What’s proof-of-reserves?
At its core, proof-of-reserves is a public demonstration {that a} custodian holds the property it claims to carry on behalf of customers, usually utilizing cryptographic strategies and onchain transparency.
If each crypto trade can publish a proof-of-reserves (PoR) report, why can withdrawals nonetheless be delayed or halted throughout a disaster?
The reality is that proof-of-reserves is just not a belief assure. It exhibits whether or not verifiable property exist on a platform at a single time limit, but it surely doesn’t affirm that the platform is solvent, liquid or ruled by controls that stop hidden danger.
However even when executed correctly, PoR is usually a point-in-time snapshot that may miss what occurred earlier than and after the reporting second.
With no credible view of liabilities, PoR can not show solvency, which is what customers really want in periods of withdrawal stress.
Do you know? On Dec. 31, 2025, Binance’s CEO wrote that the platform’s person asset balances publicly verified via proof-of-reserves had reached $162.8 billion.
What PoR proves and the way it’s often completed
In follow, PoR includes two checks: property and, ideally, liabilities.
On the asset facet, an trade exhibits that it controls sure wallets, often by publishing addresses or signing messages.
Liabilities are trickier. Most exchanges take a snapshot of person balances and commit it to a Merkle tree, usually a Merkle-sum tree. Customers can then affirm that their stability is included utilizing an inclusion proof, with out everybody’s balances being made public.
When completed correctly, PoR exhibits whether or not onchain property cowl buyer balances at a particular second.
Do you know? Binance lets every person independently confirm their inclusion in its PoR snapshot. By its verification web page, Binance generates a cryptographic proof primarily based on a Merkle tree of person balances, permitting customers to verify that their account was counted with out revealing anybody else’s knowledge or balances.
How an trade can “go PoR” and nonetheless be dangerous
PoR can enhance transparency, but it surely shouldn’t be relied on as the only measure of an organization’s monetary well being.
In fact, a report on property with out full liabilities doesn’t exhibit solvency. Even when onchain wallets seem sturdy, liabilities may be incomplete or selectively outlined, lacking objects similar to loans, derivatives publicity, authorized claims or offchain payables. That may present funds exist with out proving the enterprise can meet all of its obligations.
Additionally, a single attestation doesn’t reveal what the stability sheet appeared like final week or what it appears to be like just like the day after the report. In principle, property may be quickly borrowed to enhance the snapshot, then moved again out afterward.
Subsequent, encumbrances usually don’t present up. PoR usually can not inform you whether or not property are pledged as collateral, lent out or in any other case tied up, which means they might not be obtainable when withdrawals spike.
Liquidity and valuation may also be deceptive. Holding property is just not the identical as having the ability to liquidate them shortly and at scale in periods of stress, particularly if reserves are concentrated in thinly traded tokens. PoR doesn’t handle this challenge; clearer danger and liquidity disclosures may.
PoR isn’t the identical as an audit
Numerous the belief drawback comes from a mismatch in expectations.
Many customers deal with PoR like a security certificates. In actuality, many PoR engagements resemble agreed-upon procedures (AUPs). In these instances, the practitioner performs particular checks and studies what was discovered with out offering an audit-style opinion on the corporate’s total well being.
Certainly, an audit or perhaps a assessment is designed to ship an assurance conclusion inside a proper framework. AUP reporting is narrower. It explains what was examined and what was noticed, then leaves interpretation to the reader. Underneath Worldwide Normal on Associated Companies (ISRS) 4400, an AUP engagement is just not an assurance engagement and doesn’t categorical an opinion.
Regulators have highlighted this hole. The Public Firm Accounting Oversight Board has warned that PoR studies are inherently restricted and shouldn’t be handled as proof that an trade has adequate property to satisfy its liabilities, particularly given the shortage of consistency in how PoR work is carried out and described.
That is additionally why PoR drew elevated scrutiny after 2022. Mazars paused work for crypto purchasers, citing issues about how PoR-style studies have been being introduced and the way the general public may interpret them.
What’s a sensible belief stack, then?
PoR could be a place to begin, however actual belief comes from pairing transparency with proof of solvency, sturdy governance and clear operational controls.
Begin with solvency. The true step up is exhibiting property versus an entire set of liabilities, making certain property are better than or equal to liabilities. Merkle-based legal responsibility proofs, together with newer zero-knowledge approaches, purpose to shut that hole with out exposing particular person balances.
Subsequent, add assurance round how the trade really operates. A snapshot doesn’t reveal whether or not the platform has disciplined controls similar to key administration, entry permissions, change administration, incident response, segregation of duties and custody workflows. This is the reason institutional due diligence usually depends on System and Group Controls (SOC)-style reporting and comparable frameworks that measure controls over time, not only a stability at a single second.
Make liquidity and encumbrance seen. Solvency on paper doesn’t assure that an trade can survive a run. Customers want readability on whether or not reserves are unencumbered and the way shortly holdings may be transformed into liquid property at scale.
Anchor it in governance and disclosure. Credible oversight depends upon clear custody frameworks, battle administration and constant disclosures, particularly for merchandise that introduce extra obligations similar to yield, margin and lending.
PoR helps, however it might’t substitute accountability
PoR is best than nothing, but it surely stays a slender, point-in-time verify (though it’s usually marketed like a security certificates).
By itself, PoR doesn’t show solvency, liquidity or management high quality. So, earlier than treating a PoR badge as “protected,” take into account the next:
-
Are liabilities included, or is it property solely? Belongings-only reporting can not exhibit solvency.
-
What’s in scope? Are margin, yield merchandise, loans or offchain obligations excluded?
-
Is it reporting a snapshot or ongoing? A single date may be dressed up. Consistency issues.
-
Are reserves unencumbered? “Held” is just not the identical as “obtainable throughout stress.”
-
What sort of engagement is it? Many PoR studies are restricted in scope and shouldn’t be learn like an audit opinion.
