Taproot Explained — Bitcoin's Biggest Upgrade Since SegWit

Taproot Explained

Taproot (activated at block 709,632 in November 2021) is the most significant Bitcoin upgrade since SegWit. It bundles three BIPs — BIP 340 (Schnorr signatures), BIP 341 (Taproot), and BIP 342 (Tapscript) — into a single soft fork that improves privacy, efficiency, and smart contract capability.

Schnorr Signatures (BIP 340)

Bitcoin originally used ECDSA signatures. Schnorr signatures are mathematically simpler and enable a critical property: linearity. You can add Schnorr signatures together, and the result is a valid signature for the sum of the public keys.

Why Linearity Matters

• Key aggregation: A 3-of-5 multisig can produce a single signature that looks identical to a regular single-sig transaction on-chain. Nobody can tell it was multisig
• Smaller transactions: One aggregated signature instead of multiple ECDSA signatures saves block space
• Better privacy: Complex spending conditions look the same as simple payments

Taproot (BIP 341) — The MAST Trick

Taproot combines Schnorr with MAST (Merklized Abstract Syntax Trees). Here's the concept: every Taproot output has two spending paths:

1. Key path: All parties agree and sign cooperatively. Looks like a normal single-sig spend
2. Script path: If cooperation fails, reveal a specific script from a Merkle tree of possible spending conditions

The key insight: in the cooperative case (which is the common case), the complex script logic is never revealed. On-chain, it looks like any other transaction. Only when there's a dispute does the script path get used, and even then, only the specific branch being executed is revealed — not the full set of conditions.

Tapscript (BIP 342)

Tapscript updates Bitcoin's scripting language for use within Taproot. Key changes:

• Signature opcodes: Updated to use Schnorr instead of ECDSA
• OP_SUCCESS opcodes: Reserved opcodes that make future soft-fork upgrades easier
• Removed limits: Script size and opcode count limits are relaxed in Tapscript

Real-World Impact

Taproot enables:

• Lightning channel opens that are indistinguishable from regular payments
• DLCs (Discreet Log Contracts) — oracle-based contracts that settle cooperatively as a normal transaction
• More efficient multisig — MuSig2 protocol for interactive key aggregation
• Complex contracts like vaults, time-locked inheritance, and conditional payments

Adoption Status

Taproot adoption has been slower than many hoped. By early 2025, roughly 35-40% of transactions use Taproot outputs. Major wallets have added support, and Lightning implementations are transitioning to Taproot channels.

Taproot didn't change what Bitcoin can do overnight. It laid the foundation for a decade of innovation. The best Taproot applications haven't been invented yet.

Learn more about Bitcoin's technical evolution at our learning center.