Smart Contracts on Bitcoin — What Taproot and Tapscript Enable

Smart Contracts on Bitcoin

Let me address a misconception I hear constantly: "Bitcoin can't do smart contracts." Wrong. Bitcoin has had programmable spending conditions since day one. What it doesn't have (by design) is Turing-complete computation on-chain. And Taproot significantly expands what's possible.

Bitcoin Script — The Foundation

Bitcoin uses a stack-based scripting language called Script. Every transaction output has a locking script, and every spending input provides an unlocking script. The scripts are intentionally limited — no loops, no state — to keep validation fast and deterministic.

Common Script Patterns

• P2PKH: Pay to public key hash — the classic "send to address"
• P2SH: Pay to script hash — hash of arbitrary script conditions
• Multisig: M-of-N signatures required
• Timelocks: Can't spend until block height X or time Y
• Hashlocks: Can spend by revealing a preimage (used in Lightning HTLCs)

What Tapscript Adds

Tapscript (the script system inside Taproot) improves on legacy Script:

• Schnorr-native opcodes: OP_CHECKSIG and OP_CHECKSIGADD use Schnorr, enabling key aggregation in scripts
• Removed limits: The 10,000-byte script size limit and 201-opcode limit from legacy Script are removed in Tapscript
• OP_SUCCESS: Reserved opcodes that make future upgrades trivially easy via soft fork

Real Smart Contract Applications

Discreet Log Contracts (DLCs)

DLCs use Taproot to create contracts that settle based on oracle data — price feeds, sports results, election outcomes. The cooperative case settles as a normal Taproot spend. Only disputes reveal the contract structure.

Vaults

A vault is a time-delayed spending mechanism. You can send Bitcoin to a vault address, and withdrawals require a waiting period during which you can claw back the funds if the withdrawal was unauthorized. Taproot makes vaults more practical and private.

Point Time-Locked Contracts (PTLCs)

PTLCs are the Schnorr-based upgrade to HTLCs (used in Lightning). Instead of hash preimages, PTLCs use adaptor signatures. The benefit: each hop in a Lightning payment uses a different "lock," so nodes can't correlate payments across the route. This is a major privacy upgrade for Lightning.

Inheritance Schemes

Using Taproot's script tree, you can create inheritance contracts: normally spent with your key (key path), but after 1 year of inactivity, your family can spend with their keys (script path with timelock). This is non-custodial inheritance planning.

Bitcoin vs Ethereum Smart Contracts

Bitcoin's approach is fundamentally different from Ethereum's:

Aspect	Bitcoin	Ethereum
Computation	Verification only	General computation
State	Stateless (UTXO)	Stateful (account model)
Philosophy	Minimize on-chain logic	Maximize on-chain capability
Attack surface	Small	Large (re-entrancy, etc.)

Bitcoin smart contracts aren't worse than Ethereum's — they're different. Bitcoin optimizes for security and simplicity. The logic happens off-chain; Bitcoin just enforces the outcome.

Explore Bitcoin development resources at our learning center.