Proof of reserves: what it shows and what it leaves out
After several exchange failures, proof of reserves became the industry's answer to 'are the coins there?'. It is a genuine improvement on nothing, and a long way from an audit.
Reviewed by Kayla Peterson, DeFi Research Analyst · Last reviewed September 14, 2026
On this page
Proof of reserves is a cryptographic exercise in which an exchange demonstrates that it holds assets matching customer balances at a point in time. Done properly it lets an individual customer verify that their own balance was included in the total. What it does not do is prove the platform is solvent, because solvency depends on liabilities — and liabilities are far harder to prove than coins in a wallet.
How does the Merkle-tree method work?
The exchange builds a tree in which every customer's balance is a leaf, hashed together in pairs upwards until a single root hash represents all of them. It publishes the root and gives each customer the small set of hashes needed to prove their own leaf belongs to that tree. You can check your balance was included; you cannot see anyone else's.
Separately, the exchange proves control of on-chain wallets holding at least the total in the tree, usually by signing messages from those addresses. Put together, the claim is: these coins exist, we control them, and they cover the balances we have committed to.
What can still go wrong?
- Borrowed assets. Coins can be brought in for the snapshot and returned afterwards, which is why timing and frequency matter.
- Hidden liabilities. Loans, obligations to affiliates or off-ledger debts do not appear in a customer-balance tree.
- Omitted accounts. If a liability is left out of the tree, the total it must cover is understated.
- Negative balances. Some schemes can be gamed by including negative entries unless the construction explicitly prevents it.
- Shared wallets. Signing from an address proves control at that moment, not exclusive ownership.
How is this different from an audit?
A financial audit is an opinion on a full set of financial statements, produced under professional standards, covering assets, liabilities, controls and going-concern risk. An attestation is a much narrower engagement: an accountant confirms that a specific procedure was performed and produced a stated result, on a date, using data the company supplied.
Both have value. Only one of them is designed to answer whether a business can meet its obligations. When a platform advertises proof of reserves, the useful question is what exactly was attested, by whom, how often, and whether liabilities were in scope.
How should you read one?
| Question | Weak answer | Stronger answer |
|---|---|---|
| How often? | One-off, months ago | Regular and recent, on a published schedule |
| Can I verify my balance? | Only a total is published | Per-customer Merkle proof available in the account |
| Are liabilities covered? | Silent | Explicitly in scope, with the methodology published |
| Who checked it? | Self-published only | Independent firm, engagement scope disclosed |
| Which assets? | A selected few | All customer assets, including fiat balances |
What does this mean in practice?
Treat proof of reserves as one input among several when judging a custodian, alongside regulatory status, jurisdiction, insurance arrangements, and how the business makes money. A platform that publishes regularly and lets you verify your own leaf is behaving better than one that publishes nothing — that is a real signal, just not a guarantee.
And the structural answer remains what it was: an exchange balance is a claim on a company, while a self-custodied coin is not. Our self-custody explainer covers the trade-off, and our best crypto exchanges ranking scores platforms on transparency among other criteria.
What else should a custodian disclose?
Reserves are one line in a much longer answer to the question of whether a platform is safe to leave money with. The disclosures that tend to correlate with sound operations are unglamorous and easy to check.
- Which legal entity holds your assets, in which jurisdiction, under which licence.
- Whether customer fiat sits in segregated accounts at named banks.
- Whether customer crypto is rehypothecated — lent out or used as collateral — and under what terms.
- Who the qualified custodian is, if the platform does not self-custody.
- How the business makes money, since a venue with no visible revenue model is taking risk somewhere.
A platform that answers those questions plainly is telling you something more useful than a single snapshot of wallet balances. One that answers none of them is telling you something too.
One further habit is worth adopting as a reader: check whether the latest disclosure is actually the latest. Platforms have quietly stopped publishing after an initial burst of transparency, leaving a page that looks current until you read the date on it. A stale proof is closer to no proof than to a recent one, because the whole exercise is a snapshot whose value decays from the moment it is taken.
- 1. Merkle trees — technical overview — ethereum.org
- 2. Attestation vs audit engagements — AICPA
Frequently asked
Does proof of reserves mean an exchange is solvent?
No. It shows assets at a point in time. Solvency requires knowing all liabilities as well, and most reserve proofs do not verify the liability side independently.
How do I verify my own balance is included?
Exchanges offering Merkle-tree proofs provide a record ID and the sibling hashes needed to recompute the published root. Following that procedure proves your balance was counted in the total.
Is proof of reserves the same as an audit?
No. An audit is a formal opinion on complete financial statements. Most reserve exercises are narrower attestations of a specific procedure on a specific date.
Can an exchange fake proof of reserves?
A poorly constructed scheme can be gamed — by borrowing assets for the snapshot, omitting liabilities or excluding accounts. Frequency, independence and scope are what make it harder.
Does this replace self-custody?
No. It reduces opacity at a custodian. Holding your own keys removes the counterparty question altogether rather than making it easier to assess.
Lauren Bennett is a Senior Bitcoin Analyst at Crypto Almanac Daily, specializing in Bitcoin market structure, on-chain analytics, mining economics, institutional adoption, spot ETF developments, and macroeconomic trends shaping digital assets. Her reporting focuses on translating complex blockchain data into clear, data-driven insights for investors, industry professionals, and readers following the evolution of the Bitcoin ecosystem. Lauren regularly analyzes network activity, miner behavior, liquidity trends, exchange flows, and the impact of monetary policy on digital asset markets. Before joining Crypto Almanac Daily, she covered financial markets and emerging technologies, developing expertise in blockchain infrastructure and digital asset research. Her work emphasizes factual reporting, transparent analysis, and long-term market fundamentals rather than short-term speculation. At Crypto Almanac Daily, Lauren contributes daily news coverage, in-depth market analysis, educational explainers, and feature articles that help readers better understand Bitcoin's role in the global financial system and the rapidly evolving digital asset economy.
This guide is educational and general in nature. It is not financial, investment, legal or tax advice, and it does not account for your circumstances. Crypto assets are volatile and you can lose the money you put in. See our editorial policy and methodology.
