Practical meaning of reserve certificates

What does a certificate of reserves prove?

A certificate of reserves audit report shows that a cryptocurrency exchange or stablecoin issuer holds a certain amount of assets on a specific date. But this report alone cannot prove that the entity can pay all its debts, that its reserves are free of legal disputes, or that it can withstand the impact of large-scale withdrawals. These are three separate questions, and most audit reports only answer the first question.

Why the industry started promoting this practice

After the FTX crash at the end of 2022, this practice changed from a niche application in the field of cryptography to an industry norm. The FTX incident exposed a gap of approximately US$8 billion between the assets the exchange claims to hold and the assets it actually holds. FTX once misappropriated customer deposits, transferred them to related party trading companies, and continued to display the full balance on customer screens, but the funds had long disappeared. Since then, all surviving exchanges have been eager to prove that they have not hidden similar loopholes, and the term "proof of reserves" has been coined.

Some platforms were at the forefront before this: Kraken, Nexo, BitMEX and Gate.io had established proof of reserve systems before the FTX crash. Binance, OKX, Crypto.com and Bybit subsequently adopted an approach based on the Merkel Tree. Coinbase takes a different path: As a listed company, it said its reserves have been verified through audit documents from the U.S. Securities and Exchange Commission, and in November 2022 argued that "on-chain accounting is the future."

Two things that a real proof must show

The core mechanism contains two independent proofs, both of which are indispensable. The first is proof of assets: showing that the exchange or issuer does indeed control a certain amount of cryptocurrency is relatively simple because blockchain balances are public and wallet ownership can be proved cryptographically. The second is the certificate of liability: showing the total amount owed by all customers to reconcile assets with total liabilities. If only assets are displayed without liabilities, it will have no proof of solvency, because an exchange that holds a large amount of cryptocurrency may still be insolvent if it owes more.

Cryptography (usually Merkel Tree) that allows exchanges to prove that customer balances are included in total liabilities without exposing the private balance of individual accounts is the focus of much engineering work on the Reserve Proof System. Chainlink Labs runs an independent proof of reserves system that was launched in 2020, with the first user being the stablecoin TrueUSD. The system connects the exchange's API and vault address to check whether reserves match liabilities by querying smart contracts.

What is not covered by the certificate of reserve

Reserves certification audit reports typically do not examine the entity's complete liability structure, including off-balance sheet liabilities, contingent claims, inter-company loans, or subordinated arrangements. This means that a company may appear to have sufficient reserves while holding undisclosed debt or senior creditor claims that would place customer deposits behind other creditors in bankruptcy. The PCAOB, the U.S. audit regulator, has called reserve proof reports "inherent limitations" and warned clients to be extremely cautious when viewing them as proof that assets are sufficient to cover liabilities. Paul Munter, chief accountant of the U.S. Securities and Exchange Commission, also separately pointed out that "non-audit arrangements are neither as strict nor as comprehensive as financial statement audits and may not provide reasonable assurance to investors."

The audit report is a snapshot, not a continuous stream: it can only show that reserves matched liabilities on the day of the test, but it cannot say whether this was still the case the day before or after, because the test date is often known in advance by the entity being tested. It also fails to account for the legal ownership of assets when the entity fails-a matter of bankruptcy isolation and creditor priority that is often unresolved in practice, especially when reserves are held in mixed accounts. Governance failures and centralized decision-making power-these issues go completely beyond the scope of wallet balance checks.

From a stablecoin perspective: A reserve disclosure can confirm the presence of assets at the reporting date, but cannot address future liquidity pressures, governance quality, or liabilities outside the reporting framework. Audit reports are different from audits: audit reports are inspections at specific points in time and are linked to specific dates; audits are more extensive and are conducted in accordance with accounting standards and can be extended to liabilities, governance and internal control. Not all reserve reports known as audit reports have the same level of rigour.

Liquidity, not quantity, is the key.

A simple example illustrates the gap: issuers hold 1 dollar of reserves for every dollar of currency in circulation, but if these reserves are illiquid assets, held in a single custodian, or under an encumbrance of equity, then there is still a significant risk, because quantity alone does not indicate whether reserves can be quickly realized under pressure to respond to redemption. Similarly, each instrument in the reserve pool liquidates at a different rate-short-term treasury bills, repurchase positions, and custodian bank cash behave differently under pressure-while delays in settlement or interruptions in bank relationships may just restrict access to funds when withdrawal demand increases.

Regulation is gradually closing some gaps. Under the relevant bill, regulated stablecoin issuers must now publish monthly reserve reports reviewed by registered public accounting firms, place reserves in restricted high-quality liquidity instruments such as U.S. dollars and short-term treasury bills, and disclose the composition of reserves by category. This requirement applies to regulated issuers under the law and does not retroactively cover all published exchange or stablecoin audit reports.

Common misunderstandings

Reports on proof of reserve audits clearly state: "Proof of reserve audits can verify asset holdings but do not consider liabilities, which may mislead users in their judgment of the solvency of an exchange." A released audit report with a green check mark will be interpreted by most users as "the platform is safe." In fact, based on the evidence in this article, its meaning is narrower: Certain wallets held a certain amount of assets on a certain date and were verified by the person performing the inspection.

What this page does not tell you

This page explains how proof of reserves works as a mechanism; it does not evaluate current audit reports from any particular exchange or stablecoin issuer because the source used here is a general description of the practice rather than an audit of a real-time report from an entity. The PCAOB and SEC statements cited above are indirect paraphrases and not directly derived from original PCAOB or SEC documents, so their exact original background and dates cannot be independently confirmed from the evidence gathered here. This page also cannot say how many exchanges or issuers currently comply with monthly reporting requirements, or how proof of reserves practices have evolved since the requirement came into effect, as no source tracks this number. Finally, the frequency and severity of the current audit reports on any single exchange-whether it is a real-time system, quarterly snapshots, or closer to a marketing page-vary by platform and may change at any time; when reviewing any particular exchange, readers should look for the date of the audit report, the company that performed the audit, and whether the liability is covered, rather than looking at the proof of the existence of reserves page itself as the answer.