A reserve ratio over 100% only means that at the moment of the audit, the exchange's on-chain assets on certain blockchains were greater than the user deposits it admits to holding. It does not prove that all liabilities have been fully disclosed, nor does it prevent funds from being moved, frozen, or secretly borrowed on the other 364 days of the year. If you directly equate "reserve ratio >100%" with "bank-grade custody safety," you are stepping straight into the biggest misunderstanding in this field.
Step 1: Understand what a reserve report actually says
When you look at any Proof of Reserves (PoR) report an exchange releases each month, scroll to the bottom and read the auditor's statement. You need to find the following items – if any are missing, don't rush to call the exchange "safe":
- List of on-chain addresses for the covered assets: not just screenshots, but actual addresses that you can look up on a block explorer.
- Merkle root of user liabilities: this is needed to prove that your balance is included in the report.
- The auditor's wording on whether the total liability amount was verified: most auditing firms only verify that "your balance is part of this Merkle tree" but do not check whether the exchange deliberately understated its total liabilities.
Goal: You can clearly state which chains and which asset types are covered, and what level of verification the auditor performed on the total liability figure.
Step 2: Check the asset side – what exactly makes up that excess over 100%
The reserve ratio's denominator is "user deposits," and the numerator is "assets the exchange actually holds." If the numerator is stuffed with the exchange's own platform token, illiquid wrapped tokens, or de-pegged staking derivatives, then a ratio above 100% is just a number trick.
High-risk sign: the exchange's own native blockchain token accounts for more than 30% of reserve assets, and that token's on-chain depth cannot absorb even a few million dollars of selling without crashing.
The method is simple:
- Find the "Asset Breakdown" section in the report.
- Draw a simple table: classify BTC, ETH, and major stablecoins (USDT/USDC/DAI) as hard assets. Classify the exchange's platform token and any wrapped tokens tightly linked to the exchange's ecosystem as soft assets.
- Calculate what percentage soft assets make up of the total.
Common failure reason: Users only look at the overall reserve ratio and skip the asset breakdown. One exchange showed a BTC reserve ratio of 103% in its October 2024 report, but on-chain data revealed that the underlying wallet balance of its wrapped BTC did not match the published addresses. Security firm SlowMist later pointed out that those assets were "fake wrapped assets" (source: SlowMist public analysis, 2024-10-20). In that case, the total reserve ratio still easily topped 100%.
Goal: Hard assets (BTC + ETH + top stablecoins) should make up at least 85% of reserves. Below that, the "safety cushion" from the rest could collapse at any time.
Step 3: Check the liability side – you can't directly verify it, but you can cross-check
This is the weakest link in the entire chain of proof. There is no public tool that lets a retail user directly verify whether "the total liabilities the exchange dares to disclose match the total on-chain inflows to its deposit addresses."
The only thing you can do is watch whether the same exchange's asset and liability snapshots are consistent across different audit statements.
- Case A: the exchange publishes both on-chain wallet addresses and the liability leaf tree
Run your UID and the corresponding hash through an open-source verification page to confirm that your balance is indeed in the tree. This confirms your personal funds are included, but you still cannot know whether others are in the same boat.
- Case B: the exchange only publishes the final reserve ratio, with no on-chain addresses
Remove it from your "safe" list immediately. A reserve ratio without addresses is meaningless.
Risk warning: In late 2022, several exchanges issued PoR reports where liabilities only covered spot accounts, while contract wallet liabilities were deliberately hidden. If you keep a large amount of funds in futures accounts, savings accounts, or yield products, those positions may not be in the Merkle tree at all. If the platform suddenly halts withdrawals, the recovery priority for those funds will be extremely low – they may even be treated as unsecured claims, ranking at the very bottom of creditors.
Step 4: Look at the custody structure and legal entity, not just the audit rating
PoR reports are typically commissioned by a single legal entity (such as the exchange's main company registered in Seychelles or Singapore). But where your assets are physically stored – on which country's servers, and controlled by which trust or custodian – that information is not written into the PoR.
How to check:
- Open the exchange's Terms of Service and search for keywords like "Custodian," "Sub-custodian," "Segregated Account."
- If the terms say something like "the company has the right to store client assets in wallets of affiliated entities and is not liable for losses caused by the custodian's bankruptcy," that single sentence can completely undermine any sense of security from a 100% reserve ratio.
- If a named regulated custodian (such as Fireblocks, Copper, BitGo) is mentioned, go to that custodian's website and see if there is an official partnership announcement with the exchange.
Goal: You can find at least one piece of on-chain custody evidence independent of the exchange, or a legally segregated trust arrangement. If you can't, your funds are legally just a line on the exchange's balance sheet.
Remember: the reserve ratio is an accounting concept, but the right of asset recovery is a legal question. The portion of assets above 100% does not automatically appear in your account when you need your money.
Step 5: Understand your real role in the "reserve ratio" game
When you use platforms like Binance or OKX, your custody status depends on your account type:
- Regular spot user: assets go into a mixed pool. PoR covers your account balance, but there is a legal segregation gap.
- Users with on-chain sub-wallets or custody sub-accounts: some exchanges keep these assets separate and do not mix them with regular user liabilities. They may not appear in the main PoR Merkle tree, and you will need to request a separate proof.
- Users of futures, savings, or dual-currency investment products: most platforms' PoR explicitly states "derivative liabilities not included." That means even if the total reserve ratio is 110%, your futures margin may not be counted at all.
You must go to the exchange's official announcement center, find the "scope of this PoR" notice, and take a screenshot. This is far more meaningful than staring at the decimal places of the reserve ratio.
Common failure reasons
- Only looking at the big headline number: ignoring asset composition. If the platform token crashes, the reserve ratio can instantly fall below 100%.
- Thinking PoR is real-time monitoring: it is actually a snapshot taken once a month. A hacker attack or insider theft can empty wallets in two hours. By the time the next report comes out, it's too late.
- Not using self-verification tools: you miss checking your leaf node and never realize your own account balance was not included in the tree.
- Believing the reserve ratio is like deposit insurance: no government will reimburse you based on the reserve ratio when an exchange goes bankrupt. You can only go through the liquidation process.
FAQ
Q: Does a higher reserve ratio mean I can safely hold a large amount of assets on that exchange for the long term?
A: If the reserve ratio is very high (e.g., above 120%) and consists entirely of hard assets, and you can confirm that liabilities fully include futures and savings products, then the exchange is indeed more stable than its peers. However, it is still not recommended to keep all long-term holdings on any single exchange, because factors like audit frequency, legal entity migration, and sudden regulatory freezes are not reflected in the reserve ratio. For holdings in the seven-figure USD range that are not actively traded, it's best to split them into cold wallets.
Q: After publishing the PoR, if the platform moves the coins out of the reserve wallets, can I detect it?
A: Yes. Use tools like Arkham or Nansen to label the published on-chain addresses and set up notifications for large transfers. If a single outgoing transaction exceeds $5 million, it is usually pushed to public monitoring platforms within minutes. However, you need to save the address list in advance, because PoR reports often delete the old address list soon after publication.
Q: Could the auditor collude with the exchange?
A: There has never been a major audit firm that directly admitted collusion, but in late 2022, Mazars issued a PoR for Binance and then, within a week, suspended audit services for all crypto clients. The reason given was "concerns about public misunderstanding rather than endorsement of the audit results" (source: Mazars public statement, December 2022). This shows that auditors themselves are cautious about the scope of crypto asset audits. So the conclusion is simple: a Big Four audit stamp does not equal a full-spectrum safety endorsement.
Next verification method: choose the exchange you are using, find its latest PoR announcement, and go through the above steps one by one. This will take around 30 minutes. Cross-check the liability verification method on the auditor's website, and verify the top five reserve addresses on-chain. If the hard asset ratio looks abnormal or you cannot find the real address entry, immediately reduce your non-trading funds held on that platform, move them to a self-custody wallet, and wait for the next report to reassess.
