Proof of reserves is not an audit. It is a narrower check: an exchange or stablecoin issuer shows it controls a pile of coins on-chain, then uses a cryptographic structure called a Merkle tre
Proof of reserves is not an audit. It is a narrower check: an exchange or stablecoin issuer shows it controls a pile of coins on-chain, then uses a cryptographic structure called a Merkle tree to prove that pile covers what it owes customers, on one specific date. A financial audit examines the whole business — assets, debts, income, internal controls — under formal accounting standards, and nothing in a typical proof-of-reserves report reaches that far, according to The Network Firm.
The process has two sides. First the platform shows assets: wallet addresses it controls, or a signed statement that it held a given pile of coins on a given day, per Banxa. Then it handles the liabilities side. Every customer balance is hashed into a short digital fingerprint, and those fingerprints are paired and combined layer by layer until a large set of accounts condenses into one summary hash called the Merkle root, per Lightspark’s glossary entry. A customer can check that their own balance, say 0.05 BTC out of a stated 1 BTC total, was actually folded into that root — without seeing anyone else’s account data, per Lightspark. An independent accountant then compares the signed reserve total against that root to confirm the assets match the summed liabilities, per Lightspark and TechStory.
What this proves, in Banxa’s framing, is narrow: these coins existed, and this list of balances summed to that total, on that date. Everything the report does not say sits outside that sentence.
The first gap is that a reserves page usually shows only what a platform holds, not what it owes beyond customer deposits. Banxa illustrates this with a hypothetical: a page might show $100m of bitcoin in named wallets while customers are actually owed $150m — an insolvent business that has published only its good side. FTX customers saw normal balances on their screens, per Banxa, while billions had reportedly been lent on to its sister trading firm, Alameda Research, and the exchange filed for bankruptcy on 11 November 2022. No published wallet address would have revealed those loans.
The second gap is timing. A proof of reserves is a photograph of one date and one block, and TechStory and Lightspark both note that coins can be borrowed before the snapshot and returned afterward — a shortfall dressed up for the day of the picture and gone the day after.
The third gap is what the accountant actually signed. Most reserve reports are “agreed-upon procedures” engagements: the accountant runs exactly the checks the client asked for, on the stated date, and reports what came back, per Banxa and The Network Firm. Nobody examines internal controls, and nobody goes looking for undisclosed debts. A full audit, by contrast, is designed to give what The Network Firm calls “reasonable assurance” that the entire financial statements are free of material misstatement, following AICPA standards for private companies or PCAOB standards for public companies. Mazars had been producing crypto reserve reports for several large exchanges, and in December 2022, weeks after FTX collapsed, it paused that attestation work entirely, per Banxa — a signal, Banxa argues, that the accounting firm doing the work judged agreed-upon-procedures reports insufficient to stand behind. The SEC’s Office of Investor Education and Advocacy has separately warned investors that these reports should not be relied on as a complete picture of a company’s stability in the way audited financial statements are, according to a bulletin described in an August 2023 blog post by Silver Law Group.
Stablecoin issuers publish a version of the same check on a schedule rather than as a one-off. Circle has Deloitte sign a reserve attestation for USDC every month, and Tether puts one out for USDT every quarter, per Banxa. BitGo notes that the underlying question differs for a stablecoin — what backs the token is cash and short-term instruments rather than customer coins in custody — but the report is read the same way: a snapshot, with a defined scope, produced under an attestation rather than a full audit. In the United States, the GENIUS Act has begun to close part of that gap for regulated issuers, according to BitGo, mandating monthly reserve reports examined by a registered public accounting firm and restricting eligible reserve assets to instruments such as U.S. dollars and short-term Treasury bills, with detailed disclosure of reserve composition by category.
This page does not evaluate any specific exchange’s or stablecoin’s current proof-of-reserves report. A reader checking a particular platform needs to read that platform’s own dated report and see whether it discloses liabilities alongside assets, not just assets on their own — the evidence here does not establish which named platforms currently do that. Nor does the evidence support a figure for how many exchanges industry-wide publish liabilities versus assets-only reports; no industry-wide compliance rate can be stated. The $100m/$150m and 1 BTC/0.05 BTC figures used above are illustrative hypotheticals from Banxa and Lightspark, not reported numbers for any real exchange, and should be read that way. Cointelegraph’s discussion of zero-knowledge proof-of-solvency techniques is held here only as a partial summary, so nothing about how far that approach has moved from proposal into production can be confirmed on this page. Finally, this page does not tell a reader whether a specific platform’s attestation firm remains active in crypto work after Mazars’ December 2022 exit — that is a fact to check against the platform’s own current disclosures, not something the evidence generalizes.
Every fact above is attributed to one of these reports. Where they disagree, the article says so.
The post Proof of reserves vs a financial audit: what each one actually proves appeared first on TheCoinrise.com.
