What a Proof of Reserves actually measures
The broader question extends beyond crypto custody: does the exchange hold the assets it shows to customers? A meaningful proof brings together two sets of information: controlled on-chain reserves and liabilities corresponding to user balances.
Reserves are often verified through address signatures or by observing published wallets. Liabilities are aggregated in a Merkle tree. Each customer receives data that allows them to verify that their balance was included without publicly revealing the balances of other users.
The result applies to a specific date and scope. A proof covering Bitcoin, Ether and USDT says nothing about other tokens. A monthly attestation does not necessarily describe the situation between two reporting dates.
Verifying whether your account is included
The platform must provide an account identifier or hash, the balance included in the calculation and the information needed to verify it in the Merkle tree. The tool recalculates the hashes up to the published root.
If the resulting root matches, the balance was included in the aggregate. This still does not show that total liabilities are complete: accounts could have been omitted earlier in the process. One of the auditor’s or attestor’s roles is to assess the extraction method and the related controls.
Customers should check the date, the assets covered, how negative balances are treated and the exact definition of liabilities. Loans, margin positions and yield products can make aggregation more complex than simply adding up deposits.
Checking reserve addresses
Addresses must be observable on a block explorer. A cryptographic signature shows that the exchange controls an address without moving the funds. Simply publishing a well-funded address is not enough if no link to control has been established.
Double counting must also be avoided. An asset held with a third-party custodian should not be presented simultaneously as the proprietary reserve of several entities. Tokens borrowed shortly before the measurement date could temporarily inflate the total if the methodology does not examine transactions or obligations.
Address transparency enables ongoing monitoring, but exchanges regularly move funds for operational reasons. A decline in a known address does not automatically indicate a shortfall if the assets have been transferred to another controlled address.
Why liabilities are essential
A platform may hold one billion dollars in assets while owing two billion. Publishing wallets alone therefore answers the question of asset ownership, not whether those assets provide sufficient coverage.
The reserve ratio compares eligible assets with customer liabilities. It is important to know whether values are calculated asset by asset or in dollars. Overall coverage can conceal a Bitcoin shortfall offset by a surplus in a more volatile token.
Debts owed to banks, lenders, suppliers or related companies sometimes remain outside a Proof of Reserves. Solvency requires a broader balance sheet, information about creditors, asset quality and the liquidity available if customers make simultaneous withdrawals.
Attestation, audit and cryptographic proof
These terms are not interchangeable. A cryptographic proof verifies a mathematical relationship, such as the inclusion of a balance. An attestation covers defined information and procedures. A financial audit examines statements, controls and an accounting framework over a given period or as of a specific date.
A reserve attestation can be useful without constituting a full audit. The report should be read closely to identify the legal entity, the firm, the date, the limitations and the exclusions. An “audited” badge on a marketing page does not provide those details.
Kraken’s Proof of Reserves page shows how a platform presents individual verification and the assets covered. This example helps illustrate the method, without implying that every platform using the same term offers the same level of assurance.
Signs of an insufficient proof
A screenshot, a table without addresses, a list of unsigned wallets or a total that excludes liabilities does not constitute a complete proof. The absence of a date, scope and methodology also makes comparisons impossible.
Be cautious of an exceptionally high ratio achieved with a token issued by the platform itself. Its liquidity may disappear when customers try to withdraw their funds. Reserves should be assessed based on their quality and availability, not only their theoretical value.
A sound Proof of Reserves does not replace the precautions detailed in our guide to securing cryptocurrencies. For funds intended for long-term custody, withdrawing them to a wallet under your control reduces exposure to the exchange, provided you know how to back up the keys.
Key takeaways
- Check both on-chain reserves and whether customer liabilities are included.
- Read the report’s date, scope, methodology and limitations.
- Do not confuse Proof of Reserves with a financial audit or a guarantee of solvency.
A useful Proof of Reserves answers verifiable questions and allows customers to check whether their balance was included. It is one indicator among others: governance, licenses, security, asset quality and withdrawal capacity remain essential.
The verification should be repeated with every new publication, because an old proof does not necessarily describe the current financial situation.
