even users with small balances can participate in the consensus process and earn staking rewards, which are distributed in XTZ. Delegated tokens remain liquid and can be transferred at any time, eliminating lock-up periods and enhancing user flexibility [18].
This model promotes greater decentralization by lowering the barrier to entry for participation. Unlike Ethereum’s PoS, which requires a 32 ETH deposit to become a validator, Tezos enables broad stakeholder involvement through delegation, distributing validation power across a larger number of participants and reducing the risk of centralization [19].
Tenderbake: Deterministic Finality and Enhanced Security
Tezos further strengthens its consensus mechanism through the Tenderbake protocol, a Byzantine Fault Tolerant (BFT)-style consensus algorithm introduced in 2022. Tenderbake provides deterministic finality, meaning that once a block has received three confirmations, it is considered final and cannot be reversed without violating fundamental security assumptions of the network [20].
This is a significant improvement over probabilistic finality models used in many other blockchains, where blocks are only considered “final” after a long sequence of confirmations. Deterministic finality enhances security by making reorganization attacks (reorgs) extremely costly and unlikely. For an attacker to reverse a finalized block, they would need to control a large portion of the staked XTZ—typically over 40%—which would require a prohibitively expensive investment and risk severe economic penalties [21].
Tenderbake also improves network liveness and responsiveness by reducing block times and ensuring predictable block finalization, contributing to a more stable and reliable user experience [22].
Network Security: Defense Against Common Attacks
Tezos implements a multi-layered approach to defend against common blockchain attacks, leveraging both economic incentives and cryptographic safeguards.
Double-Spending Prevention
The risk of double-spending is mitigated through Tenderbake’s finality mechanism. Once a transaction is included in a finalized block, it cannot be undone, making double-spending attacks infeasible without compromising the majority of the network’s stake. Additionally, the high cost of acquiring a controlling stake in XTZ acts as a strong economic disincentive for malicious behavior.
Nothing-at-Stake Problem
In traditional PoS systems, validators might be tempted to sign multiple competing chains (forks) because there is little cost to doing so—the so-called “nothing-at-stake” problem. Tezos counters this through implicit penalties: validators who equivocate (sign conflicting blocks) risk losing their reputation and future delegation, even if explicit slashing is not always enforced. The BFT nature of Tenderbake further discourages such behavior by making equivocation detectable and punishable by the protocol [23].
Long-Range Attacks
Long-range attacks, where an attacker uses old private keys to create an alternate blockchain history, are prevented through checkpointing and finality. Once blocks are finalized under Tenderbake, they cannot be altered retroactively. Additionally, Tezos encourages secure key management practices, including the use of hardware wallets and time-lock mechanisms, to prevent the reuse of compromised keys [24].
Cryptographic Security and Key Management
Tezos supports multiple cryptographic algorithms for digital signatures, including Ed25519, Secp256k1, and P-256, enhancing interoperability and resilience against algorithm-specific vulnerabilities [25]. It also incorporates advanced primitives like BLS12-381 for signature aggregation and zero-knowledge proofs, which are used in Layer 2 scaling solutions.
The platform features native support for multisignature (multisig) accounts, introduced with the Seoul upgrade, allowing multiple parties to jointly control an account and requiring multiple signatures to authorize transactions. This is particularly valuable for institutional use cases, decentralized autonomous organizations (DAOs), and high-value wallets, reducing the risk of single points of failure [26].
Hardware wallet integration, including support for devices like Ledger, ensures that private keys remain secure and isolated from potentially compromised systems. Tezos Israel has also developed specialized hardware to protect bakers’ staked assets, further hardening the network’s security infrastructure [27].
Governance and Security: A Self-Amending Network
One of Tezos’ most distinctive security features is its on-chain governance model, which allows the network to upgrade itself without hard forks. This self-amending capability ensures that security improvements, protocol optimizations, and bug fixes can be implemented in a coordinated and consensual manner. Proposals for upgrades go through a structured five-phase voting cycle—proposal, exploration, cooldown, promotion, and adoption—requiring supermajority approval before activation [8].
This process prevents contentious splits like those seen in Bitcoin (e.g., Bitcoin Cash) or Ethereum (e.g., Ethereum Classic), maintaining network unity and continuity. For example, the Tallinn upgrade in January 2026 reduced block time to 6 seconds and improved storage efficiency by up to 100x, all implemented smoothly through on-chain governance without disrupting the network [16].
Adaptive Incentives and Economic Security
Tezos enhances network security through economic incentives. The Adaptive Issuance mechanism, introduced with the Paris upgrade in 2024, dynamically adjusts staking rewards based on the overall staking participation rate. If staking levels are low, rewards increase to attract more participants; if high, rewards decrease to limit inflation. This balances network security with economic sustainability [30].
Staking rewards are currently estimated at around 3–4% annually, providing a steady incentive for users to participate in securing the network. The combination of liquid delegation, adaptive issuance, and direct staking options ensures that security is maintained even as market conditions change [31].
In summary, Tezos’ consensus and security model combines the efficiency of LPoS, the predictability of Tenderbake, and the resilience of on-chain governance to create a secure, adaptable, and decentralized network. Through economic incentives, cryptographic robustness, and community-driven upgrades, Tezos maintains a high degree of security while remaining accessible and sustainable in the long term.
On-Chain Governance Model
Tezos is distinguished by its innovative on-chain governance model, a self-amending mechanism that enables the network to evolve securely and cohesively without contentious hard forks. This system embeds decision-making directly into the blockchain protocol, allowing stakeholders to propose, debate, vote on, and implement protocol upgrades through a formal, transparent, and decentralized process. Unlike many other blockchains that rely on off-chain consensus and social coordination, Tezos ensures that changes are enacted automatically and uniformly, preserving network integrity and community unity [8].
Structure of the Governance Cycle
The on-chain governance process in Tezos is structured into five distinct phases, each lasting approximately 14 days (about 20,480 blocks), totaling roughly 70 days for a complete upgrade cycle [33]. This phased approach ensures thorough evaluation, broad participation, and robust security before any change is activated.
1. Proposal Period
During the Proposal Period, any baker (a validator who holds or is delegated at least 6,000 XTZ) can submit a protocol upgrade. Each proposal includes a hash of the new code and a description of the intended changes. Stakeholders can support multiple proposals, and the top candidates—typically up to 20—are advanced to the next stage based on the volume of support measured in rolls (each roll equals 8,000 tez) [34].
2. Exploration Period
In the Exploration Period, the most popular proposal is selected for a formal vote. Bakers cast their votes on-chain, and the proposal must meet two thresholds to proceed: a minimum quorum (participation rate) and a supermajority of at least 80% approval. This high bar ensures that only widely supported changes advance, preventing minority-driven forks [35].
3. Cooldown Period
The Cooldown Period serves as a reflection phase, allowing the community to review the results, conduct further technical analysis, and prepare for implementation. No voting occurs during this time, but it is critical for ensuring that the network remains stable and informed before final confirmation [8].
4. Promotion Period
The Promotion Period features a second on-chain vote to confirm continued support for the proposal. Again, both quorum and supermajority requirements must be met. This dual-vote mechanism reinforces legitimacy and reduces the risk of hasty or coerced decisions, acting as a safeguard against governance attacks or manipulation [34].
5. Adoption Period
If the proposal passes the promotion vote, it enters the Adoption Period, during which the new protocol is automatically activated on the mainnet. The transition is seamless—nodes update without manual intervention, and there is no network split. This automatic activation eliminates the need for hard forks, ensuring continuity and cohesion across the network [38].
Governance and Security: Preventing Hard Forks
A defining advantage of Tezos’ governance model is its ability to prevent hard forks. By integrating the upgrade process directly into the protocol, Tezos avoids the divisive splits seen in other blockchains like Bitcoin (e.g., Bitcoin Cash) and Ethereum (e.g., Ethereum Classic). The requirement for broad consensus, combined with automated activation, ensures that upgrades are implemented only when there is strong community agreement, minimizing conflict and fragmentation [15].
For example, the Tallinn upgrade in January 2026 successfully reduced block times to 6 seconds and improved storage efficiency by up to 100x, all without causing a network fork. This demonstrated the practical effectiveness of Tezos’ self-amendment mechanism in delivering significant technical improvements while maintaining network unity [16].
Incentives for Participation
Tezos aligns economic incentives with governance participation through its Liquid Proof of Stake (LPoS) system. Holders of XTZ can participate in governance either by running a baking node or by delegating their voting rights to a baker. Delegation does not transfer ownership of tokens; funds remain liquid and transferable at any time, lowering the barrier to entry and encouraging broader involvement [41].
Participants are rewarded with XTZ for both staking and voting, creating a direct financial incentive to engage in governance. The Adaptive Issuance mechanism, introduced with the Paris upgrade in 2024, dynamically adjusts inflation based on the overall staking rate—increasing rewards when participation is low and decreasing them when it is high. This balances network security with economic sustainability, promoting long-term engagement [30].
Mitigating Risks: Centralization and Voter Apathy
Despite its strengths, the governance model faces challenges such as voter apathy and the risk of centralization. To address voter apathy, Tezos promotes accessibility through user-friendly delegation tools and educational initiatives by organizations like Tezos Commons and the Tezos Agora Forum. These efforts help inform stakeholders and increase turnout in governance cycles [43].
To counter centralization, the system allows for flexible delegation—holders can switch bakers at any time, ensuring accountability and reducing the risk of entrenched power. Transparency tools like Pebble, a decentralized voting solution built on Tezos, enhance auditability and trust in the process [44]. Additionally, research into privacy-preserving voting mechanisms using zero-knowledge proofs aims to further decentralize and secure the governance process [45].
Comparison with Other Blockchains
Tezos’ on-chain governance contrasts sharply with the off-chain models of Bitcoin and Ethereum. Bitcoin relies on informal consensus through Bitcoin Improvement Proposals, often leading to contentious debates and hard forks when agreement cannot be reached. Ethereum uses Ethereum Improvement Proposals, but final decisions depend on social consensus among developers and validators, lacking a formal on-chain voting mechanism [46].
In contrast, Cardano has moved toward on-chain governance with its Voltaire phase and the Chang hard fork in 2024, but its system is still maturing compared to Tezos, which has had a fully operational self-amending protocol since its inception [47]. Tezos’ longer track record and automated upgrade process give it a significant advantage in governance maturity and reliability.
Real-World Example: The Tallinn Upgrade
The Tallinn protocol upgrade exemplifies the effectiveness of Tezos’ governance model. Proposed by Nomadic Labs, the upgrade introduced faster block finality, enhanced security via BLS12-381 signature aggregation, and significant storage optimizations. The proposal underwent full community scrutiny, passed all governance phases with strong support, and was activated seamlessly on January 24, 2026 [48].
Throughout the cycle, forums like Reddit and Discord hosted technical discussions, while entities like the Tezos Foundation provided educational materials to ensure informed participation. Despite initial concerns about increased hardware requirements for bakers, transparent communication and testing on testnets resolved these issues, demonstrating the system’s capacity to manage dissent constructively [49].
Conclusion
Tezos’ on-chain governance model represents a pioneering approach to decentralized decision-making, combining technical innovation with democratic participation. By embedding the upgrade process within the protocol, Tezos ensures that evolution occurs in a secure, predictable, and inclusive manner. The integration of economic incentives, transparent voting, and automated execution sets a benchmark for sustainable blockchain governance, positioning Tezos as a leader in the development of self-sustaining, community-driven networks [8].
Tokenomics and the Role of XTZ
The native token of the Tezos blockchain, known as XTZ (also referred to as tez or represented by the symbol ꜩ), plays a central role in the network's economic model, security, and governance. Unlike traditional cryptocurrencies that rely on energy-intensive mining, Tezos utilizes a Liquid Proof of Stake (LPoS) consensus mechanism, where XTZ serves as the primary incentive for participation, security, and decision-making. The tokenomics of XTZ are designed to balance inflation, staking rewards, and long-term sustainability through mechanisms such as adaptive issuance and on-chain governance [51].
Functions of the XTZ Token
XTZ is a utility token that underpins the operation of the Tezos ecosystem. Its primary functions include:
Transaction Fees and Network Usage
XTZ is used to pay for transaction fees, commonly referred to as gas, required to execute operations on the blockchain. These operations include transferring funds, deploying smart contracts, and interacting with decentralized applications (dApps) [51]. By requiring XTZ for network usage, the protocol ensures that users contribute to the economic security of the network while preventing spam and resource abuse.
On-Chain Governance Participation
One of the defining features of Tezos is its on-chain governance model, which allows stakeholders to propose, vote on, and implement protocol upgrades without requiring contentious hard forks. The voting power within this system is directly proportional to the amount of XTZ held or delegated by a participant [38]. This mechanism ensures that those with the greatest economic stake in the network have a corresponding influence over its evolution, aligning incentives between developers, validators, and users.
The governance process unfolds in structured cycles, each lasting approximately 14 days, and includes phases such as proposal, exploration, cooldown, promotion, and adoption [8]. During these periods, delegates—validators known as bakers—vote on behalf of themselves and those who have delegated their XTZ. This structured, transparent process enhances legitimacy and reduces the risk of community splits.
Network Security via Staking (Baking)
Tezos secures its network through LPoS, where participants can contribute to consensus by either becoming a baker or delegating their XTZ to one. To operate as a baker, an individual must hold a minimum of 6,000 XTZ and run a full node [17]. Bakers are responsible for creating new blocks and attesting to the validity of others, earning rewards in return.
However, most users participate through delegation, a process that allows them to lend their staking rights to a baker without transferring ownership of their tokens [18]. This design lowers the barrier to entry, enabling even small holders to earn staking rewards—typically around 3–4% annually—while maintaining full liquidity and control over their assets [31]. The introduction of direct staking with the Paris upgrade in 2024 further enhanced this model by allowing users to stake individually without intermediaries, increasing reward potential and reducing reliance on third-party services [58].
Adaptive Issuance and Inflation Model
Tezos employs a dynamic inflation mechanism known as Adaptive Issuance, introduced with the Paris protocol upgrade [30]. Unlike fixed inflation models, Adaptive Issuance adjusts the rate of new XTZ creation based on the network’s overall staking participation. When staking levels are low, inflation increases to incentivize more participation; when staking is high, inflation decreases to minimize unnecessary dilution of the token supply.
This self-regulating mechanism aims to achieve an optimal balance between network security and economic sustainability. As of 2026, the annual inflation rate of XTZ was approximately 5.82%, with staking rewards averaging around 4.00% per year [60]. Because rewards are funded through newly minted XTZ and transaction fees, the system functions as a decentralized funding mechanism for validators, ensuring long-term security without relying solely on user fees.
Token Distribution and Decentralization
The initial distribution of XTZ occurred during a highly publicized initial coin offering (ICO) in 2017, which raised over $230 million [1]. The allocation was as follows:
- 79.50% to ICO participants
- 10% to the Tezos Foundation
- 10% to Dynamic Ledger Solutions (DLS), the company founded by Arthur and Kathleen Breitman
- 0.41% to early backers and contractors [6]
While this distribution initially raised concerns about centralization, particularly due to the large holdings of DLS and the Foundation, the on-chain governance and liquid delegation mechanisms have helped distribute influence more broadly over time. However, analyses have shown that a small number of entities still control a significant portion of the staked supply, indicating ongoing risks of governance centralization [13].
Despite these challenges, the ability to freely delegate and reassign voting power enhances accountability, as bakers must maintain performance and trust to retain delegations. Tools such as Pebble and platforms like Agora further promote transparency and engagement in the governance process [44].
Asset Creation and Ecosystem Expansion
Beyond its core functions, XTZ serves as the foundation for a broader digital asset ecosystem. Developers can create new tokens and non-fungible tokens (NFTs) on the Tezos blockchain using standards such as FA2, which supports both fungible and non-fungible assets within a single contract interface [51]. The low transaction costs and energy efficiency of Tezos have made it a popular choice for NFT marketplaces like Objekt.com and enterprise tokenization projects.
Notable real-world applications include the tokenization of real estate assets worth over $300 million in partnership with Vertalo and tZERO, as well as the launch of xU3O8, a project that tokenizes uranium with support from Archax and Cameco [66]. These initiatives demonstrate how XTZ enables the bridging of traditional finance and blockchain-based systems.
Security and Incentive Alignment
The LPoS model aligns economic incentives with network security. Because bakers must hold or be delegated significant amounts of XTZ, malicious behavior—such as attempting double-signing or censorship—can result in reputational damage and loss of future delegations, even in the absence of formal slashing penalties [67]. The integration of advanced cryptographic tools, including support for BLS12-381 signatures and time-lock mechanisms, further strengthens security by enabling features like signature aggregation and front-running protection [68].
Additionally, the use of hardware wallets such as Ledger and specialized security devices developed by Tezos Israel help protect validators' private keys, reducing the risk of compromise [27].
Conclusion
The tokenomics of XTZ are deeply intertwined with the technical and governance architecture of Tezos. By combining liquid staking, adaptive inflation, and on-chain decision-making, the protocol creates a self-sustaining economic ecosystem that promotes participation, security, and long-term evolution. The ability to delegate voting rights ensures broad accessibility, while governance cycles provide a structured, transparent path for upgrades—exemplified by successful implementations such as the Tallinn and Paris upgrades [16]. As Tezos continues to expand through Layer 2 solutions like Etherlink and modular scalability initiatives under Tezos X, the role of XTZ as a cornerstone of economic and governance activity remains central to its vision of a resilient, adaptable blockchain [71].
Smart Contracts and Formal Verification
Tezos is designed as a secure and reliable platform for the development and execution of smart contracts, leveraging a unique combination of a purpose-built programming language, formal verification methodologies, and a robust tooling ecosystem. The platform's emphasis on security and correctness makes it particularly well-suited for high-stakes applications in decentralized finance (DeFi), digital asset management, and enterprise solutions, where the cost of a software bug can be catastrophic.
The Michelson Programming Language: Security by Design
At the core of Tezos' smart contract system is Michelson, its native, low-level, stack-based programming language. Unlike higher-level languages that abstract away complexity, Michelson's design prioritizes verifiability and determinism over ease of use. It is a purely functional, stack-oriented language, similar in paradigm to Forth, where all operations manipulate a single data stack [72]. This architecture eliminates many common sources of bugs found in imperative languages, such as race conditions and unintended state mutations, because it enforces immutability of data and has no concept of global variables.
The language's static type system and well-defined operational semantics are fundamental to its security model. Every operation in Michelson has a precise effect on the stack's type state, which can be checked at compile time. This rigorous type-checking prevents entire classes of errors, such as type mismatches and invalid memory accesses, before the contract is even deployed. The deterministic execution, where the same inputs always produce the same outputs, is essential for the consensus of a blockchain network, ensuring all nodes can independently verify the outcome of a contract call [73].
Formal Verification: Proving Code Correctness
The most significant security feature of the Tezos ecosystem is its native support for formal verification. This is a mathematical technique that allows developers to prove, with a high degree of certainty, that a smart contract behaves exactly as intended under all possible conditions. While testing can only verify that a contract works for a finite set of inputs, formal verification can prove its correctness for an infinite set of scenarios.
Michelson is uniquely suited for formal verification due to its simple, well-defined semantics. The primary tool for this is Mi-Cho-Coq, a framework developed by Nomadic Labs that integrates the Coq proof assistant with the Tezos ecosystem [74]. Mi-Cho-Coq provides a formal model of Michelson's syntax, type system, and operational semantics. Using this model, developers can write formal specifications of their contract's desired properties—such as "funds can only be withdrawn by the owner" or "the total supply of a token is invariant"—and then use Coq to construct a mathematical proof that the contract's code satisfies these properties [75].
This capability has been applied to real-world, high-value contracts. For example, the core contract of the Dexter decentralized exchange was formally verified to ensure the absence of critical vulnerabilities like reentrancy attacks or fund-locking bugs [76]. Similarly, the Liquidity Baking protocol, a key economic mechanism on Tezos, underwent formal verification to guarantee its functional correctness and security [77]. This proactive approach to security, borrowed from safety-critical industries like aerospace and nuclear energy, sets Tezos apart from platforms that rely solely on post-deployment audits and testing [78].
Complementary Verification Tools and Higher-Level Languages
Beyond Mi-Cho-Coq, the Tezos ecosystem offers a suite of complementary tools to enhance contract security. Helmholtz is a static analyzer that uses refinement types and SMT solvers like Z3 to automatically verify properties of Michelson contracts, providing a more accessible path to verification for developers who may not be experts in interactive theorem proving [79]. WhylSon and SCV are other frameworks that use symbolic execution and automated reasoning to detect potential vulnerabilities by exploring all possible execution paths of a contract [80].
To make development more accessible without sacrificing security, Tezos supports several high-level languages that compile down to Michelson. These include LIGO, which offers syntaxes similar to OCaml and JavaScript, and SmartPy, which uses a Python-like syntax [81]. Crucially, because these languages compile to the formally verifiable Michelson, the security guarantees of formal verification can be extended to contracts written in these more user-friendly languages. Archetype is another high-level language specifically designed with security in mind, allowing developers to embed formal specifications directly into the code, which can then be translated into verification conditions for tools like Why3 [82].
Integration with Governance and Protocol Evolution
The security of smart contracts on Tezos is not static; it evolves in tandem with the protocol itself. The platform's on-chain governance model allows the community to propose, vote on, and implement upgrades to the core protocol, including the Michelson interpreter and the underlying consensus algorithm, Tenderbake [8]. This ensures that the foundation upon which smart contracts are built can be improved for security and efficiency without requiring contentious hard forks.
For instance, the Tallinn protocol upgrade, activated in January 2026, introduced significant improvements that benefit smart contract developers, such as a reduction in block time to 6 seconds and optimizations that cut application storage costs by up to 100 times [48]. The ability to make such upgrades in a coordinated, consensus-driven manner ensures that the platform remains at the forefront of security and performance, providing a stable and secure environment for the long-term deployment of critical dApps [33]. This holistic approach, combining a verifiable language, advanced tooling, and a self-amending protocol, establishes Tezos as a leader in secure and reliable blockchain development.
Scalability and Layer 2 Solutions
Tezos addresses scalability challenges through a modular, multi-layered architecture that combines enhancements at the Layer 1 level with advanced Layer 2 solutions, ensuring high throughput, low transaction costs, and sustained network performance. Unlike many second-generation blockchains that suffer from congestion and high gas fees during peak usage, Tezos employs a strategic approach that offloads transaction processing to off-chain environments while maintaining the security and decentralization of the main chain. This layered model enables Tezos to support high-frequency applications such as decentralized finance (DeFi), non-fungible tokens (NFTs), and enterprise solutions without compromising on its core principles of security and governance.
Layer 1 Scalability Enhancements
Tezos has implemented several key upgrades to its Layer 1 protocol to improve intrinsic scalability. The Nairobi upgrade, activated in 2023, significantly increased network speed by optimizing block propagation and transaction throughput, making the network approximately eight times faster [11]. This improvement laid the groundwork for higher transaction volumes and reduced confirmation times.
A more transformative upgrade, Paris, was activated on June 4, 2024, and introduced a dedicated Data Availability Layer [87]. This component is critical for supporting Layer 2 scaling solutions, as it ensures that transaction data from off-chain environments is securely and transparently stored on the main chain. By guaranteeing data availability, Tezos enhances the trust and verifiability of Layer 2 operations, enabling a scalable yet secure ecosystem. The Paris upgrade also improved finality times and strengthened the staking mechanism, further boosting network performance [12].
Layer 2 Solutions: Smart Rollups and Etherlink
The cornerstone of Tezos’ scalability strategy is its implementation of Smart Rollups, a Layer 2 technology that allows for the execution of custom applications in off-chain environments. These rollups process thousands of transactions off the main chain before periodically anchoring validity proofs and data back to Layer 1. This approach drastically increases throughput while maintaining the security guarantees of the underlying blockchain. Smart Rollups are designed to be highly flexible, supporting a wide range of use cases from gaming to financial services [89].
A flagship example of this technology is Etherlink, a Layer 2 solution launched in February 2025 that is compatible with the Ethereum Virtual Machine (EVM) [90]. Etherlink enables developers to deploy Ethereum-based DeFi and NFT applications on Tezos with minimal modifications, benefiting from significantly lower gas costs—around one cent per transaction—and faster block times of approximately 0.7 seconds. By March 2026, Etherlink had processed over 70 million transactions and supported 1.5 million addresses, demonstrating its capacity for mass adoption [91].
Etherlink not only enhances scalability but also promotes interoperability between the Tezos and Ethereum ecosystems. This cross-chain compatibility allows projects to leverage Tezos’ energy-efficient Liquid Proof of Stake consensus and robust on-chain governance while maintaining access to familiar development tools and user bases.
Comparison with Other Blockchains
Compared to other major blockchains, Tezos demonstrates superior scalability metrics. While Cardano achieves a maximum throughput of about 11.62 transactions per second (TPS) and an effective TPS of 0.29, Tezos reaches a maximum of 50.58 TPS with an effective TPS of 3.43, reflecting higher real-world transaction volume [92]. In contrast, Ethereum, despite its extensive ecosystem, continues to face scalability bottlenecks and high gas fees during periods of high demand, even with its own Layer 2 rollups [93]. Tezos’ integrated approach—combining native Layer 2 support with a modular architecture—provides a more seamless and predictable user experience.
Future Roadmap: Tezos X
Looking ahead, the Tezos X initiative represents a vision for a fully modular and highly scalable blockchain architecture [71]. This next-generation framework aims to decouple computation, storage, and data availability into specialized components, enabling performance comparable to cloud backends. Tezos X will further optimize composability and energy efficiency, positioning Tezos as a leading platform for scalable, sustainable blockchain applications.
The integration of Layer 2 solutions with Tezos’ on-chain governance ensures that scalability upgrades are implemented in a decentralized and conflict-free manner. Unlike blockchains that rely on contentious hard forks for major changes, Tezos’ self-amending protocol allows for smooth transitions, as seen with the activation of Paris and Etherlink. This governance model not only prevents network splits but also fosters long-term stability and community cohesion.
In summary, Tezos’ approach to scalability combines immediate Layer 1 optimizations with forward-looking Layer 2 innovations like Smart Rollups and Etherlink. Supported by a modular architecture and adaptive governance, this strategy enables Tezos to deliver high performance, low costs, and strong security—key advantages in the competitive landscape of smart contract platforms.
Ecosystem and Real-World Applications
Tezos hosts a diverse and rapidly expanding ecosystem of real-world applications across multiple sectors, leveraging its secure, energy-efficient, and self-amending blockchain infrastructure. The platform supports a wide range of use cases, from decentralized finance (DeFi) and non-fungible tokens (NFTs) to enterprise-grade solutions and public sector innovations. Its focus on sustainability, low transaction costs, and formal verification makes it particularly attractive for developers and organizations seeking reliable and scalable blockchain solutions.
Non-Fungible Tokens (NFTs)
One of the most prominent sectors in the Tezos ecosystem is the NFT market. The platform’s low carbon footprint and minimal gas fees have made it a preferred choice for artists, creators, and collectors. Tezos enables the creation and trading of digital art and collectibles through platforms like Objekt.com, which provides an accessible and eco-friendly environment for minting NFTs [95]. Notably, the Formula 1 team McLaren has partnered with Tezos to launch a dedicated NFT platform, allowing fans to engage with exclusive digital content and memorabilia [96]. This collaboration highlights Tezos’ appeal to major brands seeking to enter the digital collectibles space with a sustainable and scalable blockchain.
Decentralized Finance (DeFi)
Tezos supports a growing suite of DeFi applications that offer financial services such as lending, borrowing, and yield generation without intermediaries. Projects like Youves enable the creation of synthetic stablecoins and decentralized lending protocols, leveraging the security and verifiability of smart contracts written in Michelson [97]. The platform’s support for liquidity pools and yield farming allows users to earn rewards by providing assets to decentralized markets. The integration of formal verification tools ensures that financial logic is mathematically sound, reducing the risk of exploits and enhancing user trust in DeFi protocols.
Tokenization of Real-World Assets
Tezos is at the forefront of asset tokenization, enabling the representation of physical assets on the blockchain to increase liquidity and accessibility. A landmark collaboration between Vertalo and tZERO brought $300 million worth of real estate assets onto the Tezos blockchain, allowing for fractional ownership and streamlined investment processes [98]. Similar initiatives have tokenized properties in Central America and Saudi Arabia, demonstrating the platform’s global applicability [99]. In 2024, the project xU3O8 launched the world’s first tokenized uranium on Tezos, with participation from industry leaders like Archax and Cameco, opening new frontiers in commodity finance [66].
Gaming and the Metaverse
The Tezos ecosystem includes blockchain-based gaming and metaverse applications where players have true ownership of in-game assets via NFTs. Platforms like Stables combine interactive gameplay with digital collectibles, enabling verifiable scarcity and cross-platform interoperability [101]. These games leverage the deterministic finality of the Tenderbake consensus algorithm to ensure fast and secure transactions, enhancing user experience. The integration of NFTs into gaming ecosystems fosters new economic models, where players can trade, sell, or stake their digital assets across virtual worlds.
Enterprise and Public Sector Solutions
Tezos is increasingly adopted by enterprises and public institutions for its compliance-ready architecture and robust security features. Tezos DigiSign, developed by Coexya, is an open-source solution for digital document certification that ensures authenticity, immutability, and compliance with the European eIDAS regulation [102]. Similarly, Tediji by Coexya provides secure electronic signatures with blockchain-based timestamping, enhancing legal validity and auditability [103]. These solutions demonstrate Tezos’ suitability for high-integrity use cases in legal, administrative, and corporate environments.
Social Impact and Health Applications
Beyond commercial applications, Tezos supports initiatives with significant social impact. Project Vigicard, backed by the Tezos Foundation, uses blockchain to track drug allergies, ensuring patient safety through immutable and accessible medical records [104]. Another innovative project, Keru, creates digital souvenirs linked to proof-of-visit on the blockchain, offering new experiences in tourism and cultural heritage [105]. These applications showcase the platform’s potential to drive positive change in healthcare, education, and community engagement.
Governance and Decentralized Decision-Making
Tezos is also pioneering new models of decentralized governance through projects like Trustless Business, which explores tez-based voting systems for collective decision-making within organizations and communities [106]. These systems leverage the native governance capabilities of the Tezos protocol, enabling transparent, secure, and tamper-proof voting mechanisms. By integrating voting directly into the blockchain, Tezos empowers stakeholders to participate in organizational governance without reliance on centralized authorities.
Scalability and Layer 2 Innovations
To support high-throughput applications, Tezos has developed advanced Layer 2 solutions such as Smart Rollups, which enable off-chain execution of smart contracts while anchoring proofs to the main chain. A flagship implementation is Etherlink, a Layer 2 compatible with the Ethereum Virtual Machine (EVM), launched in February 2025. Etherlink has demonstrated impressive performance, processing over 70 million transactions and supporting 1.5 million addresses by March 2026, with gas fees as low as one cent and block times of approximately 0.7 seconds [90]. This innovation allows developers to deploy Ethereum-compatible applications on a more efficient and cost-effective infrastructure.
The Tezos ecosystem continues to evolve through continuous protocol upgrades like Paris and Tallinn, which enhance scalability, reduce block times, and improve data availability [12], [16]. These improvements, combined with a strong emphasis on security, formal verification, and decentralized governance, position Tezos as a leading platform for real-world blockchain adoption across industries.
Development Tools and Programming Languages
Tezos provides a rich and secure ecosystem for developers to build decentralized applications (dApps) and smart contracts, emphasizing formal verification, accessibility, and long-term maintainability. The platform supports a stack of programming languages and development tools designed to cater to both low-level security experts and high-level application developers, ensuring that code deployed on the blockchain is correct, efficient, and resilient to common vulnerabilities.
Michelson: The Native Stack-Based Language
At the core of Tezos' smart contract system is Michelson, a low-level, stack-based programming language specifically designed for writing verifiable and secure smart contracts [72]. Unlike imperative languages such as Solidity, Michelson is inspired by functional programming principles, featuring immutability, no side effects, and a strict type system. These characteristics make it highly suitable for formal verification, a process that allows developers to mathematically prove the correctness of their contracts.
Michelson's stack-based architecture requires all operations to manipulate a data stack, with instructions like PUSH, DROP, SWAP, and DUP explicitly managing data flow. This design enforces determinism and simplifies static analysis, reducing the risk of bugs such as reentrancy attacks or integer overflows that plague other blockchain platforms [73]. Its well-defined semantics and lack of mutable state make it an ideal target for formal methods, positioning Tezos as a leader in secure smart contract development.
High-Level Languages Compiling to Michelson
To improve developer accessibility, several high-level languages compile down to Michelson, allowing developers to use familiar syntax while benefiting from the underlying security guarantees. These include:
- LIGO: A family of languages with syntaxes resembling OCaml (CameLIGO), JavaScript (JsLIGO), and Pascal (PascaLIGO). LIGO is designed for readability and ease of use, making it accessible to a broad range of developers. It includes built-in checks and abstractions that help prevent common smart contract vulnerabilities [112].
- SmartPy: A Python-inspired language that enables developers to write smart contracts using Pythonic syntax. SmartPy provides a powerful testing framework and integrates seamlessly with development environments, allowing for rapid prototyping and simulation of contract behavior [113].
- Archetype: A domain-specific language (DSL) focused on security and formal correctness. Archetype allows developers to annotate contracts with invariants and security properties directly in the code, which can then be translated into formal specifications for verification tools like Why3 [82].
These high-level languages abstract away the complexity of Michelson while preserving its safety features, enabling faster development cycles without sacrificing security.
Formal Verification Tools and Frameworks
A defining feature of Tezos is its strong support for formal verification, which sets it apart from many other blockchain platforms. The combination of Michelson's design and advanced tooling allows developers to mathematically prove that their contracts behave as intended under all conditions.
- Mi-Cho-Coq: One of the most prominent verification frameworks, Mi-Cho-Coq embeds Michelson into the Coq proof assistant, a powerful environment for constructing formal proofs. It enables developers to define and verify critical properties such as fund safety, access control, and state invariants. This tool has been used to formally verify real-world contracts like Dexter, a decentralized exchange on Tezos [74].
- Helmholtz: A static verifier based on refinement types and SMT solvers like Z3, Helmholtz allows automated checking of safety properties such as non-reentrancy and balance invariants. It provides a more accessible entry point to formal methods compared to interactive provers like Coq [79].
- WhylSon: Built on the Why3 platform, WhylSon translates Michelson contracts into WhyML, enabling both automatic and interactive verification. It supports modular reasoning and is particularly effective for proving functional correctness [80].
- K Framework: Developed in collaboration with Runtime Verification, K provides a formal semantics for Michelson and enables model checking and runtime verification. This allows for deeper analysis of contract behavior and detection of edge-case vulnerabilities [118].
These tools collectively form a robust verification pipeline, allowing developers to catch bugs before deployment and provide mathematical assurances of correctness.
Development and Testing Infrastructure
Tezos offers a comprehensive suite of development tools to streamline the smart contract lifecycle:
- Octez: The official client software for interacting with the Tezos blockchain, Octez includes
octez-client, a command-line tool for managing accounts, sending transactions, deploying contracts, and participating in governance. It also supports local sandboxed environments for testing contracts without incurring network costs [119]. - SmartPy IDE: An online integrated development environment that allows developers to write, test, debug, and deploy contracts directly from the browser. It includes visual debugging tools and simulation capabilities, making it ideal for beginners and experienced developers alike [120].
- TZIP Standards: The Tezos Improvement Proposal (TZIP) process defines common standards for smart contracts, such as TZIP-7 for fungible tokens and TZIP-12 for non-fungible tokens (NFTs). These standards promote interoperability across dApps and simplify integration with wallets and marketplaces [121].
Integration with Hardware and Security Tools
Security extends beyond code correctness to key management and operational integrity. Tezos supports integration with hardware wallets such as Ledger, which store private keys in secure elements, protecting them from malware and remote attacks [122]. Additionally, Tezos Israel has developed specialized hardware devices to protect the keys of bakers, enhancing the security of the consensus layer [27].
The platform also supports advanced cryptographic primitives such as BLS12-381 for signature aggregation and zero-knowledge proofs, as well as time-lock encryption to prevent front-running and MEV (Miner Extractable Value) attacks [124]. These features are increasingly important as the ecosystem evolves toward more complex and privacy-preserving applications.
Conclusion
Tezos stands out in the blockchain landscape by offering a development environment where security is not an afterthought but a foundational principle. Through the use of Michelson, high-level languages like LIGO and SmartPy, and advanced formal verification tools such as Mi-Cho-Coq and Helmholtz, Tezos enables developers to build smart contracts with unprecedented levels of assurance. Combined with robust testing frameworks, standardized interfaces, and secure key management practices, the Tezos development stack supports the creation of reliable, verifiable, and production-grade decentralized applications across decentralized finance, non-fungible tokens, and enterprise solutions.