How to Evaluate Proof of Reserves in Cryptocurrency
How to Read PoR: Don't Just Look at the Reserve Ratio—Focus on Whether the Two Sides Match
The core problem that Proof of Reserves (PoR) aims to solve is:Can the assets claimed by an exchange actually cover the total liabilities of its users?
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
When evaluating PoR, the final focus should not be on the platform's advertised "130% reserve ratio" but on cross-checking two key components:the asset side (how many coins are in on-chain wallets)andthe liability side (the total balance of all users). If they match, the reserves are genuine; if not, there is a problem with the accounts.
1. Understanding the Basic Logic of PoR: Asset Side vs. Liability Side
A standard PoR audit essentially involves matching data from two ends:
| Verification Side | Description | How to Check |
|---|---|---|
| Asset Side | The actual amount of BTC, ETH, USDT, and other assets held in the platform's publicly disclosed on-chain wallet addresses | Query the address balance directly on a blockchain explorer |
| Liability Side | The sum of all users' asset balances, aggregated anonymously via a Merkle Tree | Users verify their inclusion in the tree using their personal UID |
Reserve Ratio Formula:Reserve Ratio = Platform On-Chain Wallet Assets ÷ Total Platform User Assets. If the result is ≥ 100%, it indicates that assets are sufficient to cover all user withdrawal demands.
However, it is important to note:A reserve ratio ≥ 100% only proves asset sufficiency, not that the platform has no hidden liabilities(such as undisclosed loans or external debts). This is why PoR cannot be fully equated with a "solvency certificate."
2. Practical Steps: How to Personally Verify an Exchange's PoR
The steps below are arranged from easiest to most difficult. Regular users can stop after the first two steps; technically proficient users can attempt the third.
Step 1: Check the Platform's PoR Report Page and Verify the Snapshot Timestamp
Log into your exchange account and find the "Proof of Reserves" or "储备金证明" entry (usually under the "Assets" or "Security" menu).
Confirm the snapshot timestamp: Prioritize reports from the last 3 months; older reports have significantly reduced reference value.
Confirm the covered assets: Check if it includes the major assets you hold or care about (BTC, ETH, USDT, etc.).
Confirm the auditor: Is the report issued by an independent third party (e.g., Hacken) or only a self-declaration by the platform?
Step 2: User Self-Check—Verify Your Assets Are Included in the Liability Side
Platforms typically offer two self-check methods:
Online verification tool: Enter your UID or account information on the PoR page; the system generates a verification code showing whether you are included in the Merkle tree.
Download proof file: Some platforms allow users to download a proof file containing their leaf hash, which can be saved offline for future reference.
Step 3 (Advanced): Independently Verify the Merkle Tree Using Open-Source Tools
If you have some technical background, you can:
Download the PoR verification source code from the platform's GitHub repository (e.g., OKX, MEXC, and other exchanges have open-sourced related tools).
Download the platform's published Merkle Root and your personal proof file, run the verification program locally, and check if the calculated root matches the published one.
OKX has a good track record in PoR transparency, supporting liability verification via zero-knowledge proofs (zk-STARKs) and open-sourcing verification tools in Go and Python. However, note that OKX's signature mechanism only proves that "the address was once controlled by OKX" without binding a timestamp, leading to a certain timeliness flaw.
3. Key Risk Points to Note
PoR is a snapshot, not real-time monitoring: The audit only covers a specific point in time and cannot guarantee consistency before and after. Some platforms have upgraded from quarterly to monthly snapshots, but true real-time reserve verification is still far off.
Looking only at assets without liabilities is meaningless: A platform might show massive on-chain assets, but if the user liability side is incomplete, the reserve ratio number is worthless. Both sides must be cross-checked simultaneously.
The quality of reserve assets matters more than quantity: If reserves consist mainly of the platform's own issued tokens or highly volatile assets, even a reserve ratio above 100% could rapidly depreciate during extreme market conditions.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
4. Result Verification Method
After completing the verification, confirm the following three points for a valid verification:
Asset side check: The address balance found on the blockchain explorer matches the amount reported by the platform.
Liability side check: The user self-check page shows "Verification passed" or "Your account has been included."
Timestamp confirmation: The above data were all collected at the same snapshot time point.
If all three conditions are met, it indicates that at that snapshot moment, the exchange's assets were sufficient to cover user liabilities. However, understand that this only represents the reserve status at a specific time, not a long-term guarantee of the platform's ongoing solvency.
