An Exchange Publishes Proof of Reserves: What It Proves and What It Doesn’t

After a string of exchange and lender collapses made “not your keys, not your coins” a mainstream phrase rather than a niche one, proof-of-reserves attestations became a common trust signal. The problem is that most published versions prove less than the name implies.

The two halves that matter

A meaningful solvency proof requires two things. Proof of assets demonstrates that an exchange controls the bitcoin addresses it claims to, typically via a cryptographic signature from those addresses. Proof of liabilities demonstrates what the exchange owes its customers in total, usually via a Merkle-tree construction that lets each individual customer verify their own balance is included in the total, without exposing anyone else’s balance.

Solvency is the comparison of the two: do verified assets meet or exceed verified liabilities? An attestation that shows only assets — “we control these wallets containing this much bitcoin” — proves that the exchange controls some coins. It does not prove those coins are sufficient to cover what is actually owed to customers, because the liabilities side is simply absent.

Why the incomplete version is so common

Publishing verified liabilities is technically more involved and can be commercially uncomfortable — it requires committing to an exact, auditable total owed to customers at a point in time, in a form third parties can check. An assets-only attestation is easier to produce, sounds similarly reassuring in a press release, and is far less useful as actual evidence.

What to look for in practice

A credible proof-of-reserves disclosure should let you verify: (1) that on-chain signatures actually correspond to claimed exchange-controlled addresses, ideally corroborated by an independent auditor; (2) a total-liabilities figure, verified via Merkle proof or an equivalent construction, ideally letting individual customers confirm their own balance is included; and (3) that the comparison of the two shows assets meeting or exceeding liabilities, not merely “significant reserves held.”

Absent the liabilities half, treat an assets-only proof of reserves as a partial disclosure — genuine information, but not the solvency evidence its framing usually implies.