Crypto Exchange Proof of Reserves Comparison
Understand how leading exchanges verify customer deposits through Merkle tree audits, on-chain verification, and third-party attestation—and learn how to verify your own holdings.
What is Proof of Reserves?
Proof of Reserves (PoR) is a cryptographic method that demonstrates an exchange holds sufficient customer assets without revealing individual account balances. Following the FTX collapse in 2022, it became a critical transparency measure.
Merkle Tree Attestation
A Merkle tree is a cryptographic structure that hashes user balances hierarchically. Each user's balance is converted to a hash, then combined with others level by level until a single root hash is produced. If even one balance changes, the entire tree becomes invalid. This allows third-party auditors to verify the sum of all customer balances without accessing individual account data.
On-Chain Verification
Exchanges prove reserves by moving assets to publicly verifiable wallet addresses on the blockchain. The exchange signs these transactions with known keys, and anyone can verify ownership by checking the blockchain ledger. This creates an immutable, transparent record of asset holding.
Third-Party Audits
Independent accounting firms (Mazars, Armanino, Hacken) conduct scheduled audits, verifying both asset holdings and the completeness of customer balance records. They produce attestation reports that are published publicly.
Why Proof of Reserves Matters
Before FTX's November 2022 collapse revealed $8B in missing customer funds, few exchanges published PoR data. FTX claimed solvency while secretly lending customer deposits to Alameda Research. Today, PoR has become a baseline standard for exchange credibility. It answers a simple question: Can the exchange immediately return all customer assets if requested?
For retail traders and institutions, PoR provides:
- Assurance that deposits aren't secretly loaned or speculated with
- Early warning if an exchange becomes insolvent
- Regulatory confidence that the exchange operates with integrity
- Data to compare reserve ratios across platforms
Top Exchanges: Proof of Reserves Comparison
| Exchange | Audit Firm | Frequency | Assets Covered | User Verification |
|---|---|---|---|---|
| Binance | Mazars | Monthly | BTC, ETH, USDT, 100+ | Merkle tool + dashboard |
| Kraken | Armanino | Quarterly | Major coins | Published reports |
| OKX | Internal Merkle | Monthly | BTC, ETH, USDT, 50+ | Self-verify tool |
| Bybit | Hacken | Quarterly | Core assets | Audit reports |
| Coinbase | N/A* | Continuous | All customer assets | SEC filings |
*Coinbase, as a publicly traded company (NASDAQ: COIN), maintains continuous regulatory oversight and publishes quarterly 10-Q filings with the SEC that implicitly verify reserve adequacy.
Exchange-by-Exchange Breakdown
Binance
Binance publishes monthly PoR reports audited by Mazars. The exchange maintains a Merkle tree proof and a public dashboard showing aggregate BTC, ETH, and USDT holdings. Users can verify their own balances are included in the Merkle tree by entering their user ID and checking against published roots.
Reserve Ratio: 1:1 (100% of customer deposits held on-chain). Covers 100+ assets.
Kraken
Kraken has published quarterly PoR audits since 2014, longer than any other exchange. Armanino, a major accounting firm, verifies both assets and customer balances. Reports are posted publicly and include detailed reserve percentages per asset class.
Reserve Ratio: 1:1 for major assets. Audits available on kraken.com/en-us/proof-of-reserves.
OKX
OKX publishes monthly Merkle tree PoR with a user-facing verification tool. Unlike some exchanges, OKX allows users to independently verify their balance inclusion without submitting personal information to a centralized system.
Reserve Ratio: 1:1. Merkle tool available at okx.com/proof-of-reserves.
Bybit
Bybit reports quarterly audits conducted by Hacken, a respected blockchain security firm. Reports include reserve percentages across BTC, ETH, USDT, and other core assets.
Reserve Ratio: 1:1+. Recently surpassed 100% reserves on major assets.
Coinbase
As a publicly traded company regulated by the SEC, Coinbase doesn't publish traditional PoR reports. Instead, SEC filing requirements and continuous regulatory oversight serve as implicit proof. The company maintains customer assets in segregated accounts, with quarterly filings available on investor.coinbase.com.
Reserve Status: Implicit through regulatory oversight and quarterly 10-Q disclosures.
How to Verify Your Own Holdings
If an exchange publishes a Merkle tree PoR, you can verify that your balance is included without trusting the exchange:
Step 1: Obtain Your Merkle Proof
Visit the exchange's PoR page and enter your user ID or email. The exchange returns a "Merkle proof"—a list of hashes that, when combined with your balance hash, reproduces the published root hash.
Step 2: Hash Your Balance
Compute SHA-256 of your account balance (amount + account ID). This creates a unique hash representing your balance.
Step 3: Combine Hashes Level by Level
Starting with your balance hash, combine it with each hash in the Merkle proof (left/right alternating). Re-hash at each step, moving up the tree.
Step 4: Match the Root
If your final hash matches the published Merkle root, your balance is included in the PoR. If it doesn't match, either your data is wrong or the exchange's tree is fraudulent.
// Pseudocode: Verify Merkle Proof
const balanceHash = sha256(yourBalance);
let currentHash = balanceHash;
for (let proof of merkleProof) {
currentHash = sha256(currentHash + proof);
}
if (currentHash === publishedRoot) {
console.log('Balance verified!');
}Most exchanges provide one-click verification tools (Binance, OKX) that handle the cryptography automatically—you only need to confirm your user ID.
Real-Time Reserve Monitoring
Third-party platforms track exchange reserves in real time, aggregating on-chain data and published PoR reports:
- Nansen: On-chain surveillance platform tracking exchange wallet flows and reserve ratios for major coins.
- DefiLlama: Open-source dashboard aggregating published PoR data and calculating reserves across exchanges.
- Glassnode: Enterprise platform providing detailed exchange reserve analysis and withdrawal trends.
These tools help you monitor whether an exchange's reserves are trending up or down over time, providing early signals of potential liquidity stress.
Limitations of Proof of Reserves
Point-in-Time Snapshot
A PoR audit shows reserve status on a specific date. An exchange could satisfy auditors on audit day, then move funds immediately after.
Doesn't Show Liabilities
PoR only verifies assets—not whether the exchange owes more than it holds. FTX had PoR-like claims while secretly owing $8B. True solvency requires proving reserves exceed all liabilities.
Privacy Trade-offs
Merkle tree PoR protects individual privacy but requires trusting the exchange's root hash calculation. Some users worry exchanges could publish false roots.
Full vs. Fractional Reserve
A 1:1 reserve ratio means the exchange has enough assets to cover all customer balances at that moment. However, if 50% of users withdraw simultaneously, a fully reserved exchange still has enough to pay them.
For US Traders: SEC Reporting as Alternative
The SEC has not mandated PoR for crypto exchanges operating in the US, but regulated platforms like Coinbase provide alternative protections:
- Regular SEC Filings: Public companies must disclose material risks, including reserve adequacy, in quarterly 10-Q and annual 10-K forms.
- Segregated Customer Assets: Regulated brokers typically hold customer crypto in custodial accounts separate from company assets.
- Independent Audits: SEC-regulated firms undergo annual audits by external CPAs.
- Regulatory Oversight: SEC examiners conduct periodic compliance reviews.
For traders prioritizing regulation and transparency, SEC-registered exchanges (Coinbase, Kraken in certain jurisdictions) provide a complementary layer of assurance.
Related Guides
Frequently Asked Questions
1. What is the difference between a Merkle tree PoR and on-chain proof?
Merkle tree PoR verifies that the sum of customer balances is accurate without revealing individual holdings. On-chain proof shows that an exchange controls specific wallet addresses with known amounts of crypto. Best-in-class exchanges use both: Merkle trees prove aggregate customer balances match claimed totals, while on-chain data proves the exchange actually holds the assets. Binance and OKX combine both methods.
2. Can an exchange fake a Merkle tree PoR?
Not without detection. A fraudulent Merkle tree would fail when individual users verify their balances—the proof path wouldn't match the published root. However, if no users verify (unlikely with large audits), a fake tree could temporarily go undetected. This is why third-party auditor verification is critical. Auditors independently recompute the Merkle root and cross-check against published values.
3. Why doesn't Proof of Reserves prevent fraud?
PoR only verifies assets exist—not whether they're sufficient. An exchange could hold 1:1 reserves on-chain but simultaneously lend those assets to a related entity (as FTX did), creating undisclosed liabilities. True solvency proof requires auditing both reserves and liabilities. The FTX scandal revealed that PoR alone is insufficient; exchanges also need third-party balance sheet audits.
4. How often should exchanges update their PoR?
Industry best practice is monthly or quarterly. Monthly PoR (Binance, OKX) provides more frequent assurance but costs more to audit. Quarterly PoR (Kraken, Bybit) balances audit costs with reasonable update frequency. Given the speed of asset movement in crypto, annual PoR is increasingly considered insufficient. Real-time on-chain monitoring (via Nansen, Glassnode) offers an intermediate solution between scheduled audits.
5. Which exchange has the best Proof of Reserves program?
Binance and OKX lead on frequency and user verification. Kraken leads on audit history (quarterly since 2014). Coinbase provides SEC regulatory oversight as a substitute. For maximum transparency: look for monthly audits (not quarterly), third-party audit firms (not self-audits), Merkle tree user verification tools, and published on-chain wallet addresses you can independently verify. Binance checks all these boxes.
6. How do I verify an exchange's PoR without technical knowledge?
Use the exchange's one-click verification tool (most major exchanges now offer this). You only need to log in and click "verify my balance"—the tool handles all cryptography. Alternatively, check whether the exchange publishes third-party audit reports from recognized firms. Read the audit report to confirm it covers the assets you hold and that reserves are 1:1 or greater. Finally, monitor real-time reserve tracking on Nansen or DefiLlama to ensure reserves aren't trending downward.