Proof of Reserves Explained: Does PoR Really Mean an Exchange Is Fully Backed?

Summary

Proof of Reserves (PoR) is a transparency method used by crypto exchanges and custodians to provide evidence that they control assets backing customer balances.

A stronger PoR process can combine proof of on-chain assets with customer-liability data, Merkle-tree verification, user-level balance checks and independent third-party review.

But Proof of Reserves has important limits.

A PoR report does not automatically prove that an exchange has no other liabilities, that reserve assets are unencumbered, that customer assets are legally segregated, or that the exchange is solvent.

So the right question is not simply:

"Does this exchange have Proof of Reserves?"

It is:

"What exactly does its Proof of Reserves prove, how much of the exchange does it cover, and what important risks remain outside the proof?"

Key Facts

What Is Proof of Reserves?

Proof of Reserves, usually shortened to PoR, is a method used by centralized crypto platforms to provide evidence about assets held to back customer balances.

The basic question is simple.

Suppose users collectively have:

10,000 BTC

displayed in their exchange accounts.

Users want evidence that the exchange actually controls enough BTC to support those balances.

Conceptually:

Customer Balances
↓
How much does the exchange owe users?

Exchange Reserves
↓
How much does the exchange control?

Compare
↓
Are covered balances adequately backed?

That is the core idea behind Proof of Reserves.

Why Do Crypto Exchanges Need Proof of Reserves?

When users keep crypto in a self-custody wallet, they can independently verify their assets on-chain and control their own private keys.

A centralized exchange works differently.

After depositing:

1 BTC

a user may see:

BTC Balance
1.00000000

inside their exchange account.

But that number is an internal account record.

It does not, by itself, prove that the exchange still controls 1 BTC corresponding to that balance.

The user is relying on the exchange's internal accounting.

That creates a transparency problem:

Exchange says:
"You have 1 BTC"

User asks:
"Do you actually hold it?"

Proof of Reserves attempts to provide evidence for that second question.

What Are Crypto Exchange Reserves?

Reserves are assets that an exchange or custodian controls and represents as backing customer balances or other covered obligations.

For example, an exchange may report:

BTC Reserves
105,000 BTC

ETH Reserves
1,500,000 ETH

USDT Reserves
$4.2 billion

But asset totals alone are not enough.

You also need to know:

How much does the exchange owe customers?

Why Proof of Assets Alone Is Not Enough

Imagine an exchange publishes wallet addresses showing:

Assets:
$5 billion

That sounds impressive.

But suppose customer balances total:

Customer Liabilities:
$8 billion

Then:

Assets
<
Customer Liabilities

So knowing only how much an exchange holds does not tell you whether those assets adequately cover customer balances.

A meaningful reserve assessment therefore needs both sides:

Assets
+
Liabilities

What Are Customer Liabilities?

In an exchange context, customer liabilities generally refer to amounts the exchange owes customers.

If users have:

Customer A
1 BTC

Customer B
2 BTC

Customer C
7 BTC

then the exchange has:

10 BTC

of covered customer BTC balances in this simplified example.

These balances are liabilities from the exchange's perspective.

What Is Proof of Liabilities?

Proof of Liabilities (PoL) refers to methods used to demonstrate customer-balance obligations.

A stronger reserve process asks both:

What does the exchange hold?

and:

What does the exchange owe?

Therefore:

Proof of Assets
+
Proof of Liabilities

is more informative than simply publishing wallet balances.

How Does Proof of Reserves Work?

There is no single universal PoR method used by every exchange.

A more comprehensive process can look like:

Customer Balances
↓
Snapshot
↓
Liability Calculation
↓
Merkle Tree / Cryptographic Verification
↓
User-Level Verification

+

Exchange Wallets
↓
On-Chain Assets
↓
Proof of Wallet Control

↓

Compare Assets
with Covered Liabilities

Different exchanges may implement only some of these steps.

That is why two platforms can both claim to have:

Proof of Reserves

while providing very different levels of transparency.

What Is a PoR Snapshot?

Most reserve reviews examine balances at a particular point in time.

For example:

Snapshot Date
June 30, 2026

The exchange records covered customer balances and reserve assets at or around that time.

That means the result answers:

What did the covered position look like at the snapshot time?

It does not automatically prove the exchange has the same balances today.

Why Does Snapshot Timing Matter?

Crypto assets can move extremely quickly.

Suppose an exchange publishes a valid PoR dated:

January 1

but today is:

September 3

The report may still accurately describe January 1.

But it cannot tell you everything about September 3.

Since the snapshot:

• Assets may have moved
• Customer liabilities may have changed
• Wallets may have changed
• Security incidents may have occurred
• Corporate financial conditions may have changed

This is why freshness matters.

What Is a Reserve Ratio?

A reserve ratio compares covered reserve assets with covered customer liabilities.

A simplified formula is:

Reserve Assets
÷
Customer Liabilities
×
100%

For example:

BTC Reserves
105,000 BTC

Covered BTC Liabilities
100,000 BTC

gives:

Reserve Ratio
105%

That means the verified reserves exceed the covered liabilities in that specific calculation.

What Does a 100% Reserve Ratio Mean?

If:

Reserve Assets
=
Covered Customer Liabilities

then:

Reserve Ratio
=
100%

In simple terms, every unit of covered customer balance has one unit of covered reserve assets behind it.

For example:

Customer BTC Balances
100,000 BTC

BTC Reserves
100,000 BTC

Reserve Ratio
100%

But this number needs careful interpretation.

Does a 100% Reserve Ratio Mean an Exchange Is Safe?

No.

This is one of the biggest misunderstandings surrounding PoR.

Suppose an exchange reports:

Customer Liabilities
$5 billion

Verified Reserves
$5.5 billion

Reserve Ratio
110%

That can be positive evidence.

But the company might also have:

Bank Debt
$1.5 billion

Other Corporate Liabilities
$700 million

that are outside the reserve calculation.

So:

Reserve Ratio > 100%

does not automatically prove:

Company is solvent

Does Proof of Reserves Prove Solvency?

No, not by itself.

Solvency is a broader financial concept.

A solvency assessment normally needs to consider something closer to:

Total Assets
vs
Total Liabilities

Proof of Reserves may focus more narrowly on:

Covered Reserve Assets
vs
Covered Customer Balances

Those are not the same calculation.

Proof of Reserves vs Proof of Solvency

This is why:

PoR
≠
Proof of Solvency

What Is a Merkle Tree in Proof of Reserves?

An exchange cannot simply publish every customer's account balance.

That would create serious privacy problems.

For example, it should not publicly disclose:

Customer A
$2,000,000

Customer B
$1,200

Customer C
$450,000

A Merkle tree allows many account records to be represented through cryptographic hashes.

Conceptually:

Customer Records
↓
Individual Hashes
↓
Merkle Tree
↓
Merkle Root

This can allow individual customers to verify that their account data was included in a larger committed data set.

What Does a Merkle Proof Tell a User?

Suppose your exchange gives you a user-specific Merkle proof.

You may be able to verify:

My balance was included in this PoR liability snapshot.

That is meaningful.

Without user-level verification, you may have to trust that the exchange included your account.

With a Merkle proof, that inclusion can become cryptographically verifiable.

What Doesn't a Merkle Proof Prove?

A Merkle proof for your account does not automatically prove:

• Every other customer was included
• Every liability was included
• The exchange controls sufficient assets
• Those assets are legally available to customers
• The company has no other debts
• The exchange is solvent

So:

My balance is included

is a much narrower claim than:

The exchange is financially safe

Can an Exchange Omit Liabilities From a Merkle Tree?

This is an important limitation.

Cryptography can prove that:

A particular record is included in a committed data set.

It does not automatically prove that:

Every record that should have been included was actually included.

This leads to an important distinction:

Data Integrity
≠
Data Completeness

A mathematically valid tree can still represent an incomplete input data set if the broader process does not adequately address completeness.

Why Are Negative Balances Important?

Crypto exchanges can offer:

• Margin
• Futures
• Borrowing
• Lending

That means customer accounts can contain more complex positions than simple positive spot balances.

For example:

Customer A
+10 BTC

Customer B
-8 BTC

If negative balances are handled incorrectly, total customer liabilities could be understated.

Modern cryptographic methods can help enforce additional rules around how balances are calculated.

What Are Zero-Knowledge Proofs in PoR?

Some reserve systems combine Merkle trees with:

zero-knowledge proofs

such as:

zk-SNARKs

or other ZK systems.

These techniques can allow a platform to prove mathematical statements about customer balances without publicly revealing each customer's balance.

For example:

Private Customer Data
↓
ZK Proof
↓
Prove:
Balances satisfy specified rules

while keeping individual account details private.

Why Use Merkle Trees and ZK Proofs Together?

They solve related but different problems.

A Merkle proof can help answer:

Was my account included?

A zero-knowledge proof can potentially answer:

Did the included data satisfy specified mathematical constraints?

Together they can improve liability verification.

But they still do not solve every financial-risk question.

How Are Reserve Assets Verified?

For blockchain-based assets, exchanges can disclose or verify wallet addresses containing reserve assets.

Public blockchains allow anyone to see:

Wallet Address
↓
On-Chain Balance

For example:

Wallet
bc1q...

Balance
5,000 BTC

That establishes that the assets exist at the address.

But another question remains:

Does the exchange actually control the wallet?

What Is Proof of Wallet Control?

A stronger PoR process needs evidence connecting an exchange to the claimed wallets.

This can involve:

• Cryptographic signatures
• Signed messages
• Controlled transfers
• Independent verification

The purpose is to demonstrate:

The exchange controls the private keys or otherwise controls the assets represented as reserves.

Control Is Not the Same as Legal Ownership

This distinction matters.

Cryptographic evidence can demonstrate:

An entity controls a wallet.

That does not necessarily establish every legal question concerning:

• Ownership
• Customer rights
• Collateral
• Liens
• Bankruptcy priority

So:

Wallet Control
≠
Complete Legal Ownership Analysis

Can an Exchange Borrow Assets Before a PoR Snapshot?

A point-in-time snapshot cannot automatically eliminate this concern.

In theory:

Borrow Assets
↓
Move Assets to Wallet
↓
PoR Snapshot
↓
Return Assets

could create a misleading picture if the verification process cannot detect it.

This is one reason users should examine:

• Independent verification
• Historical reports
• Update frequency
• Methodology
• Evidence of asset encumbrance

rather than relying on one wallet screenshot.

What Is Asset Encumbrance?

An encumbered asset is an asset subject to another claim or restriction.

Reserve assets could theoretically be:

• Pledged as collateral
• Subject to a lien
• Borrowed
• Used to secure another obligation

For example:

Wallet contains
$1 billion BTC

does not automatically prove:

All $1 billion
is freely available
to satisfy customer claims

This is a major limitation of simple on-chain reserve verification.

Can the Same Reserve Assets Support Other Liabilities?

Potentially.

Suppose an exchange shows:

Crypto Reserves
$2 billion

but those assets also secure:

Corporate Debt
$800 million

Then simply observing $2 billion of crypto does not tell you how much is legally available to customers.

This is why Proof of Reserves does not replace broader financial information.

Does Proof of Reserves Prove Customer Assets Are Segregated?

No.

Asset segregation asks:

Are customer assets legally and operationally separated from the exchange's own assets?

Proof of Reserves asks something different:

Does the exchange provide evidence of reserve assets relative to covered customer balances?

Therefore:

Proof of Reserves
≠
Proof of Asset Segregation

Why Does Asset Segregation Matter?

Asset segregation becomes particularly important if an exchange becomes insolvent.

During normal operations, users may see:

Reserve Ratio
105%

But in bankruptcy, a different question becomes critical:

Are these legally customer assets, or part of the company's insolvency estate?

That depends on:

• Applicable law
• Customer agreements
• Custody arrangements
• Asset segregation
• Creditor rights

A PoR report cannot answer all of those legal questions.

Does PoR Guarantee Customers Get Their Crypto Back in Bankruptcy?

No.

Customer recovery can depend on:

• Asset ownership
• Segregation
• Insolvency law
• Creditor priority
• Security interests
• Terms of Service
• Court proceedings

Therefore:

Strong PoR
≠
Guaranteed Recovery

Does Reserve Asset Quality Matter?

Yes.

Imagine two exchanges.

Exchange A

Its reserves consist primarily of:

BTC
ETH
Major stablecoins

Exchange B

A large portion of reserves consists of:

Tokens issued by
or closely associated
with the exchange itself

Those reserve structures do not necessarily have the same risk.

Why Can Exchange-Issued Tokens Be Riskier?

If an exchange relies heavily on its own token:

Confidence in exchange falls
↓
Exchange token price falls
↓
Reserve value falls

This creates correlation risk.

The asset intended to support the exchange can lose value precisely when the exchange itself is under stress.

Users should therefore look not only at:

How much reserve exists?

but also:

What are the reserves made of?

Are Stablecoins Automatically Risk-Free Reserves?

No.

Stablecoins can still carry:

• Issuer risk
• Depegging risk
• Regulatory risk
• Counterparty risk
• Redemption risk

Reserve composition should therefore be evaluated asset by asset.

Is Proof of Reserves a Financial Audit?

Not automatically.

This is another major area of confusion.

You may see phrases such as:

Proof of Reserves Audit

But PoR engagements can vary substantially.

They can involve:

• Independent reviews
• Attestation procedures
• Agreed-upon procedures
• Cryptographic verification
• Exchange self-publication

These are not necessarily equivalent to a full financial statement audit.

What Does a Financial Audit Cover?

A traditional financial statement audit can examine a much broader set of financial information, including:

• Assets
• Liabilities
• Revenue
• Expenses
• Equity
• Accounting policies
• Financial statements

Proof of Reserves normally focuses much more narrowly on reserve assets and covered customer balances.

Therefore:

PoR
≠
Full Financial Audit

Audit vs Attestation vs Agreed-Upon Procedures

These terms matter.

Audit

A formal financial statement audit performed under applicable auditing standards.

Attestation

An independent practitioner evaluates or reports on specified information or assertions.

Agreed-Upon Procedures

A practitioner performs specifically agreed procedures and reports factual findings.

Self-Published PoR

The exchange itself publishes:

• Wallet addresses
• Reserve data
• Merkle roots
• Ratios

without equivalent independent assurance.

These approaches can all provide transparency.

But they should not be treated as identical.

Are All Proof of Reserves Systems Equally Strong?

No.

Consider three examples.

Exchange A

Publishes:

Wallet Addresses

Exchange B

Publishes:

Wallet Addresses
+
Customer Liabilities
+
Merkle Tree

Exchange C

Provides:

Assets
+
Liabilities
+
User-Level Verification
+
Merkle Proofs
+
Cryptographic Constraints
+
Independent Review
+
Regular Updates

All three might market:

Proof of Reserves

But the evidence quality is clearly different.

What Should You Check in a Proof of Reserves Report?

A good checklist includes the following.

1. Are Liabilities Included?

If the exchange publishes only assets, you cannot determine whether those assets adequately cover customer balances.

2. Can Users Verify Their Own Balance?

Look for:

• Merkle proof
• User verification
• Account inclusion check

3. Which Assets Are Covered?

Suppose an exchange lists:

300 assets

but its PoR covers only:

BTC
ETH
USDT
USDC

Then the reserve evidence applies only to the covered assets.

4. Which Accounts or Products Are Covered?

Does the report include:

• Spot
• Margin
• Futures
• Earn products
• Staking
• Institutional accounts

Scope matters.

5. Who Verified the Reserves?

Was there an independent third party?

If so, what exactly did that party verify?

6. How Is Wallet Control Proven?

Publishing an address is weaker than demonstrating control over the address.

7. When Was the Snapshot Taken?

A technically strong report can still become stale.

8. How Often Is PoR Updated?

More frequent verification can reduce snapshot-timing risk.

9. Are Historical Reports Available?

Historical reports help users assess whether transparency is consistent rather than a one-time marketing exercise.

10. What Are the Reserves Made Of?

Look at:

• BTC
• ETH
• Stablecoins
• Exchange-related tokens
• Illiquid assets

Composition matters.

Snapshot PoR vs Continuous Proof of Reserves

Snapshot PoR

Shows:

A specific point in time.

Periodic PoR

Updated:

• Monthly
• Quarterly
• Semi-annually
• Other schedule

Near Real-Time or Continuous Monitoring

Attempts to provide more frequent visibility into reserves.

More frequent evidence can be useful.

But frequency alone does not solve:

• Liability completeness
• Encumbrance
• Corporate debt
• Legal ownership

Does Proof of Reserves Mean an Exchange Is Safe?

No.

A strong PoR system can materially improve transparency.

But an exchange can still face:

• Cyberattacks
• Private-key compromise
• Withdrawal disruptions
• Liquidity crises
• Governance failures
• Regulatory enforcement
• Operational outages
• Insolvency

So:

Strong PoR
≠
Safe Exchange

A user's broader assessment should also include regulatory status, security history, custody, withdrawal reliability and recent risk events.

How to Read a "100%+ Proof of Reserves" Claim

When an exchange says:

"We are 100%+ reserved."

do not stop at the percentage.

Ask:

100% of what?
↓
Which assets?
↓
Which customer balances?
↓
Which products?
↓
Which legal entity?
↓
At what date?
↓
Who verified it?
↓
Can I verify my balance?
↓
Are other liabilities excluded?

That turns a marketing number into a meaningful due-diligence question.

Frequently Asked Questions

What is Proof of Reserves?

Proof of Reserves is a transparency method used to provide evidence that a crypto exchange or custodian controls assets backing covered customer balances.

What does PoR stand for?

PoR stands for Proof of Reserves.

Why do crypto exchanges publish Proof of Reserves?

Because users of centralized exchanges cannot independently see the exchange's internal customer-accounting system and need additional evidence that their balances are backed.

What is a reserve ratio?

A reserve ratio compares covered reserve assets with covered customer liabilities.

What does a 100% reserve ratio mean?

It generally means verified reserve assets equal covered customer liabilities for the specified asset and snapshot.

Does 100% Proof of Reserves mean an exchange is safe?

No.

What is Proof of Liabilities?

Proof of Liabilities refers to methods used to demonstrate the balances or obligations a platform owes customers.

Does Proof of Reserves need liabilities?

A stronger PoR assessment includes both reserve assets and covered customer liabilities.

What is a Merkle tree in Proof of Reserves?

A Merkle tree is a cryptographic data structure that can allow customer balances to be committed into one data structure while enabling individual inclusion verification.

What does a Merkle proof prove?

It can prove that a particular customer record was included in a committed data set.

Does a Merkle proof prove all customers were included?

No.

Can Proof of Reserves prove an exchange is solvent?

No, not by itself.

Is Proof of Reserves an audit?

Not necessarily. PoR reviews, attestations, agreed-upon procedures and financial statement audits are different types of engagement.

Can an exchange borrow assets before a PoR snapshot?

A point-in-time PoR cannot automatically rule out all borrowing or encumbrance concerns.

Does PoR prove reserve assets are unencumbered?

Not necessarily.

Does PoR prove customer assets are segregated?

No.

Does Proof of Reserves guarantee recovery in bankruptcy?

No.

Are exchange-issued tokens good reserve assets?

They may introduce additional correlation and liquidity risk, especially when the exchange's own financial condition affects the token's value.

How often should Proof of Reserves be updated?

There is no universal frequency, but more recent and regularly updated evidence generally reduces freshness risk.

How can I tell if a PoR is strong?

Check liabilities, user verification, asset coverage, methodology, wallet control, independent review, reserve composition, snapshot date and historical reporting.

Key Takeaway

Proof of Reserves can answer an important question:

"Does this exchange provide verifiable evidence that covered customer balances are backed by reserve assets?"

But that is not the same as asking:

"Is this exchange completely financially safe?"

A strong PoR can provide:

Reserve Assets
+
Customer Liabilities
+
User Verification
+
Cryptographic Evidence
+
Independent Review

But it still may not prove:

No hidden corporate liabilities

No asset encumbrance

Full customer asset segregation

No cybersecurity risk

No liquidity risk

No insolvency risk

Therefore:

Proof of Reserves
≠
Proof of Solvency

and:

100% Reserves
≠
100% Safe

The most useful question is not:

"Does this exchange have PoR?"

It is:

"How much does this Proof of Reserves actually prove?"