Rob Behnke
November 15th, 2022
Demands for centralized crypto exchanges to adopt routine “Proof of Reserves” (PoR) programs have recently intensified. This is especially true in the wake of the November 2022 bankruptcy declaration by FTX who used customer funds for risky investments, leading to a liquidity crunch.
In the digital currency space, “Proof of Reserves” is a method that ensures that a given crypto exchange or project holds the reserves necessary to cover all customer deposits. By publishing both the total amount of cryptos held by the exchange and the total amount owed to customers, exchanges can prove that they have the reserves on hand to meet customer withdrawal requests.
Custodial companies that keep cryptocurrencies are encouraged to establish public-facing attestations of their reserves, which would then be paired with a “Proof of User Balances” (liabilities). This merger is described as a “Proof of Solvency.”
Reserves can be proven in two distinct ways. The first is through having independent third parties conduct audits. These assessments help guarantee that a project’s reserves match its assertions. We previously discussed how periodic PoR audits could help exchanges build trust and enhance security.
The second method for demonstrating reserves is through public addresses. By publicly publishing all addresses holding reserve currency, exchanges can show that their liquidity claims are factual. While audits provide more concrete evidence, anyone can utilize the public address option to verify the reserve status of a particular exchange or project.
For users, assessing an exchange’s PoR poses significant challenges. It is difficult for cryptocurrency exchanges to demonstrate to depositors that the cryptocurrency held on deposit corresponds to user balances. While it is relatively straightforward to demonstrate that the exchange controls some funds on its platform, they could always borrow these funds on a short-term basis. This is why point-in-time attestations have little significance. Moreover, exchanges may have concealed liabilities or have creditors claim priority over depositors, particularly if client funds are not legally segregated on the platform.
Liabilities are difficult to establish and typically necessitate a thorough examination by an auditor. To “cheat” a PoR assessment, for example, exchanges may omit certain obligations. For this reason, it is recommended that a reputable independent third-party auditor implement a full audit of the crypto exchange or project to ensure maximum security for depositors and traders.
PoR audits are a vital tool for ensuring the security of the digital assets of users as well as their trust and faith in the system at large. If you want to learn more about how blockchain organizations can secure their digital assets or how Halborn can help with your PoR audit, connect with our blockchain security experts at halborn@protonmail.com.