Proof of Reserves Explained: How to Verify Exchange Safety

Proof of Reserves (PoR) became a core transparency standard after the 2022 FTX collapse highlighted how little visibility users had into exchange liabilities. PoR is not a magic safety badge, but it is a critical signal that an exchange can cryptographically prove it holds customer assets. This guide explains how PoR works, which exchanges in our dataset publish it, and how to verify a report yourself.

What Is Proof of Reserves?

Proof of Reserves is a cryptographic method that lets an exchange prove it holds enough assets to cover user balances. In a typical PoR system, user balances are anonymized and included in a Merkle tree. The exchange then publishes a cryptographic root hash and its on-chain reserves so anyone can verify that (1) their balance is included in the tree and (2) the exchange’s on-chain wallets hold enough assets to cover liabilities.

A strong PoR program includes both assets and liabilities, is updated regularly, and is verified by independent auditors. A weak PoR might only show wallet balances without liabilities, or publish a snapshot without a verifiable Merkle tree.

How PoR Works (In Plain English)

1) Liability snapshot

The exchange takes a snapshot of user balances and creates a Merkle tree where each leaf is a hashed account balance. This creates a tamper-evident record of liabilities without revealing personal data.

2) Asset disclosure

The exchange publishes on-chain wallet addresses so anyone can verify reserves on the blockchain. Strong PoR reports cover multiple assets (BTC, ETH, USDT, USDC, and native tokens) rather than only one or two.

3) Verification and attestation

Independent auditors or third-party accounting firms validate that the liabilities were calculated correctly and that reserves exceed liabilities. Some exchanges publish self-reported attestations instead; these are better than nothing but less robust than independent audits.

Which Exchanges Publish Proof of Reserves?

In our dataset, the following exchanges publish PoR with varying frequency and audit quality. The table below summarizes their current reporting style.

Red Flags to Watch For

• No liabilities: A report that only lists assets without liabilities doesn’t prove the exchange can cover user deposits.
• Self-attestation only: Self-published snapshots are better than no data, but they are not a substitute for independent verification.
• Outdated reports: PoR should be updated regularly. Long gaps between updates reduce the value of the report.
• Partial asset coverage: If an exchange only reports a subset of assets, users holding other tokens have no clarity on coverage.

How to Verify PoR Yourself

Step 1: Locate the exchange’s PoR page

Most exchanges publish a dedicated PoR page with a list of covered assets and a Merkle tree or hash file. You can find direct links on each exchange’s page within /exchanges.

Step 2: Check that your balance is included

If the exchange provides a Merkle proof tool, enter your hashed user ID to confirm your balance is in the liability set. If there is no user verification tool, the PoR is significantly weaker.

Step 3: Verify on-chain reserves

Cross-check the published wallet addresses and confirm that the on-chain balances match or exceed liabilities for the same assets. Good reports show a coverage ratio at or above 1.0 for each asset.

Step 4: Look for independent audits

The strongest PoR reports include third-party verification. Kraken, for example, uses an independent accounting firm, while several other exchanges currently rely on self-reported attestations.

PoR vs Traditional Audits

PoR is not the same as a full financial audit. Public companies like Coinbase and regulated trust companies like Gemini or Bitstamp may rely on traditional audits or regulatory reporting rather than PoR. Both approaches can be valuable, but PoR offers real-time transparency that traditional audits do not.

Bottom Line

Proof of Reserves is a major step toward transparency, but it should be one part of a broader evaluation. Use PoR alongside other signals like security history, regulatory status, liquidity depth, and fee structure. CryptoScorer combines these factors into a single CryptoScore to help you compare platforms objectively. For the complete exchange ranking, visit /exchanges.