Proof of Reserves Explained

Proof of Reserves (PoR) is a method for cryptocurrency custodians and exchanges to publicly demonstrate that they hold all the customer cryptocurrency they claim to hold. It's a critical safeguard that allows customers to verify their funds haven't been misappropriated or lost. However, proof of reserves has significant limitations, and a PoR snapshot provides only a partial picture of an exchange's solvency and trustworthiness.

What Is Proof of Reserves?

Proof of Reserves is an audit-like procedure where an exchange or custodian demonstrates that they control addresses holding customer funds. The basic process involves:

Identifying all addresses: The exchange lists all wallet addresses it controls (its "reserves").

Proving control: The exchange cryptographically proves it controls these addresses. The most straightforward method is to have an independent auditor verify that the exchange can sign a message with a private key corresponding to the address (without actually exposing the private key).

Tallying balances: The auditor verifies the total balance of cryptocurrency in all identified addresses.

Publishing the results: The auditor publishes a report confirming that the exchange holds at least X amount of Bitcoin, Ethereum, or other cryptocurrencies.

This process allows a customer to see, "The exchange controls wallets holding 5 million Bitcoin," which is impressive—but it doesn't answer a more important question: "Do they owe customers 5 million Bitcoin?"

Proof of Reserves vs. Proof of Liabilities

The limitation of Proof of Reserves becomes clear when you understand the distinction between assets and liabilities:

Assets: Cryptocurrency that the exchange actually holds.

Liabilities: Cryptocurrency that the exchange owes to customers.

For a full picture of an exchange's solvency, you need both:

Proof of Reserves alone doesn't reveal whether the exchange is solvent. An exchange could hold massive amounts of cryptocurrency (provable reserves) but owe customers even more (hidden liabilities). Or an exchange could hold exactly what customers are owed (provable reserves equal to known customer balances) but actually owe more customers who are hidden or unregistered.

This is why proof of reserves is sometimes called "proof of assets" to distinguish it from a complete solvency picture.

The Proof of Liabilities Problem

Proving liabilities is technically and philosophically harder than proving reserves. To prove an exchange owes customers exactly what it claims:

You need a complete, verified list of all customer balances: This requires auditing every customer account. But publishing all customer account balances violates privacy. One solution is a "Merkle tree" proof—a cryptographic structure that allows an auditor to verify the total liabilities without revealing individual customer balances—but even this is complex and not widely implemented.

You need to prevent double-counting: A customer might claim the same cryptocurrency on multiple exchanges. Proof of liabilities would need to prevent someone from holding the same coins on Exchange A and Exchange B simultaneously.

You need verification of the customer list: Who is a "customer"? Someone with an active account? Someone who ever held funds? Customers included in bankruptcy? This creates disputes about who is owed what.

Because proving liabilities is technically difficult and privacy-sensitive, most exchanges publish only proof of reserves, not proof of liabilities. This is a significant limitation.

How Proof of Reserves Works Technically

Understanding how PoR works technically is helpful for evaluating its trustworthiness:

An auditor asks an exchange, "Prove you control the private key to this Bitcoin address." The exchange doesn't provide the private key (which would be insecure). Instead, the exchange:

1. Receives a random message from the auditor
2. Signs the message using the private key
3. Returns the signature to the auditor

The auditor can verify that only someone with the private key could have created that signature. This proves the exchange controls the address without exposing the key.

For major custodians, this process might be repeated for hundreds or thousands of addresses. The auditor adds up the balances in all verified addresses and publishes the total.

However, this process doesn't prove:

• The exchange can access the keys (the keys might be corrupted or lost)
• The exchange uses the same addresses for customers (private keys might be held by founders who won't actually return them)
• The exchange hasn't loaned out or commingled customer funds with its own
• The exchange hasn't committed fraud by using the same addresses for multiple purposes

Limitations of Proof of Reserves

Proof of Reserves provides value, but it has significant limitations:

Point-in-time snapshot: A PoR audit captures the state of reserves at one moment in time. An exchange could lose or steal funds the day after a PoR audit and not be detected until the next audit. Some exchanges have only conducted PoR audits once or twice ever.

No proof of liabilities: As discussed, PoR doesn't prove the exchange owes customers what it claims. Without proof of liabilities, you can't be sure the exchange is solvent overall.

Doesn't prevent rehypothecation: Proof of reserves doesn't prevent an exchange from loaning out customer funds to third parties while still holding reserves. An exchange could prove it holds 1 million Bitcoin while loaning 500,000 of those Bitcoin to a trading firm. If the trading firm loses money, the exchange becomes insolvent.

Depends on auditor integrity: Proof of reserves is only as trustworthy as the auditor. If an auditor is corrupt or incompetent, the PoR report is worthless. Some auditors are reputable firms (like major accounting firms), while others are less well-known.

Doesn't reveal business model: Proof of reserves doesn't reveal how the exchange makes money. Is it through trading fees, or is it secretly loaning customer funds to affiliated companies? Proof of reserves can't detect hidden business practices.

Doesn't guarantee accessibility: An exchange could hold the reserves but have lost access to the private keys, made the keys irretrievable through poor backup practices, or intentionally restricted access. Proof of reserves only shows the balances exist; it doesn't prove they're accessible.

Doesn't cover all assets: If an exchange holds multiple cryptocurrencies, it must prove reserves for each one. Audits might check Bitcoin and Ethereum but miss other cryptocurrencies, meaning you can't be sure about the complete picture.

Historical Examples of Proof of Reserves Failures

Several major cryptocurrency platform failures occurred despite claims about reserves:

QuadrigaCX: The Canadian exchange provided PoR-like claims about its Bitcoin and cryptocurrency holdings. However, after the founder died, investigators discovered the funds weren't where the exchange claimed they were. The exchange's PoR claims were either fraudulent or the keys were inaccessible.

FTX: FTX had never published a formal proof of reserves. When the exchange collapsed, customers discovered that instead of holding customer deposits safely, FTX had secretly loaned billions of dollars to Alameda Research, an affiliated trading firm. If FTX had published a proof of reserves, it might have shown balances, but it wouldn't have revealed the hidden lending and fraud.

Celsius: The lending platform collapsed after loaning customer deposits to Three Arrows Capital, a hedge fund. Celsius hadn't published proof of reserves showing individual customer liabilities and matching those to assets.

These examples illustrate that proof of reserves, while valuable, is not a complete safeguard.

What Makes a Trustworthy Proof of Reserves?

If an exchange publishes proof of reserves, several factors improve its credibility:

Regular audits: The exchange conducts PoR audits frequently (quarterly or more often), not just once. Frequent audits are harder to fake and catch problems sooner.

Independent auditor: A well-known, reputable auditing firm conducts the audit, not an auditor hired specifically to produce favorable results.

Detailed methodology: The audit report explains the methodology, which addresses allow addresses and how they were verified.

Proof of liabilities: Even better, the exchange combines proof of reserves with proof of liabilities (or at least proof of known customer balances) to demonstrate solvency.

Public addresses: The exchange lists the specific blockchain addresses that hold reserves, allowing anyone to independently verify the balances on the blockchain. (This was historically uncommon but is increasingly standard.)

Signed reports: The audit report is cryptographically signed by the auditor, making it impossible to forge after publication.

Regulatory oversight: The exchange operates under regulatory oversight that includes reserve requirements and auditing mandates.

Proof of Reserves and Regulatory Frameworks

As cryptocurrency regulation develops, proof of reserves is being incorporated into regulatory requirements. Some jurisdictions now require custodians and exchanges to maintain proof of reserves as a condition of operating.

The New York Department of Financial Services (NYDFS), which issues BitLicenses to cryptocurrency companies, requires license holders to maintain certain reserve ratios. The Financial Action Task Force (FATF), an international money laundering watchdog, has recommended that countries require cryptocurrency custodians to maintain adequate reserves.

This regulatory direction suggests proof of reserves will become more standardized and rigorous. However, regulation doesn't eliminate the fundamental limitation: proof of reserves is not proof of solvency.

Proof of Reserves as One Factor Among Many

Customers evaluating an exchange's trustworthiness should consider proof of reserves as one factor, not the deciding factor:

Does the exchange publish regular PoR audits? If yes, this is better than nothing. If no, this is a red flag.

Who is the auditor? A major accounting firm or well-known security firm is more trustworthy than an unknown auditor or an auditor hired specifically by the exchange.

What is the exchange's regulatory status? Is it licensed? Does it operate under regulatory oversight?

Does the exchange publish proof of liabilities? This is even more important than PoR.

What is the exchange's business model? Does it clearly earn money through transparent fees, or does something seem opaque?

Has the exchange experienced security breaches? A history of breaches, even if resolved, suggests weaker operational security.

What does the broader industry think? Do other exchanges, custodians, and industry participants trust this exchange?

Can you diversify? If you're using the exchange, diversify your holdings across multiple exchanges rather than putting all cryptocurrency in one place.

The Future of Proof of Reserves

The cryptocurrency industry is working on more sophisticated proofs of solvency. Some proposals include:

Zero-knowledge proofs: Cryptographic proofs that allow an exchange to demonstrate it holds reserves and owes customers matching liabilities without revealing specific customer account details.

On-chain reputation systems: Blockchain-based systems where exchanges publicly declare their reserves and liabilities, with penalties for misrepresentation.

Real-time transparency: Instead of periodic audits, continuous on-chain transparency where customer balances and exchange reserves are publicly visible.

Multi-signature reserves: Exchanges holding reserves in multi-signature wallets where multiple parties (exchange, regulators, independent monitors) control access, making it harder for any single party to steal funds.

These innovations may eventually eliminate the need to trust exchanges about their reserves. However, they're not yet mainstream, and most exchanges still rely on periodic proof-of-reserves audits.

Key Takeaways

• Proof of Reserves demonstrates that an exchange controls cryptocurrency it claims to hold
• PoR is a point-in-time audit and doesn't prove long-term solvency
• PoR alone doesn't prove the exchange owes customers matching cryptocurrency (proof of liabilities)
• PoR doesn't prevent an exchange from loaning out customer funds or committing fraud
• The credibility of PoR depends on auditor integrity, frequency of audits, and methodology
• Proof of reserves is one factor to consider, not the only factor in evaluating exchange trustworthiness
• Regulatory frameworks are increasingly requiring custodians to maintain proof of reserves
• Long-term holdings should use self-custody rather than relying on exchange PoR

Further Reading

To understand the broader context of exchange risks, see Exchange Custody Risks. To learn how to protect yourself through self-custody, see Self-Custody in Crypto Explained. For specific exchange failures and what went wrong, see Mt. Gox Lesson and FTX Bankruptcy.