What is proof of reserve? How crypto exchanges prove their assets

When platforms like FTX, Celsius, and Voyager collapsed, they left millions of customers without access to their funds. These failures had something in common: people trusted that their crypto was there, but it was not. Proof of reserve (PoR) emerged as a direct response to these failures, giving exchanges a way to publicly verify that customer assets are actually on hand.

This article explains what proof of reserve is, how it works, what its real limitations are, and how it differs from a full financial audit.

What is a crypto proof-of-reserve report?

A proof-of-reserve (PoR) report is a verification process designed for crypto exchanges, custodians, and decentralized finance (DeFi) platforms. Its purpose is to confirm that a platform holds enough digital assets to cover what it owes to customers.

PoR reports are typically conducted by third-party auditing firms. Using cryptographic methods, auditors verify that a platform's on-chain holdings match or exceed its customer liabilities, at a point in time.

One important clarification: a PoR report is not a full financial audit. It checks whether assets are present. It does not verify a company's debts, operational expenses, or overall financial health. More on that below.

Proof of reserve vs full audits

These two terms are sometimes used interchangeably, but they measure very different things.

A proof of reserve is a targeted asset check. It answers the question: does this platform hold the crypto it claims to hold? It focuses on one side of the balance sheet, the assets, and produces a snapshot of on-chain holdings at a specific moment.

A full financial audit is much broader. Under GAAP or IFRS standards, a full audit reviews both assets and liabilities, verifies financial statements, tests internal controls, and produces an opinion on whether the company's financials are accurate and complete. Full audits are time-intensive and require significantly more documentation.

The key distinction: a PoR tells you an exchange has the crypto. A full audit tells you whether the exchange is actually solvent, meaning its assets outweigh all of its obligations. An exchange could pass a PoR and still carry significant hidden debt.

Think of PoR as a transparency tool, not a solvency guarantee.

How does proof-of-reserve work in crypto?

Most PoR processes follow a three-step structure. The exact methodology can vary by exchange and auditor, but the underlying logic is consistent.

Step 1: Asset verification (wallet addresses)

The auditor collects the exchange's public wallet addresses and verifies that the exchange controls those wallets by checking cryptographic signatures. The balances of those wallets are then recorded at a snapshot moment using blockchain data.

Some exchanges also make their wallet addresses publicly available so anyone can independently verify balances using blockchain explorers like Etherscan or Blockchain.com.

Step 2: Liability snapshot

The auditor compiles a total of what the exchange owes to all customers. To protect individual account privacy, many PoR processes use a Merkle tree, a cryptographic data structure that allows auditors to verify the total sum of customer balances without exposing individual account details.

With a Merkle tree approach, each customer can also verify that their own balance is included in the total, without seeing any other user's data. This adds a layer of user-verifiable transparency.

Step 3: Matching reserves to liabilities

The auditor compares the verified asset total against the compiled liability snapshot. If the exchange's on-chain holdings meet or exceed customer obligations, the exchange passes the PoR check. The result is published as the PoR report.

Why are proof-of-reserve reports for exchanges important?

PoR reports matter because they give crypto users a way to independently check, at least partially, whether a platform is being honest about its holdings. Before PoR became common practice, users had little choice but to take an exchange at its word.

For users choosing where to hold crypto, a PoR report is one concrete signal that an exchange is willing to be transparent. Major exchanges that publish regular PoR reports include Binance, Kraken, and OKX, among others.

PoR also encourages a broader culture of accountability in the crypto industry. When some exchanges adopt it, others face pressure to do the same.

If you want to know how to evaluate a crypto exchange before using it, see how to choose the safest crypto exchange.

Concerns about proof-of-reserve in crypto

PoR is a step forward, but it comes with real limitations that are worth understanding before treating any PoR report as a clean bill of health.

Lack of standardization

There is no universal standard for how PoR audits should be conducted. Different exchanges use different auditors, different methodologies, and different levels of detail in their reports. This makes it hard to compare PoR results across platforms.

Third-party trust issues

Most PoR audits depend on external auditing firms. While third-party involvement adds credibility, it also introduces a trust dependency. Some auditors may lack the technical expertise to properly evaluate crypto reserves, or may face pressure from the exchange they are auditing.

Incomplete or misleading reports

A PoR report may only cover certain assets or certain wallets. If an exchange selectively discloses which holdings to include, the report could present a rosier picture than reality. Users should look for reports that clearly disclose scope and methodology.

Solvency vs. liquidity

A PoR report confirms that assets exist. It does not confirm that those assets are liquid, unencumbered, or free of obligations. An exchange could hold the right amount of crypto while also having large debts that are not captured in the PoR.

User privacy and security concerns

Publishing wallet addresses, even for verification purposes, can expose some information about exchange operations. Some critics argue that making wallet addresses fully public could create security risks, particularly if bad actors track fund movements.

Post-verification manipulation

Because PoR is a snapshot, it only reflects holdings at a single point in time. An exchange could temporarily move funds to inflate its apparent reserves before an audit, then move those funds back after. This is sometimes called a "window dressing" problem.

Where to find PoR reports

Most major exchanges that conduct PoR audits publish their reports directly on their websites, usually in a dedicated transparency or security section. You can also check the websites of auditing firms that specialize in crypto, such as Hacken.

When reviewing a PoR report, look for the date of the snapshot, the methodology used, the scope of assets covered, and whether the auditor is independent and credible.

Limitations of proof of reserve

To summarize what PoR can and cannot tell you:

• Snapshot-only view: PoR reflects holdings at one moment in time. It does not show continuous or real-time balances.
• Does not prove solvency: PoR checks assets, not liabilities. An exchange can pass a PoR check and still be insolvent if it carries significant debt.
• Can be manipulated: Exchanges have, in some cases, temporarily moved borrowed funds to inflate PoR figures before a snapshot is taken.
• Does not show full financial health: PoR gives no visibility into operating costs, loan obligations, legal liabilities, or other financial risks.

PoR is a useful transparency signal, but it should not be your only consideration when assessing an exchange's trustworthiness.

Accuracy you can trust with CoinTracker

Knowing whether an exchange holds your assets is one part of managing crypto responsibly. Knowing what you own, where it lives, and what it means for your taxes is another.

CoinTracker connects to 400+ exchanges and 30+ wallets to bring all your crypto activity into one place. You can review your transaction history, track cost basis, identify tax-loss harvesting opportunities, and prepare for tax season with accurate records across every account you hold.

Add your wallets and exchanges to CoinTracker to bring your crypto tax data into one place.

FAQs

What is proof of reserve in crypto?

Proof of reserve (PoR) is a verification process that allows crypto exchanges and custodians to demonstrate that they hold enough digital assets to cover customer deposits. It typically involves a third-party auditor confirming on-chain balances against customer liabilities at a specific point in time.

How does proof of reserve work?

A PoR audit generally follows three steps: verifying the exchange's wallet balances on-chain, compiling a snapshot of customer liabilities (often using a Merkle tree for privacy), and confirming that the verified assets meet or exceed those liabilities. The result is published as the PoR report.

Is proof of reserve reliable?

PoR is a useful transparency signal, but it has real limits. It only reflects a moment in time, covers assets rather than total financial health, and depends on the quality and independence of the auditor. A PoR report confirms that assets were present at the snapshot date, not that an exchange is fully solvent or financially sound.

What is the difference between proof of reserve and proof of liabilities?

Proof of reserve verifies that an exchange holds sufficient assets. Proof of liabilities verifies the total of what an exchange owes to customers. A complete PoR audit ideally includes both: asset verification and a liability snapshot. Some exchanges publish only asset verification, which provides less certainty about overall financial coverage.

What is a Merkle tree in proof of reserve?

A Merkle tree is a cryptographic data structure that allows auditors to verify a total sum of customer balances without exposing individual account details. Each customer can independently check that their own balance is included in the total, making the process more transparent while protecting user privacy.

Which exchanges publish proof of reserve reports?

Several major exchanges publish regular PoR reports, including Binance, Kraken, OKX, and Bybit, among others. Report formats, methodology, and frequency vary by exchange. Always review the scope and auditor information before drawing conclusions from any PoR report.

Disclaimer

This article is for informational purposes only and should not be taken as legal, tax, or financial advice. Consult a tax professional for your specific situation.