Ethereum L2s ranked by security
- SpotedCrypto published an Ethereum L2 scorecard on May 18 comparing Arbitrum, Base, OP Mainnet and zkSync on TVL, fees, throughput and security. - L2BEAT’s current dashboard shows Arbitrum One, Base and OP Mainnet at Stage 1, while zkSync Era remains Stage 0, underscoring security gaps. - The next datapoints are L2BEAT stage changes and SEC tokenized-securities rulemaking, with January 28 guidance already on the books.
SpotedCrypto published an Ethereum Layer 2 scorecard on May 18 that ranked major rollups by total value locked, fees, throughput and security, arguing that the competitive split is no longer mainly about raw transaction-per-second claims. The piece compared Arbitrum, Base, OP Mainnet and zkSync alongside other networks and framed security-stage status as a core filter for capital allocation. L2BEAT, the independent monitoring site the article cites, currently shows a more advanced security picture for some large optimistic rollups than for several rivals. SEC guidance issued on January 28 on tokenized securities adds a second reason the security debate matters, because it formalized how U.S. regulators are thinking about securities represented on crypto networks. ### Why is this scorecard getting attention now? SpotedCrypto said Ethereum’s L2 ecosystem had more than $48 billion in TVL across 73 active rollups as of mid-2026, with Arbitrum, Base and OP Mainnet dominating activity. The report said EIP-4844, activated in March 2024, cut data-posting costs enough that fees across major L2s fell into a narrow band, making cost less useful as the main ranking tool. (spotedcrypto.com) That matters because once fees compress, the remaining differentiators are harder to market but easier for institutional users to care about: proof systems, withdrawal assumptions, governance controls and operator risk. SpotedCrypto’s framing was explicit that security ratings had become central to evaluation by capital allocators. ### What does the current security table actually show? (spotedcrypto.com) L2BEAT’s live summary page currently lists Arbitrum One as an optimistic rollup using BoLD and rated Stage 1, with about $15.57 billion in value secured. The same page lists Base as Stage 1 with about $12.10 billion, and OP Mainnet as Stage 1 with about $1.57 billion. zkSync Era is listed as Stage 0 with about $306.61 million. That live data is important because it updates one part of the premise in the third-party scorecard. (spotedcrypto.com) SpotedCrypto wrote that only Arbitrum One had achieved Stage 1 as of mid-2026, but L2BEAT’s current dashboard now shows Base and OP Mainnet there as well, alongside other networks such as Starknet and Scroll. ### Why does “Stage 1” matter more than a TPS number? (l2beat.com) L2BEAT defines its framework around whether users can rely on proof systems and exit mechanisms without depending fully on operators. Its summary says rollups post commitments to Ethereum and validate them through validity proofs or fraud proofs, with data posted to Ethereum as well. SpotedCrypto described the divide in practical terms: optimistic rollups rely on a challenge window before withdrawals finalize, while ZK rollups generate validity proofs for each batch. (spotedcrypto.com) The article said security-stage ratings turn on permissionless proofs, governance controls and the ability for users to exit funds to mainnet without depending on a rollup operator. (l2beat.com) ### Where do tokenized securities enter the picture? The SEC’s divisions of Corporation Finance, Investment Management and Trading and Markets said on January 28 that a tokenized security is still a security under federal law when ownership is represented through a crypto asset and recorded on one or more crypto networks. The statement said market participants should use that guidance as they prepare registrations, proposals or requests for Commission action. (spotedcrypto.com) That guidance does not name any Ethereum L2 as a winner. It does, however, make the infrastructure question more concrete: if securities are recorded on crypto networks, operators, proof systems, settlement assumptions and governance controls are no longer side issues. ### So what should readers watch next? (sec.gov) L2BEAT’s dashboard is the clearest public place to watch for stage upgrades, proof-system changes and shifts in value secured across Arbitrum, Base, OP Mainnet and zkSync. SEC action is the other near-term marker: the agency’s January 28 statement invited further registrations, proposals and requests tied to tokenized securities. (l2beat.com) (sec.gov)