With Binance releasing its 23rd Proof of Reserves snapshot in October 2024, showing holdings of 4.425 million Ethereum and substantial Bitcoin reserves, the concept of exchange transparency has never been more relevant. But what exactly is Proof of Reserves, and how can everyday users verify that their exchange actually holds the assets it claims to? This guide walks you through everything you need to know to evaluate exchange solvency and protect your funds.
The Basics
Proof of Reserves (PoR) is an auditing methodology that allows cryptocurrency exchanges to demonstrate that they hold sufficient assets to cover all user deposits. The concept gained widespread attention following the collapse of FTX in November 2022, which revealed that the exchange had been operating with insufficient reserves for an extended period. In response, major exchanges including Binance, Kraken, and others began publishing regular PoR reports to restore user confidence.
At its core, PoR works by creating a cryptographic proof that an exchange controls specific blockchain addresses holding specific amounts of cryptocurrency. This proof is then compared against the total liabilities the exchange owes to its users. If the reserves equal or exceed the liabilities, the exchange is considered fully reserved.
Why It Matters
Understanding PoR is essential because the cryptocurrency industry lacks the depositor insurance protections that traditional banks provide. In most countries, bank deposits are insured up to a certain amount by government agencies. Crypto exchanges offer no such guarantees. If an exchange becomes insolvent, users may lose some or all of their funds with no recourse.
The FTX collapse demonstrated this risk in devastating fashion. Billions of dollars in customer funds were lost because the exchange had secretly transferred user deposits to an affiliated trading firm. Regular, independently verified PoR reports could have exposed this fraud much earlier, potentially saving countless users from financial ruin.
Getting Started Guide
The first step in verifying an exchange’s PoR is to locate the most recent report. Major exchanges typically publish these on dedicated transparency pages. Binance’s PoR reports, for example, are available through their website and include detailed breakdowns of held assets across multiple cryptocurrencies.
Next, examine the methodology used to generate the proof. The gold standard is a Merkle Tree proof, which allows individual users to verify that their specific balance is included in the total without revealing their identity or exact holdings to the public. Here is how to verify your own balance:
Step 1: Log into your exchange account and navigate to the Proof of Reserves section. Look for your unique Merkle leaf or verification code. Step 2: Record your account balance at the snapshot date specified in the PoR report. The snapshot date is critical — your balance at any other time may not match. Step 3: Use the verification tool provided by the exchange (or an independent tool) to confirm that your balance is included in the Merkle Tree. Step 4: Check that the total assets in the Merkle Tree match the on-chain reserves published by the exchange. You can verify on-chain addresses using a blockchain explorer.
Common Pitfalls
Not all Proof of Reserves reports are created equal. Some common limitations to watch for include snapshot timing — a PoR report captures reserves at a single point in time. An exchange could borrow assets just before the snapshot and return them afterward, a practice known as “window dressing.” Look for exchanges that publish frequent snapshots to minimize this risk.
Another pitfall is the scope of assets covered. Some PoR reports only cover a subset of the assets an exchange offers. If you hold a token that is not included in the PoR, you have no verification that the exchange actually holds your funds. Additionally, PoR does not address off-balance-sheet liabilities, such as loans or derivatives positions that could affect the exchange’s actual solvency.
The quality of the auditor matters as well. Reports verified by independent, reputable auditing firms carry more weight than self-published claims. Look for PoR reports that have been reviewed by recognized audit firms with established track records in the cryptocurrency space.
Next Steps
After verifying your exchange’s PoR, consider implementing additional safety measures. The most effective strategy is to hold only the funds you actively need for trading on any exchange, keeping the majority of your portfolio in a self-custody wallet. Hardware wallets like Ledger or Trezor provide the strongest security for long-term holdings. For advanced users, multi-signature wallets offer an additional layer of protection by requiring multiple independent approvals for any transaction.
Stay informed about your exchange’s PoR schedule and make verification a regular habit, not a one-time check. The crypto landscape evolves rapidly, and an exchange that is fully reserved today could face liquidity challenges tomorrow. By combining regular PoR verification with prudent self-custody practices, you can significantly reduce the risk of losing funds to exchange insolvency.
Disclaimer: This article is for educational purposes only and does not constitute financial advice. Always conduct your own research before making decisions about cryptocurrency storage.
4.425M ETH in Binance reserves is impressive but a snapshot is not a full audit. users should understand the difference
binance publishes snapshots monthly. a lot can happen between snapshots. the whole point of defi was not having to trust anyone
post-FTX PoR became a checkbox exercise for most exchanges. merkle tree proofs without liabilities data are incomplete
^ this. showing assets means nothing without showing you owe. the liability side is where FTX hid everything
FTX literally had a backdoor moving funds between internal databases. no merkle tree in the world catches that kind of fraud
the backdoor was literally a function in their admin panel. sbf built an exchange with a secret withdraw button and nobody noticed for years
merkle proofs without liability proofs is like showing your bank balance without showing your mortgage. technically true but deliberately misleading