Key Takeaways
Proof of Reserves (PoR) is a cryptographic auditing method that allows crypto exchanges and custodians to publicly demonstrate they hold user funds in full.
PoR audits use Merkle trees to structure account balance data, enabling any user to independently verify that their balance is included in the audit without exposing other users' data.
Third-party auditing firms verify the process, while exchanges can use zero-knowledge proofs to improve privacy during verification, a method Binance has adopted.
PoR audits represent a point-in-time snapshot and have limitations, including reliance on auditor independence and the inability to verify off-chain liabilities.
Binance users can independently verify their account inclusion on the official Proof of Reserves page.
Introduction
Blockchain-enabled cryptographic proofs allow crypto exchanges to demonstrate the transparency of their financial holdings. Proof of Reserves (PoR) builds on this by creating a standardized framework for auditing crypto custodians, enabling users and the public to verify that deposited funds are actually held.
What Is Proof of Reserves (PoR)?
A PoR audit aims to ensure that custodial platforms are holding 100% or more of their clients' funds. In the Web3 space, crypto exchanges and other custodial businesses use PoR audits to prove to depositors and the public that their reserves match user balances. These audits are typically conducted by independent third parties to reduce the risk of reserve data being misrepresented.
PoR serves several purposes. It allows users to verify that their balances on a cryptocurrency exchange have full asset backing. It also encourages businesses to meet transparency standards, making it more difficult to conceal questionable or irregular financial activity.
For users, PoR can reduce security risks associated with depositing assets on centralized platforms. For exchanges, regular audits can help maintain user trust and demonstrate that deposited funds have not been used for lending, investment, or other activities without user consent. This distinguishes responsible custodians from institutions operating on a fractional reserve model.
PoR can make it significantly more difficult for exchanges to conceal misuse of customer assets, such as using deposits to fund third-party investments or internal operations. When audits are conducted regularly and published publicly, any discrepancy between reported reserves and verified on-chain holdings becomes harder to hide. This transparency mechanism encourages responsible custody practices.
How Does PoR Verification Work?
In a PoR audit, the auditor verifies the inclusion of each account balance using cryptography. The process follows several key steps.
First, the auditor takes a snapshot of all account balances at a specific point in time. This data is then converted into a Merkle tree, a data structure that organizes large volumes of information for efficient and verifiable processing.
User balance data is hashed into a "leaf." Groups of leaves are hashed together to form a "branch," and groups of branches are hashed to form the "root" of the tree. This root hash represents a cryptographic summary of all account balances. A user can verify that their balance is included in the Merkle root without being able to see any other user's data.
Next, the auditor verifies the exchange's ownership of the wallet addresses holding the reserves. On Binance, auditors can use three methods to confirm address ownership:
Cryptographic message signing: The auditor provides the exchange with a unique message to cryptographically sign using its associated private key(s). This proves that the exchange controls the wallets in question.
Instructed movement of funds: The exchange is asked to move a specified amount from a public address at a specific time. The transaction hash is then verified on the relevant blockchain to confirm the exchange controls that address.
Blockchain explorer search: The auditor can cross-reference ETH and BSC addresses on explorers such as Etherscan and BscScan to confirm that the addresses are tagged as belonging to the exchange.
If the verified on-chain balances match or exceed the total of all user balances in the Merkle tree, the exchange has demonstrated a full Proof of Reserves.
Evolution of Proof of Reserves
Since the collapse of FTX in 2022, PoR has become an industry-wide transparency standard. Major exchanges including Binance now publish regular PoR reports, typically monthly or quarterly, with audits conducted by specialist firms such as Hacken and CertiK.
A significant development has been the adoption of zero-knowledge proofs (ZKPs) alongside Merkle-tree audits. ZKPs allow an exchange to prove that a user's balance is included in the total liabilities without revealing any individual user's data to other parties. By late 2025, Binance had implemented ZKP-based PoR verification across 45 asset categories, with over $162 billion in user assets verified through this method.
Some platforms have also moved toward continuous or real-time on-chain reserve monitoring, enabling users to verify reserve status at any time rather than waiting for the next scheduled audit cycle.
PoR: Limitations and Potential Improvements
A crypto exchange's balances change continuously as users deposit and withdraw assets. Because a PoR audit verifies reserve correctness only at the time of the snapshot, it may not capture issues that arise between audit cycles. A custodian could, in theory, temporarily rebalance reserves before an audit and revert afterward, though regular, independently scheduled audits reduce this risk.
PoR audits also depend on the competence and independence of the third-party auditor. Results may vary if auditors have conflicts of interest or limited access to the exchange's full financial picture. Standard PoR does not verify off-chain liabilities, meaning an exchange could hold full asset reserves while carrying undisclosed debts that could affect its solvency.
Critics have also noted that publishing wallet addresses during a PoR audit could expose an exchange's holdings to surveillance or targeted attacks, which some argue creates a security trade-off. This concern is part of why ZKP-based approaches, which can confirm reserve adequacy without fully disclosing wallet structures, are gaining traction.
To improve PoR reliability, exchanges can shorten audit intervals, publish audits on a fixed and unpredictable schedule, and engage reputable third-party firms with no financial interest in the exchange or affiliated entities.
Verifying That Your Account Has Been Audited
Binance users can independently verify that their account balance was included in the most recent PoR audit. To do so:
Log in to your Binance account. Bring your cursor to the wallet menu in the top right corner and select the "Verification" tab.
You will see all recent audits in which your account balance was verified through the PoR process.
Select a specific audit to see more details. You can also download the Merkle tree data from this screen.
Scroll down to review your individual holdings and details about Binance's wallet addresses. For full audit reports and further information, visit the official Proof of Reserves page.
FAQ
What is proof of reserves in crypto?
Proof of Reserves (PoR) is a cryptographic auditing method used by crypto exchanges and custodians to prove that their on-chain holdings equal or exceed the total of all user balances. The process typically uses a Merkle tree to organize account data, allowing any user to verify that their balance is included in the audit without seeing other users' information.
How does proof of reserves work?
An independent auditor takes a snapshot of all account balances and converts the data into a Merkle tree. The root of this tree represents a cryptographic summary of all user balances. The auditor then verifies that the exchange controls on-chain wallets containing at least the equivalent amount of assets. Users can verify their own balance is part of the Merkle tree using their account data and the published root hash.
Is proof of reserves reliable?
PoR provides meaningful transparency but has limitations. It is a point-in-time snapshot and does not capture changes between audit cycles. It also does not verify off-chain liabilities. The reliability of a PoR report depends on the independence and competence of the auditing firm. Exchanges that conduct frequent, independently scheduled audits and use privacy-preserving methods such as zero-knowledge proofs generally offer stronger assurances.
How do I verify proof of reserves on Binance?
Log in to your Binance account, navigate to the wallet menu, and select the "Verification" tab. You will see a list of recent PoR audits in which your balance was included. You can select any audit to view details or download the Merkle tree data. Full reports are also available on the Binance Proof of Reserves page.
Closing Thoughts
Proof of Reserves gives users a practical tool for verifying that a crypto custodian holds the assets it claims to hold. By combining cryptographic techniques like Merkle trees and zero-knowledge proofs with independent third-party auditing, PoR can provide meaningful transparency in an industry where user trust depends heavily on the reliability of centralized platforms. While PoR has its limitations and does not guarantee solvency on its own, regular audits published openly remain one of the clearest signals of responsible exchange management.
Further Reading
Disclaimer: This content is presented to you on an "as is" basis for general information and educational purposes only, without representation or warranty of any kind. It should not be construed as financial, legal, or other professional advice, nor is it intended to recommend the purchase of any specific product or service. You should seek your own advice from appropriate professional advisors. Where the content is contributed by a third-party contributor, please note that those views expressed belong to the third-party contributor, and do not necessarily reflect those of Binance Academy. Digital asset prices can be volatile. The value of your investment may go down or up and you may not get back the amount invested. You are solely responsible for your investment decisions and Binance Academy is not liable for any losses you may incur. For more information, see our Terms of Use, Risk Warning and Binance Academy Terms.