Proof of Reserves Explained: Can You Trust a Crypto Exchange? (2026)

Proof of Reserves Explained: Can You Trust a Crypto Exchange? (2026)
// Échanger
⚡ TAUX EN DIRECT — consultez le taux sans quitter le site
→

Last updated: October 21, 2026

Proof of reserves (PoR) is a way for a crypto exchange to show it holds enough coins to cover customer balances — usually by publishing its wallet addresses and a Merkle-tree snapshot of customer balances that each user can check their own entry against. It's a useful signal but not a guarantee: a snapshot can hide liabilities, borrowed funds or what happens the day after. The only complete protection is holding your own keys and using exchanges only for the minutes a swap takes — e.g. BTC → XMR wallet to wallet.

  • 2022 FTX collapse made PoR popular
  • Assets — easy to prove
  • Liabilities — hard to prove
  • Minutes of custody in an instant swap

How proof of reserves works

  1. Assets: the exchange shows on-chain addresses it controls, often signing a message to prove ownership.
  2. Liabilities: it takes a snapshot of every customer balance and builds a Merkle tree — a cryptographic structure where each balance is a leaf.
  3. Self-check: you verify your own balance is included using your leaf and the published root.
  4. Comparison: if total assets ≥ total liabilities, the exchange is "fully reserved" at that moment.

What proof of reserves does and doesn't show

ShowsDoesn't show
The exchange controlled certain coins at the snapshot timeWhether those coins were borrowed just for the snapshot
Your balance was included in the liability totalOff-chain debts, loans or other liabilities
A ratio of assets to customer balancesWhat happened before or after the snapshot
A basic level of transparencySolvency of the company as a whole — that needs a full audit

The strongest versions combine frequent snapshots, independent attestation and zero-knowledge proofs that liabilities aren't understated. Even then, it's a check on a custodian, not a substitute for self-custody — see not your keys, not your coins.

Does proof of reserves matter for instant swaps?

Much less. A no-KYC instant exchange doesn't hold customer balances: you send a deposit and receive the other coin, usually within 5–30 minutes. Your exposure is the amount in a single swap, for a short time. What matters more is whether it actually pays what it quotes and doesn't freeze funds — which is why we track quote vs order honesty, real user reports on the no-KYC track record, and policy attributes on every exchange page. See custodial vs non-custodial swaps.

How to protect yourself (step by step)

  1. Keep long-term holdings in self-custody — a hardware wallet; see buying one privately.
  2. Use exchanges only for the trade, not as a bank.
  3. If you do keep funds on an exchange, check its PoR history and verify your own balance in each snapshot.
  4. Watch warning signs: delayed withdrawals, sudden limits, unusual promotions to deposit.
  5. Split large swaps and choose services with strong records — see large amounts.

Frequently asked questions

What is proof of reserves in crypto?

A method for an exchange to show it holds at least as many coins as its customers' balances, usually via published wallet addresses and a Merkle-tree snapshot of balances.

Does proof of reserves mean an exchange is safe?

No. It shows assets at a moment in time but can miss liabilities, borrowed funds and later changes. It's a useful signal, not a guarantee.

How do I verify my balance in a proof of reserves?

Exchanges that publish Merkle-tree snapshots provide a tool or file to check that your account's leaf is included in the published root.

Do instant swap services publish proof of reserves?

Rarely, because they don't hold customer balances. Their risk is limited to the short time a swap is in progress.

What is safer than proof of reserves?

Self-custody: holding your own keys means no exchange solvency can affect your funds.

Swap without leaving balances anywhere: BTC → XMR, USDT → BTC or the most trusted exchanges. No account, no ID, no logs.