What Is Proof of Reserves? How Exchanges Prove They Hold Your Funds

Loading...

After the collapse of FTX in late 2022, the crypto industry faced a crisis of trust. Billions in customer funds vanished because the exchange used client deposits for risky bets without any proof they actually held the assets. In response, a concept called Proof of Reserves (PoR) became the industry standard for transparency.

But what exactly is proof of reserves? How do exchanges cryptographically prove they hold your Bitcoin, Ethereum, or stablecoins? And can you trust these reports? This comprehensive guide explains everything you need to know about proof of reserves in 2026, how to verify them yourself, and why they matter for the safety of your funds.

What Is Proof of Reserves?

Proof of reserves is a cryptographic or audited verification that a custodian (like a crypto exchange) holds sufficient assets to cover all customer liabilities. In simple terms, it proves that for every Bitcoin you deposited, the exchange actually has that Bitcoin (or equivalent) in its wallets—and hasn't lent it out or lost it.

🔍 Definition

Proof of Reserves (PoR): A public, verifiable report showing that an exchange's total on-chain assets meet or exceed its total customer balances. It typically includes a cryptographic technique (like Merkle trees) to let users verify their own balance is included in the total.

The concept isn't new—it has been used in traditional finance for decades. But in crypto, it became a hot topic after the FTX collapse revealed that the exchange had a massive hole in its balance sheet. Since then, major exchanges like Binance, Coinbase, Kraken, and others have published regular proof of reserves reports.

Proof of Reserves: Assets ≥ Liabilities

1,000 BTC
Customer Balances (Liabilities)
1,050 BTC
On-Chain Wallets (Assets)

Ratio: 105% → Fully reserved (excess 50 BTC)

Why Proof of Reserves Matters After FTX

The fall of FTX exposed a brutal truth: exchanges could operate with zero transparency, using customer deposits for proprietary trading, venture investments, and even personal loans to affiliated companies. When the market turned, those assets were gone.

Proof of reserves addresses this by forcing exchanges to regularly prove they have the money. However, it's not a silver bullet—it only shows a snapshot, and it doesn't prove that liabilities are correctly calculated (more on that later). Still, it's a critical first step toward restoring trust in centralized custodians.

⚠️ The FTX Lesson

FTX's balance sheet showed they held customer funds, but those funds were lent to Alameda Research and not backed by real assets. A proper proof of reserves audit would have revealed the discrepancy—but only if liabilities were also accurately reported. Learn more about crypto lending risks →

How Proof of Reserves Works: Merkle Trees & Audits

Most modern proof of reserves systems use a cryptographic data structure called a Merkle tree. Here's how it works:

  1. Snapshot of all customer balances: The exchange takes a snapshot of every user's account balance at a specific block height or time.
  2. Hashing each balance: Each user's balance is converted into a unique hash (a fixed-length string).
  3. Building the Merkle tree: These hashes are paired, hashed again, and recursively combined until a single "root hash" is produced—the Merkle root. This root represents the entire state of liabilities.
  4. Publishing the root and user paths: The exchange publishes the Merkle root and allows each user to download a "Merkle proof"—a set of hashes that lets them verify their own balance was included in the root, without revealing others' balances.
  5. On-chain asset verification: Independently, the exchange publishes the addresses holding customer funds. Auditors or users can check that the total on-chain balance meets or exceeds the total liabilities (the Merkle root sum).
1

Exchange collects balances

All user account balances are tallied at a specific time.

2

Build Merkle tree of liabilities

Each user's data is hashed, then combined pairwise until a single root hash emerges.

3

Publish Merkle root & asset addresses

The root is published; users can check their inclusion. Asset addresses are revealed for on-chain verification.

4

Users verify individually

Using a Merkle proof, users confirm their balance is part of the root.

5

Auditors verify total assets

Third-party auditors (or anyone) check that on-chain asset totals ≥ liability total.

Some exchanges go further and hire external auditing firms to validate the process and provide a professional opinion. Others, like Kraken, have been doing this for years with their "Cryptographic Proof of Reserves" page.

Key Components of a Proof of Reserves Report

A credible proof of reserves report should include:

  • Snapshot timestamp: The exact block height or date/time when liabilities and assets were measured.
  • Total liabilities: The sum of all customer balances in each currency, often derived from the Merkle root.
  • Total assets: On-chain wallet balances (and possibly off-chain, if explained).
  • Merkle root: The cryptographic hash that lets users verify inclusion.
  • User verification tool: A tool or guide so each user can confirm their own balance is included.
  • Auditor attestation: If a third-party firm audited the process, their report should be linked.

🧠 Advanced: Merkle Tree Privacy

Merkle trees allow individual verification without revealing others' balances. Each user receives only the branch needed to compute up to the root. This ensures privacy while maintaining transparency.

Exchange Examples: Binance, Coinbase, Kraken

Let's look at how major exchanges implement proof of reserves in 2026.

1

Binance

Monthly Reports

Binance publishes proof of reserves monthly, using a zk-SNARKs-enhanced Merkle tree for enhanced privacy and accuracy. They include over 30 assets and show asset/liability ratios (often above 100%). Users can verify via their dashboard.

zk-SNARKs verification
Third-party auditor: Mazars (historical)
Public wallet addresses

📊 Binance PoR Example (Feb 2026)

BTC: 112% reserved | ETH: 105% reserved | USDT: 101% reserved

Compare Binance vs Coinbase →

2

Coinbase

Quarterly Audits

Coinbase takes a traditional approach: they engage Big Four accounting firms to audit both assets and liabilities under SOC 1 Type II and SOC 2 standards. They also publish wallet addresses but rely more on audited financial statements.

Deloitte audits
Public wallet transparency
Customer funds held 1:1
3

Kraken

Pioneer (2014)

Kraken was one of the first exchanges to provide cryptographic proof of reserves. They publish a detailed page with wallet addresses and allow users to verify via a Merkle tree tool. Their reports are among the most transparent.

Real-time wallet monitoring
Independent verification tool
No debt, no fractional reserves

Exchange Proof of Reserves Comparison

Exchange Frequency Method User Verification Auditor
Binance Monthly zk-SNARKs Merkle tree Dashboard tool Third-party
Coinbase Quarterly Traditional audit No individual verification Deloitte
Kraken Real-time / On-demand Merkle tree + wallets Self-service tool None (cryptographic)
OKX Monthly Merkle tree API verification Third-party

Limitations & Criticisms of Proof of Reserves

While proof of reserves is a huge step forward, it's not perfect. Here are the main criticisms:

  • Snapshot in time: The report only reflects a single moment. An exchange could borrow funds right before the snapshot and return them after.
  • No proof of liabilities accuracy: The Merkle tree relies on the exchange's database. If the exchange underreports liabilities (e.g., omits certain accounts), the root will show a false surplus.
  • Off-chain assets: Some exchanges hold assets off-chain (e.g., in bank accounts). It's harder to cryptographically verify those.
  • No proof of solvency: Even if assets exceed liabilities, the exchange might have hidden debts or illiquid positions that could cause insolvency if called upon.
  • Lack of regulation: There's no standardized framework, so each exchange does it differently, making comparisons difficult.

⚠️ Important

Proof of reserves is not the same as a full financial audit. It doesn't verify that liabilities are complete, nor does it check for off-balance-sheet debts. Always combine PoR with other research, like regulatory status and historical track record.

How to Verify a Proof of Reserves Report Yourself

You don't have to trust the exchange—you can verify your own inclusion and check wallet balances. Here's a step-by-step for a typical Merkle-tree-based exchange (like Binance or Kraken):

  1. Log into your exchange account and navigate to the proof of reserves page. Look for "Verify Now" or "Merkle Tree Verification".
  2. Download your Merkle proof – usually a JSON file or a string of hashes.
  3. Use the exchange's verification tool – paste your proof, and it will recompute the path to the Merkle root. If the root matches the published root, your balance is included.
  4. Check the asset wallet addresses – the exchange should list public addresses for each asset. Use a blockchain explorer (e.g., Etherscan for ETH, Blockchain.com for BTC) to see the current balance. Ensure it's at least the total liabilities reported.
  5. Compare totals – the sum of on-chain balances should be ≥ total liabilities. If it's significantly less, that's a red flag.

Some exchanges also let you verify programmatically via API. For example, Kraken provides a tool that you can run locally to avoid trusting their website.

✅ Pro Tip

Take screenshots of your verification and the wallet balances. If the exchange later removes or changes the data, you have proof.

The Future of Proof of Reserves

In 2026, we're seeing trends that could make proof of reserves more robust:

  • zk-proofs and zero-knowledge technology: Binance already uses zk-SNARKs to enhance privacy while allowing sum verification. This could become standard.
  • Real-time attestation: Instead of monthly snapshots, some projects are working on continuous PoR using oracles and smart contracts.
  • Regulatory mandates: Countries like the UAE, Japan, and parts of the EU are considering mandatory proof of reserves for licensed exchanges.
  • Integration with DeFi: Decentralized exchanges (DEXs) don't hold funds, but some lending protocols now publish PoR to show they are not rehypothecating excessively.

As the industry matures, proof of reserves will likely evolve from a voluntary transparency measure to a baseline requirement for any trusted custodian.

Your Funds, Your Responsibility

Proof of reserves is a powerful tool, but it's not a guarantee. The collapse of FTX taught us that even seemingly reputable exchanges can fail. By understanding how proof of reserves works and taking a few minutes to verify your exchange's reports, you add a layer of protection to your assets.

Always diversify your holdings across multiple custodians and consider using self-custody hardware wallets for long-term storage. The crypto ecosystem is moving toward greater transparency, but individual vigilance remains essential.

Frequently Asked Questions

No. Proof of reserves is a cryptographic or third-party verification that a custodian's assets match its liabilities at a point in time. A full financial audit also examines internal controls, revenue, expenses, and off-balance-sheet items. Proof of reserves is a subset of what an audit covers.

It's difficult but not impossible. An exchange could borrow funds temporarily to inflate the snapshot, or they could exclude certain liabilities from the Merkle tree. However, if users verify their own inclusion and wallet balances are checked independently, manipulation becomes harder. Multi-party computation and zk-proofs are making it even more secure.

Coinbase publishes audited financial statements and wallet addresses but does not offer a user-verifiable Merkle tree. They rely on traditional audits (Deloitte) and regulatory compliance as a publicly traded company (NASDAQ: COIN). Some critics argue this is less transparent than cryptographic proof.

A Merkle tree is a data structure that hashes pairs of data repeatedly until a single "root hash" remains. It's used in proof of reserves because it lets users verify their own data is included without revealing everyone else's data. It's also used in Bitcoin to organize transactions in a block.

Kraken is often cited as the gold standard for transparency, with a long history and easy-to-use verification tools. Binance's zk-SNARKs approach is technologically advanced. Coinbase relies on traditional audits. For self-custody, no proof of reserves is needed because you hold the keys.

🔥 Get Exclusive Crypto Insights First

Join thousands of investors getting the latest on exchange transparency, security, and DeFi opportunities delivered weekly.