A crypto platform can show a large wallet balance and still leave an important question unanswered: how much does it owe? Proof of reserves, usually shortened to PoR, becomes useful when evidence about assets is connected to the customer balances those assets are supposed to cover.
That connection has limits. A report can help verify specified holdings at a stated time without establishing that every liability has been disclosed, that the assets are free of competing claims, or that withdrawals will always work. Reading a PoR report means understanding the scope behind the percentage.
Start with the asset and the claim
For a custodial crypto platform, a PoR exercise commonly examines reserve assets and compares them with a defined set of customer liabilities. Those liabilities are amounts owed to customers. The balance in your exchange account is a claim recorded in the platform’s ledger; it is different from coins controlled by your own wallet keys. KTX’s guide to crypto exchanges explains that custody relationship.
On the asset side, blockchain records can establish balances at specified addresses and block heights. Signed messages or other verification procedures can provide evidence of control. An address label alone is weaker evidence: someone can publish an address without controlling it.
Control still does not establish unrestricted ownership. Coins might be borrowed, pledged or subject to another party’s claim. The PCAOB’s investor advisory on PoR reports highlights limitations involving liabilities, customer rights and borrowed assets. These questions need evidence beyond a wallet balance.
What a Merkle proof actually verifies
Many PoR systems use a Merkle tree to let customers check inclusion without publishing everyone’s account records. Account data is encoded into cryptographic hashes, which are combined into a single published value called the root. A customer receives a verification path connecting their record to that root.
A successful check establishes that the supplied record belongs to the committed dataset. Check the asset, balance, account identifier and snapshot time as well: a valid path for the wrong balance is not a satisfactory account verification.
Inclusion is narrower than completeness. Your record being present does not establish that every other customer was included, or that corporate loans and other obligations were reported. A plain Merkle tree also does not, by itself, establish a correct total. Schemes that verify sums or enforce balance constraints add protections, but still need trustworthy inputs and a clearly defined scope.
How a 102% reserve ratio can leave a shortfall
Consider a hypothetical platform reporting 102 BTC in reserve and 100 BTC owed to customers. Both quantities refer to the same asset and the same measurement time. The reported reserve ratio is 102 ÷ 100 × 100 = 102%.
| Hypothetical finding | Calculation or implication | What changes? |
|---|---|---|
| 102 BTC held; 100 BTC of customer balances reported | 102 ÷ 100 = 102% | The stated assets exceed the stated customer balances. |
| A further 10 BTC of customer balances was omitted | 102 ÷ 110 ≈ 92.7% | The same assets no longer cover all customer balances. |
| In a separate scenario, the platform borrowed 10 BTC from a lender; those coins are included in the original 102 BTC reserve total. | The customer-only ratio can still display 102%. | The platform also owes the lender repayment of 10 BTC. |
The last row is a separate scenario, not an additional adjustment to the second row. Borrowing changes the wider financial position even when the customer-only percentage stays the same. A complete assessment needs the associated debt and its terms.
Asset matching matters too. A dollar valuation of a volatile token does not give the same protection as holding the asset customers can withdraw. Check whether coverage is measured separately for each asset, which prices are used, and whether restricted or hard-to-sell holdings are counted.
Read the report before relying on its label
“Proof of reserves” describes a range of arrangements. A platform’s dashboard, an independent accountant’s agreed-upon procedures report and an assurance engagement can involve different work. The presence of an accounting firm’s name does not make them interchangeable.
Under IAASB’s ISRS 4400 standard, an agreed-upon procedures engagement reports the procedures performed and factual findings; it does not express an audit opinion or an assurance conclusion. Other engagements can provide assurance on specified subject matter. Read the actual standard, conclusion and exclusions.
The SEC’s investor bulletin also distinguishes PoR reports from financial statement audits. Neither a reserve check nor a financial statement audit guarantees future safety.
Look for the named legal entity, covered products and assets, measurement time, liability methodology, treatment of restricted assets, and publication frequency. A report for one subsidiary or product should not be assumed to cover the whole group. Repeated checks improve visibility, but activity between snapshots remains important.
What this means for holding and trading crypto
Reserves, liquidity and legal rights should be assessed separately. Assets can exist while withdrawals face operational delays or sale constraints. KTX’s liquidity guide explains why a stated asset value need not equal the amount available from an immediate sale.
A stablecoin adds another layer. A platform holding tokens and a stablecoin issuer holding backing assets are different relationships. Exchange-level PoR does not automatically verify the issuer’s reserves or establish your direct redemption rights. See KTX’s explanation of stablecoin reserves, redemption and depegging.
When using KTX, review the terms for the account and product you intend to use alongside any available custody disclosures. Decide how much you need for trading, how you would withdraw it, and what risks you accept. A reserve percentage is one input to that decision.
Frequently asked questions
Is proof of reserves the same as proof of stake?
No. Proof of stake is a blockchain consensus mechanism. Proof of reserves concerns evidence about assets and, where included, the balances or obligations they cover.
Should verifying a Merkle proof require my seed phrase?
No. Checking a record against a published root does not require your wallet seed phrase, private key or a token-spending approval. Use the platform’s official verification instructions and keep account information private.
Why might my current balance differ from the report?
Deposits, withdrawals and trades after the measurement time can explain a difference. Compare the correct snapshot and account scope first. An unexplained mismatch should be raised with the provider.
Are lending or earn-product balances automatically included?
No. Check the products and legal entities named in the report. A spot-account reserve exercise may exclude lending arrangements, collateral or balances transferred to another service.
Can zero-knowledge proofs remove every PoR limitation?
They can verify specified mathematical conditions while concealing underlying data. They cannot, by themselves, establish that all real-world obligations were submitted or determine customers’ legal rights to assets.
This article is for educational purposes and does not constitute investment advice. Custody arrangements, disclosures and access to assets can change.