Before depositing crypto, check two separate things: what dated evidence the exchange provides about its assets and customer liabilities, and what the customer agreement says about who controls your assets and what happens if the exchange fails. Proof of reserves (PoR) can offer limited evidence about a defined snapshot; it is not, by itself, proof that an exchange is solvent, that every liability was counted, or that you can withdraw whenever you want.
What proof of reserves can—and cannot—show
It is a dated snapshot with a defined scope
A reserve report is useful only when you know what it covers. Check its “as of” date and publication date, the legal entities and customer accounts included, the assets and wallets counted, and any stated exclusions. A page describing a method is not the same as a current report. If a reserve ratio is shown, find out exactly how the assets in its numerator and the liabilities in its denominator were defined.
As an Amazon Associate I earn from qualifying purchases.
A snapshot does not establish what happened before or after it. It may not show whether assets were borrowed for the reporting date, used between snapshots, or moved soon after publication. Nor does it prove that assets will be available for customer withdrawals in the future.
Assets alone do not establish solvency
A wallet balance or reserve total is only one side of the comparison. It does not establish that all customer liabilities—including obligations not visible on-chain—were counted, or that customers would have priority over other claimants in an insolvency. A reserve ratio is not a guarantee of solvency or recovery.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
A cryptographic inclusion check has a narrower purpose
A Merkle proof can help a customer check whether a balance appears as a leaf in a particular tree or calculation, provided the verification inputs and method are sound. A zero-knowledge proof may demonstrate a property of submitted balances without disclosing every underlying detail. Neither method, by itself, proves that the submitted liability set is complete, that the exchange controls the reported assets, or that those assets are unencumbered and will remain available.
A pre-deposit verification process
- Find the report itself. Start on the exchange’s official site and locate its dated reserve report, snapshot, or account-verification portal. Note the “as of” date and issue date. Identify the covered legal entity, assets, wallets, customer balances, and exclusions.
- Inspect how customer liabilities were counted. Look for an explanation of how the customer-balance population was assembled and whether the report covers relevant off-chain liabilities. Find out whether you can verify your own account’s inclusion and what process applies if your balance is missing or incorrect. Inclusion in submitted data does not prove that all liabilities were submitted.
- Identify who performed the work and what it means. Record the provider, its relationship to the exchange, procedures performed, standards used, assurance level, and limitations. Do not assume that “audit,” “attestation,” “verified,” and “proof” mean the same thing. SEC Investor.gov guidance says PoR reports are not equivalent to financial-statement audits. PCAOB Investor Advocate staff warn that PoR reports are inherently limited; their advisory is a staff view, not a PCAOB Board rule or policy, and says such engagements are not PCAOB audits subject to PCAOB inspection.
- Read the agreement for your specific service. Find the contracting legal entity, governing law, ownership terms, withdrawal rights and suspensions, insolvency treatment, and liability limits. Look for language about whether assets may be lent, pledged, reused, or commingled, and how customer interests are identified in records and on-chain.
- Verify the entity and applicable authorization. Search the relevant regulator’s official register for the entity named in the agreement, and check whether its authorization covers the service you plan to use. An exchange brand may cover multiple entities and services; a brand name alone does not tell you which entity holds your assets.
What to check in custody disclosures
Reserve evidence and custody terms answer different questions. A wallet may hold assets without telling you who controls its keys, what rights you have to the assets, or how a claim would be treated if the business failed.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
- Key control and access: Ask who controls the private keys, who can authorize transactions, and where keys are stored. The SEC’s December 12, 2025 custody bulletin recommends asking who has access and what security procedures apply. Its plain-language reminder is that “Crypto wallets do not store crypto assets themselves; instead, they store the ‘private keys’ or passcodes for your crypto assets.”
- Segregation and identification: Check whether client holdings are separated from the provider’s holdings in both records and operations, and how your interest in them is identified. “Segregated” should be understood in light of the agreement and applicable law, not inferred from a separate wallet address alone.
- Reuse and encumbrances: Look for permission to lend, pledge, use as collateral, or otherwise reuse customer assets. A claim that assets are held in cold storage does not answer whether the agreement permits reuse or whether assets are subject to claims.
- Outsourcing: If custody is subcontracted, identify the custodian and what responsibilities each firm accepts. Review where assets and keys are held, how hot and cold wallets are used, and what physical and cybersecurity controls are described.
- Withdrawal and failure terms: Read the rules for withdrawals, suspension, return of assets, and insolvency. Check available insurance and its exclusions, account authentication and withdrawal controls, incident communications, and the costs of moving assets.
How to interpret an exchange’s cryptographic claims
Binance describes using a zk-SNARK circuit and a Merkle-tree approach to show that user balance leaf nodes contribute to its claimed total user-asset balance. That is Binance’s description of its own implementation, not an independent audit of the exchange. When reviewing a similar claim, ask what the proof actually establishes and what remains outside it: whether all customer liabilities are included, whether the reporting entity controls the assets, whether assets are encumbered or borrowed, what legal rights customers have, and whether the position changed after the snapshot.
What EU MiCA says about covered custody providers
For providers and services within its applicable EU framework, MiCA Article 75 sets custody-related duties. ESMA’s interactive Single Rulebook page describes requirements for an agreement covering the service, custody policy, security systems, fees, and applicable law; records of client positions; position statements at least quarterly and on request; and procedures for returning assets or access means. The article also addresses segregation of client holdings from the provider’s holdings, including legal and operational segregation, subject to applicable law, and provider liability for losses attributable to the provider, capped by market value at the time of loss.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
These duties are not a global rule for every exchange or customer. Whether they apply depends on the provider, service, and legal context. The quarterly statement frequency is a specified reporting requirement, not a guarantee that assets are safe or that recovery will be straightforward.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to compare two exchanges without relying on one ratio
Compare reports with the same “as of” date where possible, and check whether their scopes are sufficiently similar. A ratio is not a sound basis for ranking exchanges if one report counts different assets, liabilities, entities, or customer populations from another.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
- Snapshot date, covered entities, assets, wallets, and exclusions
- Liability completeness, treatment of off-chain obligations, and customer inclusion method
- Provider independence, procedures, standards, and stated assurance level
- Who controls the assets and keys, and whether assets may be reused or are encumbered
- Legal and operational segregation, custody outsourcing, and security controls
- Withdrawal, insolvency, insurance, and transfer-cost terms
- Exact contracting entity, jurisdiction, and authorization for the service
No universal reserve threshold or comparative customer-recovery rate establishes that one exchange is safe. Treat missing or unclear disclosures as unresolved uncertainty, rather than filling the gaps with a displayed ratio or a cryptographic inclusion check.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteIf you choose not to leave crypto with an exchange
Self-custody is an alternative, not a way to verify an exchange. A hardware wallet may help keep private keys under your control, but you then become responsible for safeguarding the keys and recovery phrase. Losing or having them stolen can mean permanent loss of access.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
