Proof of reserves is an exercise in which a crypto exchange demonstrates that it controls a quantity of assets, usually by proving ownership of on-chain addresses and publishing a cryptographic structure that lets individual customers confirm their balance was counted. It shows one side of a balance sheet. It does not, on its own, show what the exchange owes — to customers, to lenders, or to anyone else — and an entity can pass a proof-of-reserves exercise while being comprehensively insolvent.
That is not an argument against it. Verifiable asset disclosure is better than the alternative, which for most of this industry's history was a marketing page. It is an argument for understanding precisely what the exercise covers, because the gap between what it demonstrates and what people believe it demonstrates is where the risk sits.
What Proof of Reserves Actually Is
A typical exercise has two halves.
The first is asset attestation: the exchange demonstrates control of specific on-chain addresses, usually by signing a message with the relevant keys or moving a nominal amount, and the balances at those addresses are publicly verifiable.
The second is customer balance inclusion: the exchange publishes a cryptographic commitment to the full set of customer balances, structured so that any individual customer can verify their own balance formed part of the total without seeing anyone else's.
How the Merkle Tree Works
The standard construction is a Merkle tree. Each customer's balance is hashed into a leaf; pairs of hashes are combined repeatedly up the tree until a single root hash remains. Publishing that root commits the exchange to a specific set of balances — changing any one of them changes the root.
A customer is then given the small set of sibling hashes needed to recompute the root from their own leaf. If it matches the published root, their balance was included in the total the exchange claims to be covering. More recent implementations use zero-knowledge proofs to make this stronger, allowing an exchange to prove properties about the balance set — including that no negative balances were inserted to reduce the apparent total — without revealing individual data.
This is genuinely good cryptography. The limitations are not in the mathematics.
The Three Gaps
Gap One: It Shows Assets, Not Liabilities
Solvency is assets minus liabilities. Proof of reserves, in its common form, evidences the first term with precision and says nothing reliable about the second.
An exchange can demonstrate that it holds a billion dollars of assets. Whether it owes one billion, two billion, or five billion is a separate question, and the customer-balance commitment only covers liabilities to customers in the snapshot. Borrowings, obligations to affiliates, off-balance-sheet commitments and liabilities to other creditors sit entirely outside it.
Where exercises include a liability commitment, the figure is the one the exchange chose to commit to. Nothing in the cryptography verifies that the committed liability set is complete.
Gap Two: It Is a Snapshot, Not a Monitor
Attestations are point-in-time. An exchange proves it held assets on a given date, and that tells you about that date.
The obvious failure mode is assets borrowed shortly before a snapshot and returned shortly after — which would satisfy the exercise while representing nothing durable. Even without anything deliberate, a quarterly attestation leaves most of the year unobserved, and the periods that matter most are precisely the volatile ones between snapshots.
Gap Three: Attestation Is Not Audit
This distinction is routinely blurred in marketing and it is the most consequential of the three.
An audit is an examination against a recognised framework, resulting in an opinion on whether financial statements fairly present the entity's position. An agreed-upon procedures engagement is a practitioner performing specified steps and reporting the findings, with no opinion — the scope is set by the client, and the practitioner expresses no view on anything outside it.
Most proof-of-reserves work is the latter. PwC has examined this directly in its analysis of whether proof of reserves provides meaningful trust and transparency, and the distinction it draws is the one to carry: a procedures report tells you that specified steps were performed, not that the entity is sound.
| What it covers | What it does not | |
|---|---|---|
| Proof of reserves | Control of on-chain assets; inclusion of customer balances in a committed set | Total liabilities, borrowings, affiliate obligations, periods between snapshots |
| Agreed-upon procedures | Specified steps performed, findings reported | Any opinion on solvency or financial position |
| Full audit | Opinion on whether statements fairly present the entity's position | Continuous monitoring; does not prevent failure between reports |
| Regulatory segregation | Legal separation of customer assets from the operator's estate | Strategy risk, market risk, or losses on the customer's own positions |
What Segregation Does That Proof of Reserves Cannot
Verification tells you what an operator holds. Segregation determines whose it is when the operator fails — and that is a legal question, settled by the regime the venue operates under, not by cryptography.
Jurisdictions differ sharply. The EU's framework requires crypto-asset service providers to safeguard client holdings and keep them separate from their own. Japan's rules, built after two earlier domestic exchange failures, require operators to manage and preserve users' assets separately from company assets, hold the large majority of crypto in cold storage, and place customer fiat with a third-party trust. Other venues — including several that carry very large shares of global perpetual volume — operate under regimes with materially lighter requirements.
The Clearest Example: Japan, 2022
When FTX collapsed, customers across most of the group's entities entered a bankruptcy process with uncertain recovery and years of delay. Customers of its Japanese subsidiary did not.
The reason was structural. Japan's Financial Services Agency confirmed at the time that under the Payment Services Act and the Financial Instruments and Exchange Act, operators must manage and preserve users' assets separately from their own — a statement made in the agency's own ministerial press conference as the collapse unfolded. Customer fiat sat in trust with a third-party institution; crypto sat in segregated cold storage. The subsidiary was subsequently able to establish that those assets were not part of its estate, and to return them.
Same parent company. Same management. Same week. Entirely different outcome for customers — decided by which jurisdiction's segregation rules applied to the entity holding their assets.
No proof-of-reserves exercise anywhere in the FTX group would have changed that. The variable that mattered was legal, not cryptographic.
"Not Your Keys, Not Your Coins" — and the Strategies That Cannot Comply
The phrase is the standard response to all of this, and as far as it goes it is correct: assets in your own custody are not exposed to an operator's solvency.
It is also incomplete, because a significant set of strategies cannot be run that way. A delta-neutral funding position requires a short perpetual futures position on a venue, and that requires collateral posted at that venue. The hedge cannot be constructed from cold storage. The same is true of any strategy that earns from derivatives markets rather than from holding an asset.
So the honest framing is not that exchange exposure can be eliminated. It is that it has to be chosen deliberately, sized, spread, and monitored — which means caring about which regime a venue sits under, what segregation applies to posted collateral, how much is exposed to any single venue at once, and how quickly it can be withdrawn. Those are the questions our delta-neutral strategy overview addresses, and the structural distinction between holding assets with an operator and holding an interest in a fund is covered in who holds your money.
Anyone claiming to run derivatives strategies with zero exchange exposure is describing something other than what they are doing.
What to Look For Instead
- Does the exercise commit to liabilities, not just assets — and is the liability set described clearly enough to know what it excludes?
- How frequent is it? Continuous or monthly disclosure is a different product from an annual snapshot.
- Audit, attestation, or agreed-upon procedures? Check which, and read the stated scope rather than the headline.
- What regime governs segregation at the venue, and does it cover derivatives collateral as well as spot balances?
- Can you verify your own inclusion, and has anyone independently checked the construction?
- What is disclosed about the gaps — borrowings, affiliate exposure, related-party transactions?
A venue that publishes a narrow exercise and describes its limits accurately is more trustworthy than one publishing a broad exercise with a confident headline.
Frequently Asked Questions
Can an exchange pass proof of reserves and still be insolvent?
Yes. Proof of reserves evidences assets held. Solvency requires assets to exceed liabilities, and liabilities outside the committed customer balance set — borrowings, affiliate obligations, other creditors — are not captured. An exchange with verified assets and larger unverified liabilities is insolvent and would still pass.
What is the difference between proof of reserves and an audit?
An audit produces an opinion on whether financial statements fairly present an entity's financial position, against a recognised framework. Most proof-of-reserves work is an agreed-upon procedures engagement, where specified steps are performed and findings reported with no opinion expressed, and the scope is set by the client.
Does proof of reserves protect me if an exchange fails?
Not by itself. Whether customer assets are separated from the operator's estate in an insolvency is determined by the legal regime the venue operates under, not by any attestation it has published.
What is a Merkle tree proof?
A cryptographic structure where customer balances are hashed and combined into a single root hash. A customer can be given a small set of accompanying hashes allowing them to recompute that root from their own balance, confirming it was included in the total without revealing other customers' data.
Is self-custody always safer?
It removes operator insolvency risk and replaces it with key management risk, which is a real and permanent exposure. It also makes certain strategies impossible, since derivatives positions require collateral posted at a venue. The right comparison is which risks you are better placed to manage, not which option is risk-free.
Verification Is a Floor, Not a Guarantee
Proof of reserves raised the floor in a market that previously had none, and exchanges that publish it are doing something more useful than those that do not. It belongs in the diligence process.
What it is not is a solvency statement, a continuous guarantee, or a substitute for knowing which jurisdiction's rules govern the assets you have posted. Those questions are answered in regulation and corporate structure, not in a hash — and they are the ones that determined who got their money back in 2022.
This article is published for informational purposes and does not constitute investment, legal or tax advice, or an offer to transact. It describes verification practices and regulatory regimes generally and does not assess any specific venue or operator. Regulatory treatment differs by jurisdiction and changes over time. Capital is at risk.
This article is for information only and is not investment advice. Past performance does not guarantee future results.
