FTX collapsed in November 2022 and took roughly $8 billion in customer funds with it. Investigators found that deposits had been quietly routed to Alameda Research, the affiliated trading firm, while users had no idea their balances existed only on paper. That event, more than any regulatory push before it, forced the exchange industry to confront a simple and uncomfortable question: how does a customer actually know their money is there?
The answer the industry landed on is called Proof of Reserves. In its basic form, an exchange publishes a cryptographic snapshot of all customer balances, then uses a Merkle tree structure so that any individual user can verify their own account is included in the total without seeing anyone else's data. An independent auditor cross-checks the on-chain assets against those liabilities. If the numbers match or exceed 100%, the exchange is considered solvent, at least at the moment the snapshot was taken.
What the audit actually shows, and what it doesn't
Binance, Kraken, OKX and a dozen smaller platforms have published Proof of Reserves reports since late 2022. Kraken was actually an early mover here, running its own reserve audits years before FTX made the practice urgent. The reports give users something they never had before: a verifiable number tied to a specific block height, not just a press release.
But the methodology has real limits. A snapshot captures assets at one point in time. An exchange could borrow funds the night before an audit, pass the check, then return the borrowed assets the next morning. Critics call this "window dressing," and it's not hypothetical. The audit also typically covers only assets, not liabilities beyond customer deposits. If an exchange has large loans outstanding or off-balance-sheet obligations, a Proof of Reserves report won't show that. Mazars, one of the early firms to publish these reports for Binance, quietly withdrew from the crypto audit space in December 2022, citing concerns about how the public was interpreting the results.
The more rigorous version of the exercise is a full Proof of Liabilities audit conducted by a registered accounting firm under agreed-upon procedures. That's harder to fake and harder to misread. A handful of exchanges are moving in that direction, but it requires more disclosure than many platforms are comfortable with.
For ordinary users, the practical takeaway is narrower than it might seem. A clean Proof of Reserves report means an exchange wasn't obviously insolvent on a given date. It does not mean the exchange is well-managed, profitable, or free of legal risk. Treating it as a green light is probably the wrong read. Treating it as one data point among several, alongside regulated status, insurance coverage, and withdrawal history, is closer to how it should function.
This article is for informational purposes only and does not constitute financial or investment advice.
