Proof of Reserves
A cryptographic, audited demonstration that a custodian or exchange actually holds the assets it claims to custody for its clients.
Definition
Proof of Reserves (PoR) is the demonstration, through cryptography and external audit, that a custodian or exchange genuinely holds the assets it claims to custody on behalf of its clients. Its goal is to answer the question that brought down so many platforms: does the Bitcoin you say you hold actually exist and is it backed one to one?
Technically, a PoR combines two pieces. On the asset side, the custodian proves control of its on-chain addresses (for example, by signing a message from the wallets or publishing the addresses so anyone can verify the balance on the blockchain). On the liability side, a Merkle tree is typically used so that each client can check that their balance is included in the total without revealing anyone else's data. Cross-checking both sides verifies that reserves ≥ liabilities.
Proof of Reserves became a de facto standard after the collapses of crypto platforms — especially that of FTX in 2022 — which exposed operators that lent out or diverted client funds. It is important to understand its limits: a PoR proves assets at a single instant, but not necessarily hidden liabilities (off-chain debt) nor that the keys are not compromised; that is why full audits and the legal segregation of assets remain essential. In the institutional ecosystem, PoR is one of the guarantees that shareholders and regulators expect from any serious custodian.
In Context
After the FTX collapse in 2022, the major exchanges began publishing proof of reserves using Merkle trees so their clients could verify the funds.
Frequently Asked Questions
What is Proof of Reserves?
A cryptographic, audited demonstration that a custodian or exchange actually holds the assets it claims to custody for its clients, combining on-chain proof of the assets with verification of the liabilities (usually via a Merkle tree).
What does Proof of Reserves not prove?
It proves assets at a single point in time, but on its own it does not guarantee the absence of hidden off-chain liabilities nor that the private keys are not compromised. That is why a full audit and the legal segregation of assets are still necessary.
Read this term in Spanish: versión en español →