What Is Proof of Reserves? What It Proves and What It Leaves Out

On 11 November 2022, FTX filed for bankruptcy, having been until that week one of the largest crypto exchanges anywhere. Customers had spent days pulling coins out faster than the exchange could pay, and the run did what runs have always done: it opened the vault in public. Billions of dollars in customer deposits were supposed to be inside, and they were not.

Every exchange still standing spent that month fielding one blunt demand: prove you actually hold our coins. The answer the industry settled on is called proof of reserves, and most big platforms now publish one. The pages prove less than they appear to, because three gaps sit between what they show and what you need to know. Not financial advice.

An exchange balance is a promise

When you keep coins on an exchange, the coins themselves sit in wallets the exchange controls, and what you own is a row in the company's database. The number on your screen is a promise that the coins behind it exist and will be handed over when you ask for them. FTX customers watched that number every day for months, and it looked fine right up until the week it turned out to mean nothing.

Proof of reserves is the attempt to make the promise checkable: point at coins on-chain, show they cover what customers are owed, and give every customer the means to check the sums.

What the Merkle tree actually checks

The mechanics come in two halves, and the platform first shows assets: wallet addresses it controls, or an accountant's attestation that it controlled a given pile of coins on a given day. Then it handles the customer side with a Merkle tree. Every account balance is hashed into a short digital fingerprint, the fingerprints are paired and combined, layer upon layer, and a million accounts condense into one root fingerprint the platform publishes. Your account gets a record ID, and following it you can confirm your balance fed into that root, and so into the total, without seeing anyone else's data.

The design descends from the proof-of-solvency schemes engineers sketched after Mt. Gox collapsed in 2014, and it does a real job: a platform cannot quietly leave your account out of the numbers it shows the accountant. What it proves is still narrow. These coins existed, and this list of balances summed to that total, on that date. The trouble sits in everything it does not say.

Half a balance sheet, photographed once

A reserves page shows you what a platform holds, and it usually keeps quiet about what the platform owes. Suppose the page shows $100m of bitcoin in named wallets, and suppose customers are owed $150m. You are looking at an insolvent business that has just shown you its good side, and unless the liabilities get published you have no way of knowing.

What a platform owes is also the half you cannot check from outside. A blockchain records what an address holds, and no chain anywhere records what a company owes, so the balance list inside the Merkle tree is only complete if the platform handed over the whole list. Leave out a big creditor and nothing visible breaks. FTX customers saw normal balances on their screens while billions had been lent on to its sister trading firm, Alameda Research, and no published wallet address would have shown anyone the loans.

The second gap is time: a proof of reserves is a photograph. It captures one date, one block, and finance has an old name for tidying yourself up on the day of the photograph: window dressing. Coins can be borrowed before a snapshot and handed back after it, and the page glows either way. A reserves report dated March tells you about March.

Then the accountants walked away

The third gap sits in the signature at the bottom. Most reserve reports are attestations under agreed-upon procedures, which means the accountant ran exactly the checks the client asked for, on the stated date, and wrote down what came back. Nobody looked at internal controls and nobody went hunting for undisclosed debts. An audit weighs the whole company, so an auditor would have to care whether the firm was solvent. An accountant confirming a list of wallet balances does not, and would happily confirm them for a firm that is insolvent everywhere else.

The firms signing these reports knew the difference even when readers did not. Mazars had been producing reserve reports for several large exchanges, and in December 2022, weeks after FTX failed, it paused its crypto attestation work entirely. An accounting firm was being paid well to provide the comfort and still decided the work was not worth its name. Remember that the next time a platform's page says 'audited' above a document that is nothing of the sort.

Stablecoins publish the same thing on a calendar

Every major stablecoin does the same dance on a calendar. Circle, the company behind USDC, has Deloitte sign a reserve attestation every month, and Tether puts one out for USDT every quarter. They are answering a different question to an exchange, because what backs a token is dollars and dollar assets rather than customer coins in custody, but you read the page the same way. It is a snapshot, it covers a defined scope, and it is an attestation rather than an audit. A monthly one shrinks the window a shortfall could hide in, and that is all it does.

Whose problem is proof of reserves?

You only need proof of reserves when somebody else is holding your coins. Keep a balance on an exchange or any other custodian and the question applies to you, because your coins live in someone else's database and you are trusting whoever keeps that database honest.

And some arrangements sit outside the question altogether. An on-ramp runs a delivery model, conversion rather than storage: Banxa, which has run fiat-to-crypto rails since 2014 with 100-plus payment methods across 100-plus countries in the markets it serves, delivers an order to the wallet address the buyer names, and the job ends there. Where the coins go after delivery is up to the buyer, and a buyer who names an address of their own has settled the reserves question for good. Self-custody is the one arrangement where it answers itself, because a wallet you control shows its balance on a public chain, checkable by anyone at any hour, with no snapshot to schedule and no accountant to pay. The strongest proof of reserves in crypto is a balance at an address you control.

How to read a reserves page

The next time a platform shows you one of these pages, treat it as a claim with evidence attached, and put the evidence through four checks before it buys any comfort:

• When was the snapshot, and how many have there been since? The run that ended FTX took about a week in November 2022, and reports age faster than people expect.

• Look for what the platform owes, not just what it holds. FTX held coins too, and the page you want carries an independently checked total of the liabilities next to the assets, because coins on their own do not tell you whether customers can be paid.

• Check what the signer actually signed, because platforms put the word audited above agreed procedures all the time. The small print tells you which document you are really holding, and the difference is the whole third gap.

• Verify your own balance in the tree if the page lets you, and spend the five minutes on it. A page that offers no way to check is a poster.

A platform that publishes a self-checkable Merkle proof on a regular schedule is volunteering for more scrutiny than most of its rivals, and since November 2022 that pressure has done the sector real good. Coins you plan to hold for years do not need any of it, because they can sit at an address you control, on a public chain, where you check the balance yourself whenever you like and nobody has to prove anything to you. And if a platform publishes no reserves page at all, you now know how to read that too.