What a Crypto Exchange's Proof-of-Reserves Report Actually Proves (and Doesn't)
Proof of reserves confirms an exchange controls certain assets at a specific moment. It does not confirm solvency — here's the exact gap between the two.
Photo: Chepry 💬 (Andrzej Barabasz) 📷 🇵🇱 · CC BY-SA 4.0 · source
“Proof of reserves” sounds, by name, like it should settle the question of whether an exchange is solvent. It doesn’t — and understanding exactly what the cryptographic proof does and doesn’t cover is the difference between using it as a real signal and treating it as false reassurance.
What proof of reserves actually verifies
A proof-of-reserves report cryptographically demonstrates that an exchange controls specific wallet addresses containing assets sufficient to cover a stated set of customer balances, at one particular moment in time. This is typically done through a Merkle tree structure — a cryptographic method that lets individual customers verify their own balance is included in the total, without the exchange having to publicly disclose every individual account balance — combined with on-chain verification that the exchange genuinely controls the wallets it claims to.
That’s a real, technically meaningful check: it confirms the exchange isn’t fabricating asset holdings out of thin air, and it lets individual users cryptographically confirm their own balance was counted. It’s a materially stronger claim than an exchange simply asserting “we hold enough reserves” with no verification mechanism at all.
The gap between “proves reserves” and “proves solvency”
CryptoSlate’s analysis, published on the anniversary of the FTX collapse, lays out precisely where proof of reserves stops short of proving actual solvency:
- Liabilities aren’t covered. The report shows assets held; it doesn’t independently verify that every customer who’s owed a balance actually appears in the disclosed dataset, or reveal how much the exchange separately owes to lenders or has pledged as collateral elsewhere.
- Corporate structure can obscure ownership. A reserve report showing a large pool of global assets doesn’t necessarily clarify which specific legal entity within a company’s structure owns each wallet — while a customer’s actual claim in a dispute or bankruptcy may fall on one particular subsidiary, not the company’s assets broadly.
- It’s a snapshot, not a continuous guarantee. The verification reflects the exchange’s holdings at the moment the snapshot was taken; assets can move, be borrowed against, or be withdrawn before or after that point without it showing up in the published report.
- There’s no standardized format. Different exchanges disclose different scopes and levels of detail, which Koinly’s explainer on proof of reserves notes makes it genuinely difficult for an outside reader to compare two exchanges’ reports on equal terms, since “proof of reserves” doesn’t mean the same specific disclosure from one exchange to the next.
Why this gap matters concretely
An exchange can, in principle, publish a technically accurate proof-of-reserves report showing it holds sufficient assets to cover disclosed customer balances, while simultaneously carrying undisclosed liabilities elsewhere — loans against those same assets, obligations to institutional counterparties, or balance sheet exposure entirely outside the scope of what the report covers. The cryptographic proof would be entirely truthful and still leave the exchange functionally insolvent if those liabilities came due. This isn’t a hypothetical concern; it’s the specific structural gap that a full audited financial statement (with liabilities disclosed) closes and a proof-of-reserves report, by design, does not.
What to actually look for
- Does the exchange also publish audited financial statements, not just a proof-of-reserves report — the two are different documents that verify different things, and only the former addresses liabilities.
- How often is the report updated — a report from months ago says little about current holdings.
- Is the scope clearly defined — which legal entities and which specific customer balances are actually covered.
Proof of reserves is a real, valuable transparency mechanism, and an exchange that publishes one is doing more than an exchange that publishes nothing. It’s just not the same claim as “this exchange is solvent” — and treating it as equivalent to a full audit is exactly the gap that’s mattered in past exchange failures.
Proof-of-reserves addresses solvency, not custody risk — see self-custody vs. exchange custody, a practical risk comparison and where crypto actually gets stolen from, based on 2026 data for the risk that a reserves report doesn’t cover.