Bitcoin Proof of Reserves Explained: How to Tell If Your Exchange Actually Has Your Coins

In November 2022, FTX collapsed. Customer balances that the exchange’s app cheerfully displayed turned out to be partially or entirely missing. Roughly 9 million customers learned that their account screen had been a polite fiction.

The Bitcoin community’s response was swift, and useful: they revived a long-known idea called proof of reserves. The phrase shows up on exchange websites all the time now — Coinbase, Kraken, Binance, Bitstamp all publish reports. But what does “proof of reserves” actually prove? And, more importantly, what doesn’t it?

This article is the plain-English answer for someone who keeps Bitcoin on an exchange and wants to evaluate whether that exchange is being honest. We will explain the cryptography, the limits of current proofs, and the practical step you should take regardless of what any report says.

The problem proof of reserves is trying to solve

An exchange like Coinbase or Kraken takes your dollars, sells you Bitcoin, and shows you a balance in their app. From that point forward, two important questions exist:

Liabilities: How much Bitcoin do they owe their customers in total?
Reserves: How much Bitcoin do they actually hold in wallets they control?

If reserves ≥ liabilities, the exchange is solvent. If liabilities exceed reserves, the exchange is insolvent — either by accident, fraud, or a hack — and somebody is going to get a haircut.

Pre-FTX, customers had to take the exchange’s word for both numbers. The exchange might publish an audited financial statement once a year, but the audit was over the company as a whole, not specifically over wallet-level Bitcoin holdings. FTX, famously, was passing audits while a separate trading desk was secretly using customer funds.

Proof of reserves is the attempt to make those two numbers verifiable to anyone, not just trusted to the auditor.

The two halves of a real proof of reserves

A proper proof of reserves has two distinct components, and you should expect both:

Half 1: Proof of liabilities (sometimes called proof of liabilities, or PoL)

The exchange publishes a cryptographic data structure called a Merkle tree that contains every customer balance, hashed in a way that lets each customer verify their own row was included — without revealing other customers’ balances. The total of all the leaves is the exchange’s claimed liability.

This is clever because it is auditable in two directions:

The exchange cannot quietly under-report total liabilities — the whole tree publicly hashes to one root.
Each customer can independently confirm their balance is in the tree by checking the “Merkle path” of their own row.

Half 2: Proof of reserves (the assets side)

The exchange publishes the Bitcoin addresses (or signs messages from those addresses) that hold customer Bitcoin. Anyone can look up those addresses on a block explorer and confirm the balance. Sum the addresses, and you have the total reserves.

If reserves ≥ liabilities (and the customer balances on the liabilities side actually represent everyone), the exchange is provably solvent at the moment of the snapshot.

What proof of reserves does not prove

This is the section that turns a good idea into a useful tool. There are at least four big things even a perfect proof of reserves does not address.

1. It is a snapshot, not a continuous guarantee.

Most exchanges publish PoR quarterly or monthly. Between snapshots, customer balances change constantly, the exchange could move funds, and reserves could fall. A solvent November 1 snapshot tells you nothing about December 15. It is like a weighing of the safe at noon — informative, but not the whole day.

2. The exchange could borrow Bitcoin temporarily for the snapshot.

This is the famous “snapshot loan” problem. An insolvent exchange could borrow Bitcoin, cover the proof window, and then return the Bitcoin afterward. There are statistical and on-chain analytics that try to detect this, but no airtight defense exists in current implementations. (More sophisticated PoR schemes use multiple unannounced snapshots to make this much harder.)

3. It only proves Bitcoin reserves, not USD or other assets.

An exchange could be Bitcoin-solvent and dollar-insolvent. If they hold $1B of customer USD deposits but only $200M in actual cash, they could pass a Bitcoin PoR and still go bankrupt. This is why some serious PoR programs now include all customer assets, not just Bitcoin.

4. It does not prove the exchange is not also using customer funds.

Even if reserves match liabilities at snapshot time, the exchange could be lending those reserves out, hypothecating them, or using them as collateral. Solvent today, vulnerable to one bad market move tomorrow. PoR + clear segregation rules + regulatory disclosure is the better combined picture.

How to actually read an exchange’s proof of reserves

Most major exchanges have a dedicated Proof of Reserves page. Here is the checklist for evaluating it:

Look for these green flags

A clear total of reserves in BTC and USD-equivalent.
A clear total of liabilities, with the assertion that reserves ≥ liabilities.
Published Bitcoin addresses or signed messages from them, so you can verify reserves yourself on a block explorer.
A Merkle root for the liabilities side, plus a tool that lets you check your own balance is included in the tree.
A reputable third-party auditor (e.g., Mazars, Armanino historically, then more recently regulated US auditors) reviewing the methodology, not just the math.
A frequent and recent snapshot date, ideally monthly or quarterly, with a multi-month history visible.

Look for these red flags

“Proof of reserves” published as a marketing one-pager with no underlying Merkle tree.
Reserves listed as a vague “100%+” without a verifiable on-chain total.
No way for individual customers to confirm their own balance is in the tree.
Snapshots more than 3–6 months old.
Auditor that has since distanced itself from crypto work (this happened to several exchanges’ prior auditors after FTX).
Liabilities side missing entirely — some exchanges publish addresses (the easy half) while skipping the customer-balance side (the hard half). This is common and a major caveat.

The exchanges with the strongest current PoR

As of 2026, a few exchanges have notably strong implementations — though none is perfect, and any of these can change. Treat the names below as starting points for your own check, not endorsements.

Kraken — multiple years of semi-annual PoR with both halves; customer-side verification tool included.
Coinbase — publishes monthly attestations and benefits from US public-company SEC filings, which add a layer not available to most overseas exchanges.
Bitstamp — quarterly PoR, generally well-regarded methodology.
Binance — publishes a PoR but has historically had questions raised about the auditor and the snapshot mechanics. Read carefully.

An exchange with no PoR at all in 2026 is a meaningful red flag. The bar has moved.

Why “not your keys, not your coins” still wins

Proof of reserves is a useful improvement over “trust us.” It is not a substitute for self-custody.

If you keep Bitcoin on an exchange, you are still trusting:

That the exchange’s PoR was honest at the snapshot moment.
That the exchange has not lost reserves between snapshots.
That the exchange will not freeze your account due to compliance, jurisdictional dispute, or operational failure.
That the exchange will not be hacked at the wallet level.
That you will not be locked out by a 2FA failure during a stressful market moment.

None of those are conspiracies; they are just the reality of using any custodian. PoR mitigates one of those risks (operational solvency) but leaves the others alone. The cleanest and final answer for serious holders is the same as it was in 2014: move it to self-custody, where the only person who can mess up your wallet is you. PoR makes the exchange step safer; self-custody removes the exchange step entirely.

Beginner FAQ

How do I verify my own balance is in the Merkle tree?

Most exchanges with real PoR provide a tool: log in, find the “Proof of Reserves” page, and click “Verify my balance.” The tool will show your account record ID, your balance, and a Merkle path of hashes that lets a third party (or your own machine) confirm that hashing your record up the path produces the published Merkle root. If your balance is in the tree, the exchange’s reported total liabilities included you.

Should I trust an exchange that publishes only the assets side?

It is better than nothing, but watch out: an exchange that publishes only addresses (without a Merkle-tree liabilities proof) has not actually proven solvency — it has only shown it has some Bitcoin. If you can’t see the liabilities side, you can’t check the ratio. This was a common style in 2023; in 2026 the better exchanges have moved past it.

What is “proof of solvency”?

Same family of ideas. Proof of solvency = proof of reserves + proof of liabilities. Some teams use the terms interchangeably; some use “solvency” to specifically mean “both sides published with a verifiable ratio.” If an exchange uses the phrase “proof of solvency,” check that they actually publish both halves.

Does the Bitcoin ETF face the same proof-of-reserves question?

No, in a useful way. Spot Bitcoin ETFs like IBIT and FBTC are required by their custodians (Coinbase Custody, Fidelity, etc.) to hold Bitcoin one-to-one with shares outstanding, and the SEC reviews their disclosures. They have a different verification regime — SEC-mandated — rather than a public Merkle tree. The tradeoff is that ETFs are SEC-trusted, not user-verifiable. Each model has its merits.

The shortest possible summary

Proof of reserves is the post-FTX attempt to make exchange solvency verifiable, not just “trust us.”
A real PoR has two halves: a Merkle tree of customer balances (liabilities) and on-chain proof of reserves (assets). Both are required.
Even a perfect PoR is a snapshot. It does not protect you between reports, against borrowed-snapshot games, or against non-Bitcoin-side insolvency.
Use an exchange’s PoR page as one signal among several; lack of a real PoR in 2026 is a red flag.
Self-custody is the ultimate answer. PoR makes the exchange step safer; self-custody removes the step.

If you are keeping more than a month of living expenses on an exchange, set aside an hour this week to verify their PoR and to start the process of moving the rest into a wallet you control.