Exchanges started publishing proof of reserves reports after FTX collapsed. The logic was sound: show players the crypto is there, restore trust. As of June 2026, CoinMarketCap tracked roughly $192.6 billion in exchange proof-of-reserves across the industry, with USDT the single largest asset at about $57.6 billion and Bitcoin close behind at roughly $55.5 billion. Those are real numbers. What they prove is narrower than most people assume.
What a Proof of Reserves Report Actually Is
A proof of reserves (PoR) audit is a cryptographic snapshot. An auditor, or the platform itself, takes a picture of on-chain wallet balances at a specific moment and uses a Merkle tree to bundle every user balance into a single cryptographic hash. Kraken, for example, issues each user a personalized Merkle proof so they can confirm their balance was included without exposing anyone else's data. The math is real. The cryptography is sound.
The snapshot proves one thing: at that moment, the platform held at least as much on-chain crypto as it claimed users were owed in on-chain crypto.
That sentence has three important qualifiers in it. Read them again.
What It Does Not Prove
Here is where most coverage stops short. A PoR has three structural gaps that matter to anyone deciding where to park funds.
It is a point-in-time snapshot, not a continuous picture. An exchange could borrow funds in the hours before the audit window opens, pass the snapshot, and return the funds afterward (Crypto Proof of Reserves: What It Is and Why It Matters L...). The report shows healthy reserves either way. This is not speculation. It is a known limitation built into the format.
It only captures on-chain assets. Fiat holdings, off-chain debts, bank balances, undisclosed liabilities: none of these appear on the blockchain, so none of them appear in a PoR report (What is proof of reserves? How exchanges prove they hold...). A platform could hold $1 billion in Bitcoin on-chain and owe $1.5 billion in off-chain obligations. The PoR would look fine.
It is not a solvency audit. The SEC's Office of Investor Education and Advocacy put it plainly: proof of reserves reports "are not equivalent to financial statement audits and lack important investor protections provided by financial statement audits." A full audit under AICPA or PCAOB guidelines examines liabilities, off-chain positions, and the full balance sheet (Investors in the Crypto Asset Markets Should Exercise Cau...). A PoR does not. Full financial audits remain the standard for assessing whether a platform is actually solvent, not just temporarily liquid.
The Honest Version of What It Tells You
PoR is not useless. It tells you the platform has not emptied the wallets. That matters more than nothing. If a PoR report comes back showing reserves significantly below user balances, that is a red flag with teeth. The cryptography works. Merkle proofs are verifiable.
But "they have the crypto right now" and "they will have the crypto when you need it" are not the same sentence.
The analogy: imagine a business shows you its cash register at noon on a Tuesday. The register is full. That does not tell you about the rent payment due Friday, the supplier invoice that is 90 days overdue, or the line of credit the owner took out against future revenue. The register snapshot is real data. It is just incomplete data.
This is the same literacy gap worth understanding with provably fair systems: the cryptographic proof is genuine, but it answers a specific question, not every question. And it is the same principle behind RTP certificates, where a third-party stamp verifies one metric while leaving others unverified.
What to Actually Look For
If you are evaluating a platform based on its transparency disclosures, here is a more useful checklist than "do they have a PoR."
- Frequency. Quarterly disclosures, as Kraken commits to, are more useful than a one-time report published right after a crisis.
- Third-party attestation. A self-published PoR is weaker than one attested by an independent auditor with a named firm and a dated report.
- Liability disclosure alongside reserves. The rare platform that publishes both reserves and known liabilities is giving you something closer to a real picture.
- Audit scope. Ask whether fiat holdings and off-chain positions are included. If they are not mentioned, they are probably not covered.
- Merkle proof availability. Can you actually verify your own balance inclusion? If the methodology is opaque, the report is weaker.
For casino platforms specifically, the relevant transparency question is slightly different from an exchange's. The question is not just "do they hold customer funds" but "do the game mechanics work as published." That is where provably fair verification and third-party RTP audits do the relevant work, because they address the specific way a casino can misrepresent its product.
If the cryptographic side of how platforms handle deposits is still unclear, the mechanics behind crypto deposit confirmations are worth understanding before you draw conclusions from any on-chain snapshot.
The Bottom Line
Proof of reserves is a data point, not a clean bill of health. It answers "did they have the on-chain assets at this moment." It does not answer whether liabilities are under control, whether fiat positions are covered, or whether the picture looked the same last week.
A platform publishing a PoR is doing something. A platform publishing a quarterly, third-party-attested PoR alongside liability data is doing meaningfully more. Neither is a full audit. Know the difference before you treat either as a guarantee.
