How to spot a fake proof of reserves

After 2022, publishing a proof of reserves became a marketing requirement. Meeting the standard did not. Most of what is published under that name today would not detect the failure it exists to detect, and the gaps are visible from the page itself if you know what to look for.

Here are the four patterns, each with a real example from the 29 exchanges we researched for the exchange rating.

The commonest failure by a wide margin. A page shows wallet addresses holding large balances and invites you to verify them on-chain. You can, and it proves nothing, because it never states what the exchange owes customers.

An exchange with $2bn of visible assets and $4bn of customer liabilities passes this test. So does one that borrows coins the day before the snapshot. Kraken's own framing is the right one: anything that omits liabilities is not a full proof of reserves.

Crypto.com's live proof-of-reserves page still names Mazars as its attestor and still cites 7 December 2022 as the attestation date — an auditor that publicly withdrew from all crypto proof-of-reserves work that same month, more than three years ago.

The methodology underneath is decent: a Merkle tree over client balances, which does cover liabilities, and a self-verification tool. But who attests it today is unknown, the cadence is unstated, and the most recent dated snapshot on a primary page is from 2022. Check the date and the name, every time.

BitMart publishes no proof of reserves in any form. Several venues in this category have a security page, a transparency page, or a reassuring paragraph about how customer funds are handled — and no verifiable data anywhere in it.

The test is simple: can you point at a number that says what the exchange owes, on a date, checked by someone named? If not, there is no proof, regardless of the section heading.

A proof of reserves describes one moment. It says nothing about the days after. A venue that published once in 2023 and never again has told you about a day three years ago.

Cadence is what turns it into evidence: quarterly at Kraken, monthly at some venues. And the counter-example is worth naming, because it cuts against the usual hierarchy — MEXC, an offshore venue with no US access, publishes a monthly Merkle-tree proof covering liabilities, attested by a named third-party security firm. Reputation and evidence are not the same axis.

• Does it state total customer liabilities, not just assets?
• Is there a named attestor, and is the attestation dated within the last few months?
• Is there a stated cadence, and does the history show it was kept?
• Can you verify your own balance is inside the total, via a personal Merkle proof?
• Is the most recent snapshot linked from the exchange's own primary page, not from a blog post nobody has updated?

Assets prove an exchange has money. Only liabilities prove it has enough.

A real proof of reserves names what is owed, names who checked, states when, repeats on a schedule, and lets you find your own balance in it. Anything missing one of those is a publication rather than a proof — and the exchange's brand recognition is no substitute for any of them.