The blockchain trilemma: chains can easily get only two of decentralisation, security and scalability. How rollups, sharding and Sui-style designs respond.

The blockchain trilemma, also called the scalability trilemma, is the idea that a blockchain can easily achieve only two of three properties at once: decentralisation, security and scalability. Raise throughput by asking nodes to do more work and fewer people can run a node; spread the load across many small chains and each one becomes easier to attack. The framing was popularised by Ethereum co-founder Vitalik Buterin, and most modern blockchain designs can be read as an attempt to escape it.
This guide explains where the trilemma comes from, what each property actually means, how rollups, sharding and parallel execution try to get all three, and why some researchers think the trilemma is more of a rule of thumb than a law.
The clearest statement comes from Buterin's April 2021 essay "Why sharding is great". He describes three properties a blockchain tries to have, and says that "simple" techniques only get you two of them:
The idea is older than that essay. Ethereum's Sharding FAQ, an early research document, already asked whether "there's some kind of scalability trilemma at play", defining decentralisation as a system where each participant only needs the resources of "a regular laptop or small VPS".
Notice what the definitions do. Scalability is measured against what one ordinary node can handle, not as a raw transactions-per-second figure. A chain that does 100,000 transactions per second but needs data-centre hardware to verify them has not solved the trilemma; it has chosen scalability over decentralisation.
Buterin's essay sorts naive designs into three groups, each of which picks two corners:
| Design | Gets | Gives up | Why |
|---|---|---|---|
| Traditional blockchains (Bitcoin, Ethereum before sharding) | Decentralisation, security | Scalability | Every participant runs a full node that verifies every transaction, so throughput is capped by an ordinary computer. |
| High-TPS chains with small validator sets | Scalability, security | Decentralisation | A small number of nodes, often 10 to 100 in Buterin's description, keep consensus among themselves on powerful hardware. |
| Multi-chain ecosystems | Scalability, decentralisation | Security | Load is spread across many independent chains, but an attacker only needs to take over one of them, which may be a tiny share of the whole. |
The underlying tension is resource cost. If every node must check everything, the slowest node you want to include sets the speed limit. If you raise that limit, you shrink the set of people who can participate. If you split work between groups, each group is smaller and cheaper to corrupt. Our proof of stake vs proof of work guide covers how the cost of attacking a chain is set in the first place.
Ethereum's main answer has been layer 2 rollups. A rollup runs transactions on a separate network, then posts the data to Ethereum along with either a validity proof (ZK rollups) or a claim that anyone can challenge with a fraud proof (optimistic rollups). The base layer stays small enough for ordinary nodes to verify, while execution happens elsewhere.
In trilemma terms, rollups try to keep Ethereum's decentralisation and security while adding scale. Buterin's December 2021 essay "Endgame" spelled out the compromise: "Block production is centralized, block validation is trustless and highly decentralized, and censorship is still prevented." A powerful operator can produce blocks, as long as anyone can cheaply check them.
The practice has lagged the theory. As of 17 October 2026, L2BEAT rated 57 of the 67 layer-2 projects it had staged at Stage 0, meaning operators could still override the rules. On 3 February 2026 Buterin wrote that "the original vision of L2s and their role in Ethereum no longer makes sense, and we need a new path", citing slow progress on decentralisation and a base layer that now scales with low fees (The Defiant). Our layer 2 guide covers rollups in detail.
Sharding attacks the trilemma head-on. Instead of every node processing every transaction, validators are split into groups (shards) that each handle part of the load, while a coordinating layer keeps the shards in agreement. To stop an attacker concentrating on one shard, validators are assigned randomly and reshuffled. Buterin's 2021 essay argues that this combination is "a technique that gets you all three": each node does a fraction of the work, no supernodes are needed, and an attacker has to beat the whole system rather than one small piece of it.
Ethereum itself moved away from sharding execution. It now shards data instead: blobs from the Dencun upgrade (13 March 2024) and PeerDAS from the Fusaka upgrade (3 December 2025) let nodes confirm that rollup data is available by sampling it rather than downloading all of it (Ethereum Foundation).
MultiversX runs execution sharding on its main chain. Its adaptive state sharding combines network, transaction and state sharding, with a metachain that decides at each epoch which nodes move between shards; selection uses randomness so it can't be predicted in advance. Under its Secure Proof of Stake consensus, each validator must stake at least 2,500 EGLD (MultiversX docs). The live network configuration on 17 October 2026 showed 3 execution shards, 400 nodes per shard and a 600 ms round (MultiversX gateway).
The cost is complexity. A transaction that touches accounts on two shards runs in two steps and is asynchronous, which makes some DeFi interactions harder to compose. Our sharding guide and the EGLD and MultiversX explainer go deeper.
A third route keeps one chain but uses every core of every validator. Sui orders transactions with Mysticeti, a consensus protocol in which validators propose blocks in parallel and blocks reference each other to form a directed acyclic graph (DAG). The Sui docs say Mysticeti commits in about 0.5 seconds on average with sustained throughput of 200,000 transactions per second in benchmarks, while warning that these are controlled-test figures, not production metrics.
Sui's data model helps too. Each transaction declares the objects it uses, and per the transaction lifecycle docs, transactions that don't conflict on inputs execute completely in parallel. Two people trading in two different pools don't wait for each other.
In trilemma terms, this pushes scalability by making each validator more efficient rather than by splitting the network. The trade-off is the hardware bar. Sui's validator guide suggests at least 24 physical cores, 128 GB of memory, 4 TB of NVMe storage and a 1 Gbps connection, which is well beyond a consumer laptop. Our guides to Sui and Mysticeti explain the design.
The trilemma is useful shorthand, but it isn't a proven theorem. Common objections:
A fair summary: there is no free lunch, but the price of each corner has fallen. Designs differ mainly in which assumptions they are willing to make.
JewelSwap is built on layer 1s that take different routes through the trilemma: liquid staking JWLEGLD on sharded MultiversX, JWLSUI on Sui, and JWLXRD on Radix. Each chain's design shapes fees, speed and what you need to trust.
It is the idea that a blockchain can easily have only two of three properties: decentralisation, security and scalability. Improving one, such as throughput, usually costs one of the others, such as the number of people who can afford to run a node.
Vitalik Buterin, co-founder of Ethereum, popularised it. It appears in Ethereum's early Sharding FAQ and in his April 2021 essay "Why sharding is great", which defines all three properties.
Yes. Both names describe the same trade-off between decentralisation, security and scalability. Buterin's own writing calls it the scalability trilemma.
No chain has proven it beyond doubt. Rollups, sharding and parallel execution each push the limits, but each relies on assumptions about operators, hardware or cross-shard complexity. Treat "trilemma solved" as a marketing claim and check the details.
Rollups move execution off the base layer so Ethereum stays easy to verify, aiming to add scale without giving up decentralisation or security. In practice, most were still rated Stage 0 on L2BEAT in October 2026, meaning operators could override the rules.
This article is educational and isn't financial advice. Figures are as of 17 October 2026 from L2BEAT, the Ethereum Foundation and the MultiversX and Sui documentation, and they change over time; sources are linked throughout.