Startup Diligence
Diligence report Ethereum Layer 2, zkEVM rollup and blockchain infrastructure Private unicorn / growth-stage blockchain infrastructure network with public token ecosystem

Scroll

Scroll Startup Diligence Report

Proceed only to confirmatory diligence. A credible thesis would require proving that public network activity converts into durable, compliant company economics and that Scroll can maintain differentiated zkEVM performance/security in an intensely competitive L2 market while reducing centralization and regulatory risk.

Company profile

Scroll Startup Diligence Report

Scroll appears to be an active Ethereum Layer 2 infrastructure company/network with meaningful public technical assets, institutional funding references, audited protocol components and visible ecosystem usage. However, investment diligence remains incomplete because company-level financials, cap table, token/equity economics, customer revenue, legal posture and management artifacts are not publicly available.

Website
scroll.io
Sector
Ethereum Layer 2, zkEVM rollup and blockchain infrastructure
Geography
Seychelles legal entity / global Ethereum ecosystem
Stage
Private unicorn / growth-stage blockchain infrastructure network with public token ecosystem
Known aliases
Scroll Ltd, Scroll.io, Scroll Tech, Scroll Network, SCR
Report version
1.0
Timezone
UTC

Executive summary

Strengths

  • Scroll publicly operates and documents a zkEVM Layer 2 architecture for Ethereum.
  • Scroll publicly documents multiple independent audits and bug bounties up to $1M for critical vulnerabilities.
  • Scroll maintains a broad public GitHub organization with active protocol, prover, documentation and audit repositories.

Risks

  • Company financials, runway, revenue and margins are not public.
  • Rollup, bridge, prover, sequencer and upgrade architecture creates high-severity technical/security risk despite audits.
  • Token, governance, securities, sanctions/AML and cross-border regulatory posture require counsel-led diligence.

Gaps

  • Audited financial statements, revenue/ARR, gross margin, burn, cash, debt, treasury and tax positions.
  • Capitalization, preference stack, token/equity rights, token treasury and investor side-letter obligations.
  • Top customers/dApps, revenue concentration, contracts, retention, transaction quality and bot/airdrop-incentive normalization.
  • Complete security artifacts, incident history, key-management procedures, decentralization milestones and upgrade-emergency controls.
  • Legal opinions on token status, money-transmission/sanctions exposure, privacy/compliance, IP ownership and employment matters.

Recommended next steps

  • Do not underwrite valuation from public token/network metrics; first reconcile company economics to protocol usage.
  • Run finance, legal/regulatory and security/architecture diligence in parallel before any investment decision.
  • Request top-account/partner revenue and independent ecosystem/customer calls to separate durable demand from incentive-driven activity.
  • Benchmark Scroll against zkSync, Starknet, Polygon zkEVM, Linea, Arbitrum and Optimism using live cost, reliability, developer adoption and security metrics.

Risk register

high high likelihood

R-001: Company financials and runway are opaque

No public audited financial statements, revenue, ARR/fee income, cash, debt, burn, gross margin or runway were available.

Diligence request: Require full finance data room, audited statements, KPI pack, revenue bridge, cash/debt and budget-to-actuals.

high high likelihood

R-003: Protocol usage may not translate into durable company revenue

Homepage and L2BEAT metrics are network/protocol signals and may include incentive-driven or low-value activity unrelated to company economics.

Diligence request: Reconcile transaction/usage cohorts to fee revenue, paid customers, retention and incentive-adjusted demand.

high high likelihood

R-006: Token, regulatory and cross-border compliance risk

SCR/token distribution snippets, global network use, bridge functionality and crypto-market exposure require securities, sanctions/AML, consumer, tax and privacy analysis.

Diligence request: Obtain legal memoranda, compliance policies, geo/sanctions controls, regulatory correspondence and token-governance documentation.

high medium likelihood

R-002: Funding, cap table and token/equity economics are not reconciled

Public sources differ on total funding and do not disclose preferences, token rights, treasury, investor rights or dilution.

Diligence request: Request financing documents, cap table, token treasury/vesting, side letters, debt and valuation support.

high medium likelihood

R-004: Rollup, prover, sequencer and bridge complexity creates high-impact technical risk

Scroll depends on complex smart contracts, execution nodes, prover systems, cross-domain messaging and upgrades; a defect could impair funds or network trust.

Diligence request: Commission independent architecture/security review, audit-remediation review, incident analysis and key-management assessment.

high medium likelihood

R-005: Centralization and upgrade-control trust assumptions

Docs and L2BEAT show timelocks, multisigs, security council and upgradable core contracts, creating governance/centralization risk until decentralization is validated.

Diligence request: Validate current on-chain permissions, signer controls, emergency powers, user disclosures and decentralization roadmap.

medium high likelihood

R-007: Customer concentration and usage quality are unknown

Scroll publishes ecosystem metrics and integrations but not top customers, revenue concentration, retention, bot filtering or partner economics.

Diligence request: Request top customer/dApp schedule, partner contracts, cohorts, NRR/churn and incentive-adjusted usage analysis.

medium high likelihood

R-008: Crowded Ethereum L2 competition

Scroll competes with zk-rollups and adjacent L2s for developers, liquidity, integrations, incentives and mindshare.

Diligence request: Benchmark fees, uptime, finality, TVL, developer adoption, grants, win/loss and ecosystem quality versus major competitors.

Chapter 01

01Financial Information

Public funding and valuation references exist, but Scroll does not publicly disclose company financial statements, revenue, margin, cash, burn, debt, cap table, token treasury or tax positions.

I.A Annual and quarterly financial information for the past three years

not publicly verifiable confidence: low

No audited financial statements, management accounts, AR aging, backlog or gross-profit breakdown were found in public sources; L2BEAT and homepage metrics are protocol/network signals rather than company financials.

Evidence gaps

  • Audited income statements, balance sheets, cash flows, footnotes, AR aging and product/channel/geography gross profit.

Hidden risks

  • R-001 remains material until private diligence closes the gap.
  • R-003 remains material until private diligence closes the gap.

Follow-up questions

  • Provide the complete financial data room, including monthly management accounts and revenue-recognition policy.
Financial statement and KPI diligence matrix
topicpublic signalstatusrequired artifact
Revenue / ARR / fee incomeProtocol usage and fee mechanics are public; company revenue is not.not_publicly_verifiableAudited revenue, ARR/fee bridge and revenue-recognition memo.
Gross margin / proof costsScroll docs say proof generation is currently subsidized and future decentralized prover incentives are needed.partially_verifiedProof/sequencer cost model, cloud/hardware costs and gross margin bridge.
Cash, burn and runwayNo public cash/debt/burn schedule.not_publicly_verifiableCash, debt, treasury, burn, runway and budget-to-actuals.
Tax and accountingNo public tax positions or accounting policy details beyond fee mechanics.not_publicly_verifiableTax returns, NOLs, transfer pricing and accounting policies.

I.B Financial Projections

partially verified confidence: medium

Public growth drivers include lower fees, EVM compatibility, ecosystem usage and developer adoption; forecast quality, pricing, proof-cost subsidy, capex/working capital and external financing assumptions are private.

Evidence gaps

  • Three-year model, scenario cases for gas/token/usage volatility, prover cost roadmap and external financing assumptions.

Hidden risks

  • R-001 remains material until private diligence closes the gap.
  • R-003 remains material until private diligence closes the gap.

Follow-up questions

  • Provide projections by revenue stream, proof/sequencer cost model, assumptions, budget-to-actuals and sensitivity cases.
Public funding bars and valuation annotation Bar chart of public funding round amounts with valuation annotation.

I.C Capital Structure

partially verified confidence: medium

The Block and Tracxn provide public financing anchors, but current shares, investor holdings, preferences, token rights, debt and off-balance-sheet liabilities are not public.

Evidence gaps

  • Current cap table, SAFEs/notes, options/warrants, preferences, investor rights, token allocations and debt/off-balance-sheet liabilities.

Hidden risks

  • R-002 remains material until private diligence closes the gap.

Follow-up questions

  • Provide pro forma fully diluted cap table, financing documents, debt schedule, token treasury and side letters.
Public financing and valuation history
dateeventamount or valuationsourcediligence readout
2022-04-21Series A per Tracxn$30MTracxnPublic database signal; verify primary documents.
2023-03-06New funding round / Series B$50MThe Block and TracxnInvestor roster is public; structure and rights are private.
2023-03-06Headline valuation reference$1.8BThe Block source; Tracxn databasePartially verified; The Block says Scroll declined valuation/round-structure comment.
currentCurrent cap table, token/equity rights and treasurynot_publicly_verifiableCompany data-room requestCannot underwrite without primary records.

Public total funding differs by source: $80M in Tracxn vs $83M in The Block/Cryptopolitan-style coverage.

I.D Other financial information

partially verified confidence: medium

Public sources support financing-history screening but not tax positions, accounting policies or the current valuation basis.

Evidence gaps

  • Tax positions, accounting policies, revenue recognition, financing-history reconciliations and valuation support.

Hidden risks

  • R-001 remains material until private diligence closes the gap.
  • R-002 remains material until private diligence closes the gap.

Follow-up questions

  • Reconcile the $80M vs $83M public funding discrepancy and provide board-approved valuation materials.
Chapter 02

02Products

Scroll offers an Ethereum-aligned zkEVM Layer 2, bridge, developer ecosystem and protocol infrastructure; product quality appears technically credible but needs independent operating, reliability and monetization validation.

II.A Description of each product

partially verified confidence: medium

Scroll publicly describes a Layer 2 network built on Ethereum, bridge/cross-domain messaging, EVM-compatible developer experience, rollup/proving system, fee model and ecosystem integrations.

Evidence gaps

  • Product-level uptime, latency, finality, compatibility, bridge volume, monetization and profitability by product are not publicly disclosed.

Hidden risks

  • R-003 remains material until private diligence closes the gap.
  • R-004 remains material until private diligence closes the gap.

Follow-up questions

  • Provide product KPI pack, incident/SLO report, bridge volume, revenue by product and roadmap dependency map.
Product and infrastructure surface
componentpublic descriptionevidencediligence focus
zkEVM Layer 2 networkNative zkEVM Layer 2 for Ethereum with EVM compatibility.Homepage and docsPerformance, compatibility, uptime and monetization.
Settlement / rollup contractsEthereum settlement layer verifies validity proofs and supports bridge/rollup contracts.Architecture docsContract security, upgrade controls and legal exposure.
Bridge / cross-domain messagingArbitrary message passing and token transfers between L1 and L2.Bridge docsBridge volume, incident history, emergency controls and withdrawal UX.
Prover / zkVM pipelinePublic prover repositories and zkVM migration evidence.GitHub READMEsProof cost, decentralization, audits and circuit/prover regressions.
Product claim validation matrix
claimsupporting public evidenceverification statusnext validation
100% EVM-compatibleHomepage and developer docs.partially_verifiedRun compatibility/regression test suite and review incidents.
<$0.005 gas feesHomepage and L2BEAT cost metrics.partially_verifiedBenchmark live fees by transaction class and volatility.
Security-first / audited protocolAudit and bug bounty docs.verified for public artifactsReview full audit findings, remediation and incident history.
Fast block feedbackBuilding-on-Scroll docs state Scroll blocks are minted every 3 seconds.partially_verifiedValidate block time, reorg/finality and downtime metrics.
Scroll technical architecture Architecture diagram of the three-layer Scroll protocol described in docs.
Chapter 03

03Customer Information

Public evidence shows developer/dApp ecosystem signals, but customer economics, concentration, retention and contracts are private.

III.A Top customers by application

partially verified confidence: medium

Scroll publishes ecosystem logos and metrics but not top 15 customers/dApps by revenue, transaction volume, take rate or contract status.

Evidence gaps

  • Top dApps/customers by product/application, wallet cohorts, paid usage and contract status.

Hidden risks

  • R-007 remains material until private diligence closes the gap.

Follow-up questions

  • Provide top 15 dApps/customers by revenue, volume, wallet activity, contract owner and renewal status.
Public customer and ecosystem signals
signalvalue or examplesourcelimitation
DApps built100+Scroll homepageCompany-published; no revenue/retention detail.
Total transactions110M+Scroll homepageMay include low-value/incentivized activity; no cohort quality.
Active builders700+Scroll homepageDefinition not disclosed.
Ecosystem integrationsDEXs, bridges, lending, staking protocolsDeveloper ecosystem docsContracts/economics not disclosed.
Network activity snapshot16.73K past-day ops and 0.19 UOPSL2BEATOne external snapshot; not revenue.
Customer diligence request matrix
topicmissing informationwhy it mattersrequest
Top dApps/customersTop 15 by revenue/usage and product/application.Determines concentration and strategic dependency.Top-customer schedule and contract metadata.
Usage qualityUnique active wallets, bot/incentive filters and retention cohorts.Separates durable demand from campaigns/airdrops.Cohort dashboards and data definitions.
Strategic relationshipsGrant, co-marketing and revenue-share economics.Identifies contingent liabilities and CAC.Partner/grant contract schedule.
SuppliersCloud/RPC/prover/infra/auditor spend and SLAs.Assesses operational and margin risk.Top supplier schedule and SLAs.
Company-published ecosystem metrics Bar chart of homepage ecosystem metrics.

Mixed-unit chart is for scale context, not direct metric comparison.

III.B Strategic relationships

partially verified confidence: medium

Public docs list ecosystem integrations with DEXs, bridges, lending and liquid staking protocols, but contribution economics and marketing agreements are not public.

Evidence gaps

  • Partner contracts, grant terms, incentive commitments, co-marketing agreements and revenue-share terms.

Hidden risks

  • R-007 remains material until private diligence closes the gap.

Follow-up questions

  • Provide strategic partnership schedule with economics, obligations, termination rights and usage/revenue contribution.

III.C Revenue by customer

not publicly verifiable confidence: low

No public revenue by customer or concentration disclosure was located.

Evidence gaps

  • Revenue by customer, concentration over 5%, churn/NRR and bad debt.

Hidden risks

  • R-001 remains material until private diligence closes the gap.
  • R-007 remains material until private diligence closes the gap.

Follow-up questions

  • Provide revenue waterfall by customer, product, geography and channel for the last two fiscal years and YTD.

III.D Significant relationships severed within the last two years

not publicly verifiable confidence: low

No public severed customer, partner or supplier relationship schedule was found.

Evidence gaps

  • Lost/deprecated integrations, major dApps that migrated away, terminated grants or supplier disputes.

Hidden risks

  • R-007 remains material until private diligence closes the gap.

Follow-up questions

  • Provide lost-account/partner log, root-cause analysis and any settlement/termination documents.

III.E Top suppliers

partially verified confidence: low

Scroll likely depends on Ethereum L1, RPC/infrastructure providers, cloud/hosting, security auditors and exchange/ecosystem partners, but supplier spend and agreements are private.

Evidence gaps

  • Cloud, RPC, prover hardware, security auditor, exchange/listing and infrastructure supplier contracts/spend.

Hidden risks

  • R-004 remains material until private diligence closes the gap.

Follow-up questions

  • Provide top suppliers for the last two fiscal years and YTD with spend, SLAs, termination rights and concentration risk.
Chapter 04

04Competition

Scroll competes in a crowded Ethereum scaling market against other zk-rollups and adjacent optimistic rollups; defensibility depends on developer adoption, security, costs, decentralization and ecosystem liquidity.

IV.A Competitive landscape by market segment

partially verified confidence: medium

Public sources identify Scroll among Ethereum scaling networks using zk-rollups, competing with Polygon, StarkWare/Starknet, Matter Labs/zkSync and adjacent L2s such as Arbitrum, Optimism and Linea.

Evidence gaps

  • Independent win/loss, developer survey data, dApp migration reasons, cost/reliability benchmarking and ecosystem incentive comparison.

Hidden risks

  • R-008 remains material until private diligence closes the gap.

Follow-up questions

  • Provide competitive win/loss, share of relevant transaction categories, developer acquisition costs and benchmarked uptime/fees/finality.
Competitive landscape by segment
company or networksegmentbasis of competitiondiligence question
ScrollzkEVM / Ethereum L2EVM compatibility, security, cost, ecosystem.Can Scroll convert developer adoption into sustainable economics?
Matter Labs / zkSynczk-rollup / zkEVM adjacencyZK scaling, developer ecosystem and liquidity.How does Scroll win dApps/users versus zkSync?
StarkWare / StarknetZK rollupZK performance, ecosystem and language/tooling tradeoffs.Does Scroll EVM compatibility offset Starknet ecosystem depth?
Polygon zkEVM / Polygon CDKZK / appchain toolingDistribution, developer tooling and ecosystem partnerships.Can Scroll defend against larger ecosystem distribution?
Arbitrum / Optimism / LineaAdjacent Ethereum L2sLiquidity, developer adoption, reliability and incentives.How much demand is technology-specific versus liquidity/incentive driven?

Competitor economics, market share and win/loss require independent benchmarking.

Competitive strengths and vulnerabilities
dimensionpublic strengthvulnerabilityevidence
Developer experienceEVM bytecode/tooling compatibility.Compatibility must be proven across edge cases and upgrades.Homepage/docs/zkEVM repos.
SecurityMultiple audit firms and bug bounties.Audits do not guarantee absence of vulnerabilities.Security docs.
Cost/performance<$0.005 gas claim and L2BEAT cost visibility.L1 data/proof cost volatility and subsidy risk.Homepage, L2BEAT, fee docs.
DistributionCommunity, docs, integrations and token distribution snippets.Incentive-driven usage may fade; sales productivity is unknown.Docs/homepage/token snippets.
Ethereum L2 competitive positioning map Market map of Scroll and competitive L2 segments.

Qualitative map based on public positioning, not measured market share.

Chapter 05

05Marketing, Sales, and Distribution

Scroll uses developer-led distribution, open-source/docs/community, ecosystem integrations and token/exchange distribution signals; formal sales productivity, pipeline and budget capacity are private.

V.A Strategy and implementation

partially verified confidence: medium

Scroll positions as secure, performant, Ethereum-compatible infrastructure for the open economy, with distribution through docs, Discord, GitHub, ecosystem integrations and token-related public materials.

Evidence gaps

  • Marketing spend, campaign ROI, grant/incentive economics, paid acquisition and regional distribution strategy.

Hidden risks

  • R-003 remains material until private diligence closes the gap.
  • R-008 remains material until private diligence closes the gap.

Follow-up questions

  • Provide marketing plan, budget, grant/incentive ROI, channel attribution and regional compliance review.
GTM and distribution channels
channelpublic evidencelikely roleopen question
Developer docs / GitHubDocs invite builders; GitHub org has 152 repos.Developer acquisition and trust.Conversion to active/paid usage.
Community / DiscordDocs cite Discord community over 500,000 members.Community support and awareness.Engagement quality and CAC.
Ecosystem integrationsDEX/bridge/lending integrations and Dune dashboards.Liquidity and use-case expansion.Partner economics and retention.
Token/exchange distributionSearch snippets reference SCR tokenomics and Binance allocation.Global distribution and governance narrative.Regulatory, treasury and incentive quality.
Sales and marketing productivity diligence matrix
areapublic signalgaprequest
PipelineEcosystem/community signals.No CRM/pipeline data.CRM export and funnel conversion.
Sales productivityNo public sales model.No quota/CAC/payback.Sales comp, quota attainment, CAC and payback.
Grants/incentivesEcosystem and token distribution signals.No grant ROI or liability schedule.Grant, incentive and token-distribution schedule.
Budget capacityFunding history but no cash/burn.Runway unknown.Marketing budget, burn and runway.
Developer-led GTM funnel Funnel-like view of Scroll developer/community distribution signals.

Counts are from different definitions and should not be interpreted as conversion rates.

V.B Major Customers

partially verified confidence: low

Major-customer status, pipeline and future growth with key accounts are not publicly verifiable; public logos/integrations require validation.

Evidence gaps

  • Major customer relationship health, pipeline, renewal forecast, churn risk and concentration.

Hidden risks

  • R-007 remains material until private diligence closes the gap.

Follow-up questions

  • Provide account plans, CRM pipeline, top-customer NRR/churn and partner expansion forecasts.

V.C Principal avenues for generating new business

partially verified confidence: medium

New business appears developer/ecosystem-led rather than conventional enterprise sales; public evidence includes docs, GitHub, Discord, Dune dashboards and ecosystem integrations.

Evidence gaps

  • Conversion from developer awareness to sustained protocol/company economics.

Hidden risks

  • R-003 remains material until private diligence closes the gap.
  • R-008 remains material until private diligence closes the gap.

Follow-up questions

  • Provide funnel metrics from community/developer acquisition to active dApps, fee volume and revenue.

V.D Sales force productivity model

not publicly verifiable confidence: low

No public sales compensation, quota, sales-cycle or hiring plan was found.

Evidence gaps

  • Sales org plan, quota model, pipeline, CAC, payback and productivity by channel.

Hidden risks

  • R-001 remains material until private diligence closes the gap.

Follow-up questions

  • Provide CRM export, sales comp plans, quota attainment, CAC/payback and hiring plan.

V.E Ability to implement marketing plan with current and projected budgets

not publicly verifiable confidence: low

Budget capacity cannot be assessed without cash, burn, token treasury and forecast data.

Evidence gaps

  • Budget, cash runway, token treasury, grant commitments and compliance constraints.

Hidden risks

  • R-001 remains material until private diligence closes the gap.
  • R-002 remains material until private diligence closes the gap.

Follow-up questions

  • Provide marketing budget, runway analysis, grant liabilities, token treasury controls and compliance review.
Chapter 06

06Research and Development

Scroll has strong public R&D evidence across protocol code, prover infrastructure, zkEVM circuits, docs, audits and upgrade history; technical debt, cost of development and roadmap execution need private validation.

VI.A Description of R&D organization

verified confidence: high

GitHub and docs show protocol, prover, zkEVM, contracts, execution-node and documentation workstreams, but reporting lines, budget, hiring and retention are private.

Evidence gaps

  • R&D budget, headcount by function, key-person dependencies, roadmap commitments and code ownership.

Hidden risks

  • R-004 remains material until private diligence closes the gap.
  • R-009 remains material until private diligence closes the gap.

Follow-up questions

  • Provide R&D org chart, roadmap, security-critical owners, budget and retention/key-person plan.
R&D repository and codebase map
repositorypublic metricrolediligence focus
scroll-tech/scroll741 stars / 631 forks; updated 2026-05-19Core monorepo including contracts, node and prover components.Release process, audit coverage, maintainability.
scroll-tech/scroll-prover683 stars / 371 forks; archived; updated 2026-05-20Legacy/mainnet prover client/coordinator; migrated to zkVM.Migration risk and residual dependencies.
scroll-tech/zkevm-circuits935 stars / 387 forks; archived; updated 2026-04-01zkEVM circuits used in mainnet before zkVM migration.Compatibility and audit/remediation history.
scroll-tech/scroll-documentation671 stars / 193 forks; updated 2026-05-18Developer and protocol documentation.Documentation accuracy and release synchronization.

GitHub stars/forks are public signals, not measures of code quality.

Technical roadmap and risk matrix
itempublic evidenceriskrequest
zkVM migrationscroll-prover and zkevm-circuits note Apr 2025 migration.Migration regressions, proof cost and archived dependency risk.Migration plan, test/audit evidence and performance benchmarks.
Prover decentralization economicsFee docs say proof generation currently subsidized and future incentives needed.Unit economics may worsen if proof costs are passed to users.Prover incentive and cost model.
Enforced transactionsBridge docs say not yet enabled and expected in future upgrades.Censorship-resistance/user-exit capabilities incomplete.Roadmap, audit and activation criteria.
Upgradeable protocol governanceDocs and L2BEAT describe timelocks/security council/upgradability.Centralized emergency powers and governance trust assumptions.Governance charter, key-management and emergency playbooks.
Top public Scroll GitHub repositories by stars Bar chart of selected top repositories by stars from GitHub API.

Stars are popularity signals, not engineering quality metrics.

VI.B New Product Pipeline

partially verified confidence: medium

Public roadmap/pipeline signals include zkVM migration, future decentralized prover incentives, enforced transactions not yet enabled and continuing protocol upgrades; implementation cost and risk remain high.

Evidence gaps

  • Delivery schedule, cost of development, hardware/prover economics, compatibility regressions and formal verification status.

Hidden risks

  • R-004 remains material until private diligence closes the gap.
  • R-005 remains material until private diligence closes the gap.
  • R-009 remains material until private diligence closes the gap.

Follow-up questions

  • Provide pipeline roadmap, test coverage, audit remediation, prover cost model, release gates and rollback plans.
L2BEAT operating metrics snapshot Selected L2BEAT network/cost metrics for Scroll.

Mixed metrics are shown for diligence context only.

Chapter 07

07Management and Personnel

Public founder/team signals exist, including founders named by public profiles and The Block coverage of planned team growth, but formal org chart, headcount, compensation and turnover are private.

VII.A Organization Chart

partially verified confidence: low

No formal organization chart was found publicly; public governance materials show protocol control roles such as multisigs, timelocks and security council, but not company reporting lines.

Evidence gaps

  • Company org chart, reporting lines, board/observer roles and governance-authority mapping.

Hidden risks

  • R-005 remains material until private diligence closes the gap.
  • R-010 remains material until private diligence closes the gap.

Follow-up questions

  • Provide current org chart and matrix linking corporate roles to protocol/governance permissions.
Management public-signal matrix
topicpublic signalstatusfollow up
FoundersPublic snippets identify Sandy Peng, Ye Zhang and Haichen Shen.partially_verifiedConfirm bios, roles, equity and references.
Team sizeThe Block reported around 60 team members with planned growth to nearly 100 in 2023.partially_verifiedCurrent HRIS by function/location.
Governance operatorsL2BEAT identifies security council/multisig/timelock roles.partially_verifiedMap legal/company roles to protocol permissions.
Board/advisorsNot publicly verified in this run.not_publicly_verifiableBoard minutes, observers and advisory agreements.
Personnel diligence matrix
areapublic statusriskrequest
Org chartNot public.Accountability/key-person gaps.Current and projected org chart.
Compensation/benefitsNot public.Retention, dilution and compliance risk.Compensation bands, benefits and employment agreements.
Equity/token incentivesToken snippets public; employee grants not public.Misaligned incentives and unmodeled dilution.Equity/token incentive plans and vesting.
Turnover/employee relationsNot public.Execution disruption and undisclosed claims.Two-year attrition and HR/legal claims schedule.
Public management and governance role map Role map combining publicly identified founders and protocol governance bodies.

This is a public-role map, not a verified reporting org chart.

VII.B Historical and projected headcount by function and location

partially verified confidence: medium

The Block reported around 60 employees in March 2023 with plans to grow toward nearly 100; current headcount by function/location is not public.

Evidence gaps

  • Current and historical headcount by function/location, contractor count and hiring plan.

Hidden risks

  • R-010 remains material until private diligence closes the gap.

Follow-up questions

  • Provide HRIS export, contractor roster and hiring plan reconciled to budget.

VII.C Senior management biographies

partially verified confidence: medium

Public snippets identify founders Sandy Peng, Ye Zhang and Haichen Shen; full biographies, tenure, equity incentives and succession plans require company materials.

Evidence gaps

  • Complete management bios, references, background checks, board composition and succession plan.

Hidden risks

  • R-010 remains material until private diligence closes the gap.

Follow-up questions

  • Provide executive bios, employment agreements, equity grants, board minutes and reference contacts.

VII.D Compensation arrangements

not publicly verifiable confidence: low

Compensation, employment agreements and benefit plans are not public.

Evidence gaps

  • Executive employment agreements, compensation bands, benefits and contractor arrangements.

Hidden risks

  • R-010 remains material until private diligence closes the gap.

Follow-up questions

  • Provide compensation schedule, benefit plans and key employment agreements.

VII.E Incentive stock plans

not publicly verifiable confidence: low

Equity/token incentive plans are not public.

Evidence gaps

  • Option pool, token incentives, vesting, lockups, grants and dilution impact.

Hidden risks

  • R-002 remains material until private diligence closes the gap.
  • R-010 remains material until private diligence closes the gap.

Follow-up questions

  • Provide equity/token incentive plans, grant ledger, vesting terms and tax/accounting treatment.

VII.F Significant employee relations problems, past or present

not publicly verifiable confidence: low

No public employee-relations issue schedule was found.

Evidence gaps

  • HR claims, disputes, settlements, investigations and workplace policies.

Hidden risks

  • R-010 remains material until private diligence closes the gap.

Follow-up questions

  • Provide HR/legal schedule for employee disputes, investigations and settlements.

VII.G Personnel Turnover

not publicly verifiable confidence: low

Turnover and retention data are not public.

Evidence gaps

  • Two-year attrition by function/location, regretted attrition, offer acceptance and retention plan.

Hidden risks

  • R-010 remains material until private diligence closes the gap.

Follow-up questions

  • Provide turnover data, retention analysis and key-person dependency mitigation.
Chapter 08

08Legal and Related Matters

Scroll has visible public legal/security artifacts, open-source licenses, terms/privacy links, audits, bug bounties and governance/upgradability documentation; counsel-led legal, IP, regulatory and insurance diligence remains critical.

VIII.A Pending lawsuits against the Company

not publicly verifiable confidence: low

Pending lawsuits against Scroll were not verified through docket artifacts in this public-source run.

Evidence gaps

  • Litigation docket search, demand letters, arbitration, threatened claims and counsel assessment.

Hidden risks

  • R-006 remains material until private diligence closes the gap.

Follow-up questions

  • Counsel should provide litigation schedule and run docket searches across relevant jurisdictions.
Legal and regulatory diligence matrix
legal areapublic signalriskcounsel request
LitigationNo docket artifact reviewed.Unknown claims or threatened disputes.Docket search and litigation schedule.
Token/securitiesPublic SCR/token snippets and governance materials.Securities, commodities, consumer and tax classification.Token legal memoranda and regulatory correspondence.
Sanctions/AML/money transmissionGlobal permissionless network and bridge/cross-domain messaging.Jurisdictional compliance exposure.Compliance program, geo-blocking and AML/sanctions controls.
InsuranceNo policies reviewed.Uninsured cyber, smart-contract, D&O or E&O losses.Policy schedule and claims history.
Material contractsFunding, ecosystem and supplier signals but no contracts.Undisclosed exclusivity, indemnity, token/grant liabilities.Material contract schedule.
Top diligence risk heatmap Severity/likelihood map of major Scroll diligence risks.

VIII.B Pending lawsuits initiated by Company

not publicly verifiable confidence: low

Pending lawsuits initiated by Scroll were not verified through docket artifacts in this run.

Evidence gaps

  • Company-initiated lawsuits, enforcement actions, IP claims and settlement history.

Hidden risks

  • R-006 remains material until private diligence closes the gap.

Follow-up questions

  • Provide litigation schedule for affirmative claims and IP enforcement.

VIII.C Environmental and employee safety issues and liabilities

partially verified confidence: low

Environmental/safety exposure appears lower than asset-heavy industries, but workplace, cybersecurity, privacy, token and crypto compliance exposure needs counsel review.

Evidence gaps

  • Workplace safety policies, remote-work compliance, cybersecurity/privacy obligations and crypto regulatory controls.

Hidden risks

  • R-006 remains material until private diligence closes the gap.

Follow-up questions

  • Provide compliance policies, privacy/security assessments, regulatory memos and employment-law review.

VIII.D Material patents, copyrights, licenses, and trademarks

partially verified confidence: medium

Public repositories disclose open-source code and licenses such as MIT and dual MIT/Apache in key repositories, but IP assignments and full dependency/license compliance are private.

Evidence gaps

  • Patent/trademark schedule, IP assignments, contributor license agreements, dependency SBOM and license compliance.

Hidden risks

  • R-009 remains material until private diligence closes the gap.

Follow-up questions

  • Provide IP schedule, invention assignments, contributor agreements, SBOM, OSS policy and license-scan results.
Legal, IP and security artifact inventory
artifactpublic evidencediligence statusnext step
AuditsTrail of Bits, OpenZeppelin, Zellic, KALOS audit references.public artifact existsReview full reports and remediation.
Bug bountyImmunefi and Remedy programs with critical rewards up to $1M.public artifact existsReview submissions, payouts and SLA.
Open-source licensesscroll-prover dual MIT/Apache; core repos public.partially verifiedRun full license/SBOM scan and IP assignment review.
Governance/upgradesTwo-week timelock and L1/L2 multisig/timelock addresses in docs; L2BEAT describes upgradability.partially verifiedReview key management, emergency powers and user disclosures.
Security and legal control timeline Timeline of visible security/audit/control artifacts.

Security controls reduce but do not eliminate protocol risk.

VIII.E Insurance coverage and material exposures

not publicly verifiable confidence: low

Insurance coverage and exclusions are not public.

Evidence gaps

  • Cyber/D&O/E&O/crime insurance policies, exclusions, deductibles and claims history.

Hidden risks

  • R-006 remains material until private diligence closes the gap.
  • R-009 remains material until private diligence closes the gap.

Follow-up questions

  • Provide insurance policies, claims history and broker risk assessment.

VIII.F Material contracts

not publicly verifiable confidence: low

Material customer, supplier, investor, exchange, cloud, auditor, grant and partner contracts are not public.

Evidence gaps

  • Material contracts, grants, token listing/distribution terms, cloud/prover supplier contracts and security/audit agreements.

Hidden risks

  • R-002 remains material until private diligence closes the gap.
  • R-006 remains material until private diligence closes the gap.

Follow-up questions

  • Provide material contract schedule with revenue/cost, exclusivity, indemnity, termination and compliance terms.

VIII.G Regulatory agency problems

partially verified confidence: low

No regulatory agency problem schedule was available. Token/network operations, global users, potential exchange distribution and crypto compliance require specialist legal review.

Evidence gaps

  • Legal memos on token status, regulatory registrations/exemptions, sanctions/AML controls, geo-blocking, consumer disclosures and agency correspondence.

Hidden risks

  • R-005 remains material until private diligence closes the gap.
  • R-006 remains material until private diligence closes the gap.

Follow-up questions

  • Have counsel provide regulatory memoranda, compliance policy, agency correspondence and token/governance risk analysis.

Evidence

Evidence claims
IDClaimStatusSources
EC-001 Scroll publicly positions itself as a native zkEVM Layer 2 for Ethereum and publishes claims including 100% EVM compatibility, <$0.005 gas fees, 100+ dApps, 110M+ transactions and 700+ active builders. partially verified medium SRC-001
EC-002 Scroll documentation describes a three-layer protocol architecture: Ethereum settlement, sequencing and proving. verified high SRC-002
EC-003 The scroll-tech/scroll README describes Scroll as a zkRollup-based Layer 2 with bytecode-equivalent zkEVM and a monorepo spanning contracts, rollup node and prover components. verified high SRC-003
EC-004 The Block reported Scroll raised $50M on March 6, 2023; named investors; cited a $1.8B valuation source; and stated prior rounds brought total funding to $83M, while Scroll declined valuation/round-structure comment. partially verified medium SRC-004
EC-005 Tracxn lists Scroll funding rounds including $30M Series A on Apr 21, 2022 and $50M Series B on Mar 6, 2023, total funding of $80M and a $1.8B valuation as of Mar 6, 2023. partially verified medium SRC-005
EC-006 L2BEAT reports active Scroll protocol metrics including 0.19 past-day UOPS, 16.73K past-day ops, max UOPS 20.75 on 2024-10-22, $57.16K total L2 Ethereum cost over 2025-05-19 to 2026-05-19, $156.17 average cost/day and 19.27 GiB data posted. verified high SRC-006
EC-007 Scroll documents multiple independent audits and public bug bounties, including critical vulnerability rewards up to $1,000,000. verified high SRC-007
EC-008 Scroll fees combine L2 execution fees and L1 data fees; all transaction fees flow to L2ScrollFeeVault; proof generation and L1 proof verification are currently subsidized and future prover incentives need protocol incorporation. verified high SRC-008
EC-009 Scroll developer docs state code, dependencies and tooling work out of the box due to EVM bytecode compatibility; blocks are minted every 3 seconds; mainnet is live; and Discord community exceeds 500,000 members. partially verified medium SRC-009
EC-010 Scroll developer ecosystem docs identify DEX, bridge, lending and staking integrations and link to Dune/DeFiLlama data sources. partially verified medium SRC-010
EC-011 The scroll-tech GitHub organization had 152 public repositories in this run; top repositories included contribute-to-scroll, zkevm-circuits, scroll, scroll-prover and scroll-documentation by stars. verified high SRC-011
EC-012 scroll-prover README states mainnet used v0.10.3 before migration to a zkVM solution in April 2025, and the repository is dual MIT/Apache licensed. verified high SRC-012
EC-013 zkevm-circuits README states it was used in Scroll Mainnet, had over 99.5% EVM test compatibility and was migrated to zkVM in April 2025. verified high SRC-013
EC-014 Scroll upgrade docs identify L1/L2 Scroll multisig and timelock contracts and state upgrades execute after a two-week timelock period. verified high SRC-014
EC-015 L2BEAT describes Scroll core contracts as upgradable by ProxyAdmin controlled through ScrollOwner/security council/timelocks, and identifies governance actors and permissions. verified high SRC-006
EC-016 Scroll bridge docs state arbitrary message passing enables token transfers and dApp communication between L1 and L2; enforced transactions are not yet enabled and are expected in future upgrades. verified high SRC-015
EC-017 Public profile/search snippets identify Scroll founders as Sandy Peng, Ye Zhang and Haichen Shen. partially verified medium SRC-016SRC-004
EC-018 Public search snippets and token pages reference SCR tokenomics, including 1B total supply, airdrop allocations and Binance Launchpool/pre-market distribution snippets, but source quality is mixed. partially verified low SRC-017
EC-019 Core private diligence materials were not available publicly, including financials, cap table, customer revenue, contracts, legal schedule, insurance, HR and full security/incident artifacts. not publicly verifiable high SRC-019
EC-020 The Block places Scroll in a competitive field of Ethereum scaling networks using zk-rollups, including Polygon, StarkWare and Matter Labs. verified medium SRC-004
Sources
IDPublisherTitleAccessed
SRC-001 Scroll Ltd Scroll homepage 2026-05-20
SRC-002 Scroll Scroll Architecture documentation 2026-05-20
SRC-003 GitHub / scroll-tech scroll-tech/scroll README 2026-05-20
SRC-004 The Block Ethereum L2 Scroll reaches $1.8 billion valuation in new funding round: Source 2026-05-20
SRC-005 Tracxn Scroll funding and investors 2026-05-20
SRC-006 L2BEAT Scroll - L2BEAT project page 2026-05-20
SRC-007 Scroll Audits & Bug Bounty Program 2026-05-20
SRC-008 Scroll Transaction Fees on Scroll 2026-05-20
SRC-009 Scroll Building on Scroll 2026-05-20
SRC-010 Scroll Developer Ecosystem 2026-05-20
SRC-011 GitHub scroll-tech public repositories GitHub API listing 2026-05-20
SRC-012 GitHub / scroll-tech scroll-tech/scroll-prover README 2026-05-20
SRC-013 GitHub / scroll-tech scroll-tech/zkevm-circuits README 2026-05-20
SRC-014 Scroll Scroll Upgrades documentation 2026-05-20
SRC-015 Scroll Cross-domain messaging documentation 2026-05-20
SRC-016 DuckDuckGo snippets referencing Crunchbase, Blockworks, Dealroom and LinkedIn-style profiles DuckDuckGo founder profile snippets for Scroll 2026-05-20
SRC-017 DuckDuckGo snippets referencing Scroll blog, Binance, OKX and tokenomics pages DuckDuckGo SCR tokenomics snippets 2026-05-20
SRC-018 Cryptopolitan Cryptopolitan funding article mirror/secondary coverage 2026-05-20
SRC-019 GitHub Copilot diligence workflow Public-source research limitation record 2026-05-20

Disclaimer

This report is a public-evidence diligence snapshot, not investment advice. Important financial, legal, technical, and contractual facts remain non-public and should be verified directly with management and primary documents before any investment decision.