Proof of reserves (PoR) is point-in-time evidence about assets an exchange reports controlling and, in some designs, customer liabilities included in a cryptographically committed dataset. It can help you test whether your balance appears in that dataset. It does not, by itself, prove that every liability was counted, that the assets were unborrowed and unencumbered, that the exchange is solvent, or that withdrawals will remain available later.
The useful question is not simply whether an exchange publishes a reserve ratio. It is what the report covered, how the figures were produced, which procedures an independent provider performed, and what remained outside the perimeter.
As an Amazon Associate I earn from qualifying purchases.
What proof of reserves actually measures
A PoR report normally describes a snapshot taken at a stated date and time. On the asset side, the exchange identifies particular blockchain addresses, account balances with custodians, or other holdings and presents evidence that it controlled them at the snapshot. Control may be demonstrated by signing a message with a private key, by allowing a provider to inspect the procedure, or through another documented method.
Recommended Free Tools
On the liability side, the exchange calculates what it says it owed customers and other claimants. Some exchanges publish only aggregate numbers. Others commit individual account records to a cryptographic structure so each customer can test whether their balance was included without seeing everyone else’s balance.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
The resulting reserve ratio is therefore conditional: it is a comparison between the assets and liabilities defined by that particular report, valued under that report’s method, at that particular moment. A ratio above 100% means the reported assets exceeded the reported liabilities under those definitions on the snapshot date. It is not a standing guarantee of solvency or liquidity.
How the cryptographic process works
1. Establishing control of assets
The exchange first identifies the assets and entities in scope. For on-chain holdings, it may list wallet addresses and show that it can authorize a message from the corresponding keys. A third-party provider may observe or perform the control check. This demonstrates control of the specified addresses at the time tested; it does not automatically establish ownership of every asset the exchange has, nor does it show that the assets are free of pledges or other claims.
2. Building the liability dataset
The exchange extracts customer balances and other obligations according to its stated rules. The critical questions are which customers, products, legal entities and account types are included; how negative balances are handled; whether loans, derivatives, staking claims or other obligations are counted; and how balances are valued. A cryptographic proof cannot correct an incomplete or incorrectly constructed input file.
3. Committing records with a Merkle tree
A Merkle tree repeatedly hashes pairs of records until one value, the Merkle root, represents the entire set. Changing a single record changes the root. The exchange publishes the root and gives a customer an account-specific record, often called a leaf, plus the neighboring hashes needed to recompute the path from that leaf to the root.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
To verify inclusion, the customer hashes the supplied record, combines it with each neighboring hash in the prescribed order, and checks whether the final result equals the published root. A matching root shows that the supplied record was part of the committed dataset used for that report. Because the exchange need not publish every leaf, the method can provide an inclusion check without exposing the full customer ledger.
4. Optional zero-knowledge checks
Some systems add zero-knowledge technology to prove properties of the committed data without revealing individual records. Binance describes a Merkle-tree process supplemented by zk-SNARKs for its own PoR system. That description applies to that exchange’s implementation; other exchanges may use different trees, fields, software and verification instructions.
How to verify that your balance was included
Your exchange must provide a report and a verification interface or downloadable proof for this to be possible. The exact labels differ, but the workflow is generally:
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →- Find the report’s snapshot date. Confirm that you are using the report for the relevant legal entity, platform and account product, not an older or narrower publication.
- Open the verification tool or instructions. Obtain the account record, balance fields and proof path supplied for your account. Do not assume that a screenshot of an aggregate ratio is an account-level proof.
- Check the record’s meaning. Read which assets, currencies, account types and valuation time the record represents. A displayed balance can be denominated in a token, a fiat value or another unit.
- Recompute the Merkle path. Follow the exchange’s documented hashing and ordering rules, combining your leaf with each sibling hash until you produce a root.
- Compare the result with the published root. A match confirms inclusion in that committed set. A mismatch can result from a copied value, an outdated root, a formatting error or a genuine omission, so preserve the report version and contact the exchange using its stated dispute process.
- Read the perimeter and exceptions. Inclusion proves only that the supplied record was committed. It does not establish that the total liability set included every customer or obligation, or that the corresponding assets were available for withdrawal.
A valid proof should not require you to reveal another customer’s balance. If the instructions ask for sensitive credentials or a private key, stop; account inclusion should be testable with public report data and your own account-specific record, not with signing authority over your funds.
Rank #3
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
What a PoR report can establish
- At the stated snapshot, specified blockchain addresses or other holdings were presented as controlled under the documented procedure.
- The reported asset amounts were measured and valued under the report’s stated method.
- The exchange’s committed liability dataset contained your supplied record when your Merkle path reproduces the published root.
- The reported assets exceeded the liabilities that the exchange included, if the report clearly defines both totals and the arithmetic is correct.
- The named provider performed the procedures described in its report, where a provider was engaged.
These are bounded findings. They depend on the source data, the entities and products selected, valuation choices, and the quality of the control process. Cryptography protects the integrity of a committed dataset; it does not certify that management populated that dataset completely or accurately.
What proof of reserves does not prove
It is not a complete financial-statement audit
The PCAOB Office of the Investor Advocate said in its March 8, 2023 staff advisory, “Importantly, investors should note that PoR engagements are not audits and, consequently, the related reports do not provide any meaningful assurance to investors or the public.” The advisory is staff guidance, not a Board rule or policy. It also explains that PoR engagements are not conducted under PCAOB auditing standards and are not subject to PCAOB inspection.
The SEC’s Investor.gov bulletin of July 27, 2023 likewise cautions that PoR, valuation and calculation reports are not PCAOB financial-statement audits. They may omit complete financial statements and may not present the full liability picture. The word “audit” should therefore not be used as if every PoR report supplied the same assurance.
It does not prove that every liability was counted
An exchange can produce a mathematically valid Merkle root from a partial ledger. The root cannot tell you whether an affiliated entity, an institutional account, a loan, a derivatives position, a customer claim in another product or an obligation created after a cutoff was left out. Negative balances and disputed claims may be treated differently from ordinary customer balances.
Rank #4
- EAL5+ CERTIFIED SECURE ELEMENT + FINGERPRINT PROTECTION — Your private keys stay encrypted offline on a certified EAL5+ chip, the same security tier used in EMV bank cards. Built by DCENT, securing crypto since 2018. Fingerprint authentication adds a second layer no PIN-only wallet can match.
- 10,000+ ASSETS NATIVE ON 100+ BLOCKCHAINS — Hold Bitcoin, Ethereum, XRP, Solana, Cardano, popular stablecoins (USDT, USDC), and NFTs in one wallet. No third-party apps, no fragmented setup — every supported asset works straight out of the box.
- TAP-TO-SIGN MOBILE EXPERIENCE — Pair your wallet with the DCENT mobile app over Bluetooth. Manage tokens, review transactions, and access in-app swap features directly from your phone — no cables, no desktop required.
- WEB3 & dAPP ACCESS VIA METAMASK — Connect to MetaMask and other browser extension wallets to manage NFTs, claim airdrops, and access dApps. A large screen and intuitive 4-button interface keep every transaction clearly visible before you sign.
- SEAMLESS FIRMWARE UPDATES & 30-DAY MONEY-BACK GUARANTEE — Apply security updates without resetting your wallet or migrating funds. Backed by Amazon's 30-day money-back guarantee — your purchase is risk-free.
It does not prove the assets were unborrowed or unencumbered
Wallet control at a snapshot does not reveal whether the assets were borrowed temporarily, pledged as collateral, subject to a lien or owed to someone else. The PCAOB advisory specifically warns that procedures may not address whether assets were borrowed to appear adequately reserved or whether holders’ rights were properly considered.
It does not prove continuing liquidity
A snapshot cannot assure that assets were not lent, transferred, used or made unavailable after the test. It says nothing by itself about withdrawal queues, intraday liquidity, banking access, market depth, risk limits or the exchange’s ability to sell an asset without a large price impact. A reserve ratio above 100% on one date is not a promise that withdrawals will be honored tomorrow.
It does not prove sound controls or governance
PoR procedures generally do not provide assurance about internal controls, segregation of duties, authorization systems, accounting records, management incentives or governance. Those matters can determine whether a seemingly strong snapshot remains reliable.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →How to compare two exchanges’ PoR disclosures
Do not rank exchanges from a single percentage. Normalize the definitions and procedures across the reports using the following framework.
Best Value
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
| Dimension | What to inspect | Why it changes the conclusion |
|---|---|---|
| Time and cadence | Snapshot date, publication delay and frequency of new reports | A recent, regularly refreshed report provides a different time window from a delayed or infrequent snapshot. |
| Asset scope and control | Covered legal entities, assets, wallet addresses, custodians and evidence of control | A ratio is meaningful only for the assets and entities actually tested. |
| Liability completeness | Customer and product coverage, exclusions, negative balances and the method used to total obligations | A high ratio can be overstated if material liabilities are outside the dataset. |
| Valuation | Pricing source, valuation time, currency and treatment of illiquid or volatile tokens | Different prices and timing can materially change both sides of the ratio. |
| Independent work | Provider identity and qualifications, exact procedures, factual-findings language and assurance level | An agreed-upon-procedures report records specified findings; it does not opine that reserves are adequate or that the company is financially stable. |
| User verification | Whether customers receive an inclusion proof, can inspect the methodology and can see exceptions | Account-level verification is stronger than an unexplained aggregate number, but still depends on complete source data. |
| Ongoing availability | Disclosures about encumbrances, subsequent transfers, withdrawal liquidity, governance and controls | These are separate risks that a point-in-time cryptographic commitment does not settle. |
Questions to ask before relying on a reserve ratio
- Which legal entities and jurisdictions are included?
- Which customer products and account types are included or excluded?
- Are all customer liabilities included, including loans, derivatives, staking and negative balances?
- What date and time were balances and prices captured, and how long after that date was the report published?
- Which assets were counted, and were any pledged, lent, rehypothecated or held by another party?
- Can the exchange demonstrate control of the listed addresses without moving customer funds?
- Who performed the work, what exact procedures were requested, and does the report state factual findings rather than an assurance opinion?
- Can you independently recompute an account-inclusion proof, and does the report explain exceptions and limitations?
- What information, if any, addresses events after the snapshot?
If an exchange will not disclose the perimeter, valuation method, provider procedures or exclusions, treat the ratio as difficult to interpret rather than as a clean solvency signal.
Regulation: what MiCA Article 36 covers
Article 36 of Regulation (EU) 2023/1114 (MiCA), in the consolidated EUR-Lex text dated January 9, 2024, requires issuers of asset-referenced tokens to constitute and maintain a reserve, address associated risks and legally and operationally segregate reserve assets. That provision applies to issuers of asset-referenced tokens. It is not a universal requirement that every centralized crypto exchange publish a PoR report.
Regulatory obligations can therefore differ by product, issuer, jurisdiction and authorization status. The presence of a PoR page does not establish that an exchange is subject to the reserve rules for token issuers, and compliance with a token-reserve rule would not transform an exchange snapshot into a complete financial audit.
Free tools Windows power users keep installed
One-click scans. No signup required.
Bottom line for readers
Use PoR as one verification artifact, not as a solvency certificate. A well-documented report can show what assets and liabilities were included at a specific time, and a Merkle proof can show that your balance was included in the exchange’s committed dataset. The reliability of the conclusion still rests on the completeness of the perimeter, the accuracy of the source records, the independence and scope of the procedures, and what happened after the snapshot.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
