Proof of Reserves: What Crypto Exchange Audits Miss
Proof of reserves is a set of methods that aims to demonstrate that a crypto custodian controls certain digital assets, sometimes combined with evidence about customer balances. A reserve snapshot is not automatically a full financial audit or proof of solvency. A platform could demonstrate control of assets while omitting liabilities or risks not visible on a blockchain.
What a reserve attestation can show
A custodian may publish addresses and cryptographic proofs demonstrating control of assets at a specified block height or timestamp. It may ask an independent practitioner to verify a procedure or present a Merkle-tree-based commitment to customer balances. The precise scope matters: ownership, control, valuation, customer entitlements and reconciliation are separate questions.
Why assets alone are insufficient
Solvency depends on assets compared with liabilities, including customer claims, borrowing, derivatives, operational expenses and other obligations. Imagine an exchange demonstrating $1 billion of crypto assets but owing customers and lenders $1.2 billion. Asset control alone would not establish that every creditor can be paid. Conversely, the platform may hold off-chain cash or other resources that the wallet proof does not show.
Worked example: a reserve coverage ratio
Suppose a hypothetical snapshot reports $600 million of eligible custody assets and independently verified corresponding customer liabilities of $550 million. The crude coverage ratio is 600/550 ≈ 109.1%. That is not necessarily a genuine solvency ratio: the assets might be borrowed temporarily, pledged elsewhere, valued using stale prices or offset by liabilities outside the stated customer population. The methodology and assurance scope determine what the figure can support.
Merkle proofs and customer verification
A Merkle tree can commit to a set of balances so an individual customer can check whether a balance is included without receiving every other customer’s information. However, inclusion in a tree does not independently establish that all liabilities were included, that reported balances were non-negative in a meaningful economic sense or that assets were unencumbered. Cryptography can verify a statement accurately while leaving the statement’s completeness unproved.
Snapshots and window dressing
An attestation observes a particular moment. Exchange balances can change seconds later, and transfers between related entities may distort a snapshot if not identified. Published wallet balances do not reveal all off-chain contractual obligations. A credible risk assessment considers repeated observations, governance, controls, audit scope and liability verification rather than relying solely on a single colourful coverage percentage.
Why the word ‘audit’ matters
A financial statement audit conducted under recognised standards has a different scope from an agreed-upon procedures report or narrow cryptographic attestation. Some reports expressly disclaim an opinion on the company’s overall financial condition. Read who issued the report, what was tested, which dates and assets were in scope, and which assurance conclusions were actually provided.
Custody, legal rights and segregation
A customer might see a platform holding assets while lacking direct legal ownership of particular coins under its terms. Asset segregation, creditor priority, insolvency law and rehypothecation rights vary by jurisdiction and agreement. Deposit guarantees and financial-services protections should never be assumed to apply to all crypto custody accounts. Technical possession and legal entitlements need separate examination.
A due-diligence framework
Identify wallet control methodology, assets and prices, liability completeness, related-party transactions, encumbrances, independent assurance scope and custody terms. Determine whether customer balances can be verified and whether negative balances or lending are accounted for. Compare any public reserve disclosures with audited financial statements where available. Avoid interpreting proof of reserves as a promise against exchange failure.
For additional context on the underlying mechanics and risks, read crypto custody and private-key security.
Proof of reserves: the difference between assets and solvency
A published list of cryptocurrency wallet balances is not a complete financial audit. Reserve assets must be interpreted alongside total obligations, ownership, legal claims and assurance quality.
| Hypothetical exchange disclosure | Reported amount | What it supports |
|---|---|---|
| On-chain assets controlled at snapshot | $110 million | Evidence of wallet balances if addresses verified |
| Customer liabilities at snapshot | $100 million | Only meaningful if liability listing is complete |
| Simple stated coverage ratio | $110m ÷ $100m | 110% coverage at a chosen instant |
| Unrecorded borrowing or omitted liabilities | Unknown | Can materially change solvency picture |
| Next-day withdrawals, losses or encumbrances | Unknown | Snapshot does not establish future liquidity |
A Merkle proof can help a customer verify inclusion of an account balance in a committed liability list, but it does not alone prove that every liability is included or that reserves are unencumbered. Borrowed assets briefly transferred before a snapshot could give a misleading impression. Prefer comprehensive audited financial disclosures, independent assurance details and clear treatment of off-chain obligations. A ratio above 100% at one moment is not a guarantee of solvency or withdrawal access during stress.
Frequently asked questions
Does proof of reserves prove a platform cannot fail?
No. It may omit liabilities, liquidity needs and off-chain exposures.
What can a Merkle proof show?
It can allow verification that a particular committed balance appears in a dataset, not that the dataset is complete.
Is an attestation the same as a full audit?
No. Scope and assurance standards can differ materially.
Sources and further education
Explore more educational resources in the Stablecoins, Reserves and Redemption Risk.