Connect with us
DAPA Banner

Crypto World

Proof of Reserves Won’t Guarantee Trust in Crypto Exchanges

Published

on

Crypto Breaking News

Proof-of-reserves (PoR) is increasingly cited as a transparency tool in crypto markets, but it remains a partial signal rather than a guarantee. At its core, PoR is a public demonstration that a custodian holds the assets it claims to hold for users, typically verified through cryptographic methods and on-chain transparency. When exchanges publish PoR reports, they aim to show verifiable asset custody at a specific moment in time. Yet critics note that a snapshot cannot fully capture a platform’s solvency, liquidity, or governance controls—factors that matter when withdrawals spike or markets turn volatile.

As exchanges continue to publish PoR documentation, the limits of the methodology are becoming clearer. The industry has observed that PoR reports can provide comfort about asset custody but do not inherently prove that a platform can meet all of its obligations. The conversation intensified after past crises in the sector, prompting regulators and standard-setters to stress the need for broader disclosures and more robust assurance frameworks. A recent data point cited by a major exchange indicated that user asset balances publicly verified through PoR had reached substantial levels by the end of 2025, underscoring the growing appetite for public verifiability in a sector that has faced high-profile losses and liquidity strains.

For readers seeking a deeper dive, PoR is frequently discussed alongside audits, attestations, and other verification approaches. These discussions reflect a broader market push toward greater transparency, while also highlighting the ongoing debate over what PoR can and cannot guarantee. The ongoing evolution of PoR practice—how liabilities are captured, how encumbrances are disclosed, and how verification processes are governed—will shape how investors and users assess risk in the months ahead. See the broader explainer on what PoR reports cover and how they differ from traditional audits for additional context.

Did you know? On Dec. 31, 2025, Binance’s CEO wrote that the platform’s user asset balances publicly verified through proof-of-reserves had reached $162.8 billion.

Advertisement

What PoR proves and how it is usually done

In practice, PoR involves two checks: assets and, ideally, liabilities.

On the asset side, exchanges demonstrate control over certain wallets by publishing addresses or signing messages, which allows outsiders to verify that the platform possesses the claimed assets. For liabilities, many operators create a snapshot of user balances and commit it to a Merkle tree (often a Merkle-sum tree). Each user can confirm that their balance is included without exposing everyone’s data. When implemented rigorously, PoR aims to prove that on-chain assets cover customer balances at a specific moment. Binance, for example, has offered a verification page where individual users can confirm their inclusion in the PoR snapshot through cryptographic proofs based on a Merkle tree.

How an exchange can “pass PoR” and still be risky

PoR can improve transparency, but it shouldn’t be relied on as the sole measure of a company’s financial health.

A straightforward asset snapshot does not reveal whether a platform has sufficient liabilities to meet all obligations, especially under stress. Even if on-chain wallets appear robust, a full view of liabilities may be incomplete or narrowly defined—excluding loans, derivatives exposure, legal claims, or off-chain payables. That means a platform can show funds exist on its books while still facing liquidity or solvency challenges when customers seek to withdraw en masse.

Advertisement

Another limitation: a single attestation captures only a moment in time. It does not reveal the balance sheet trajectory before or after the report. In theory, assets could be temporarily borrowed to improve the snapshot and then moved back afterward, masking real risk. Complex encumbrances—assets pledged as collateral, lent out, or otherwise tied up—often do not appear in standard PoR disclosures, leaving users with an incomplete picture of what remains available during a run. Furthermore, liquidity risk and asset valuation can be misleading; simply holding assets is not the same as being able to liquidate them quickly and at scale in stressed conditions.

As a result, many observers argue that PoR should be complemented by broader disclosures and more explicit risk reporting. This includes clearer information about liquidity profiles, the concentration of reserves, and the degree to which assets are encumbered or held in restricted or less liquid markets. A growing body of work points to the need for better disclosure around how assets would be valued in a crisis and how quickly they could be realized in practice.

PoR isn’t the same as an audit

A lot of the trust problem comes from a mismatch in expectations.

Many users treat PoR as a safety certificate, but in truth, many PoR engagements align more closely with agreed-upon procedures (AUPs). In AUP engagements, practitioners perform specific checks and report what was found without delivering an audit-style assurance opinion about the company’s overall health. Audits or reviews are conducted within formal frameworks designed to provide an assurance conclusion, whereas AUPs are narrower in scope and leave interpretation to the reader.

Advertisement

Regulators have underscored this gap. The Public Company Accounting Oversight Board has warned that PoR reports are inherently limited and should not be treated as proof that an exchange holds sufficient assets to meet liabilities, given the lack of consistency in how PoR work is performed and described. This scrutiny intensified after 2022, when the industry reevaluated reporting practices following high-profile events. In that period, some auditing firms paused PoR work for crypto clients amid concerns about how such reports might be understood by the public.

What’s a practical trust stack, then?

PoR can be a starting point, but real trust comes from pairing transparency with proof of solvency, strong governance and clear operational controls.

The path forward involves proving solvency, not just assets. Merkle-based liability proofs, together with newer zero-knowledge approaches, aim to verify that liabilities are covered without exposing individual balances. Beyond transparency, it becomes essential to demonstrate robust governance and operational controls—key elements such as private-key management, controlled access permissions, change management, incident response, segregation of duties, and custody workflows. Institutional due diligence increasingly leans on SOC-style reporting and related frameworks that measure controls over time, not just a single balance snapshot. Clarity around liquidity and encumbrances is crucial: solvency on paper must be matched by the ability to convert reserves into liquid assets quickly if needed.

Ultimately, credible oversight hinges on governance and disclosure. Clear custody frameworks, explicit conflict management, and consistent reporting—particularly for products that add obligations such as yield strategies, margin, or lending—are essential to align user expectations with actual risk. In this sense, PoR should be viewed as one piece of a broader governance puzzle, not the sole marker of trust.

Advertisement

PoR helps, but it can’t replace accountability

PoR is better than nothing, but it remains a narrow, point-in-time check (even though it’s often marketed like a safety certificate).

When evaluating PoR reports, readers should consider several guardrails. Are liabilities included, or is the report assets-only? What is in scope—do the notes include margin accounts, yield products, loans, or off-chain obligations? Is the report a single snapshot or an ongoing process? Are reserves unencumbered, or are some assets pledged or tied up? And what exactly does the engagement cover—are we looking at a full audit-like assurance or a limited-scope procedure?

  1. Are liabilities included, or is it assets only? Assets-only reporting cannot demonstrate solvency.

  2. What is in scope? Are margin, yield products, loans or offchain obligations excluded?

  3. Is it reporting a snapshot or ongoing? A single date can be dressed up. Consistency matters.

  4. Are reserves unencumbered? “Held” is not the same as “available during stress.”

  5. What kind of engagement is it? Many PoR reports are limited in scope and should not be read like an audit opinion.

What to watch next

  • Developments in Liabilities Coverage: new methods to quantify and disclose complete liabilities alongside assets.
  • Regulatory Guidance: evolving standards from accounting and auditing bodies on PoR-like attestations and related disclosures.
  • Ongoing Attestations: whether exchanges move toward continuous or regular, time-bound attestations beyond a single snapshot.
  • Governance and Custody: progress in SOC-style reporting and explicit custody practices across major platforms.

Sources & verification

  • What is proof-of-reserves? Audits and how they work (Cointelegraph explainer).
  • Proof-of-reserves, audits and how they work (Cointelegraph explainer).
  • Binance community blog on PoR verification and user proofs: https://www.binance.com/en/blog/community/7001232677846823071
  • ISRS 4400 – Agreed-Upon Procedures (IRBA doc): https://www.irba.co.za/upload/ISRS-4400-Revised-Agreed-Upon-Procedures.pdf
  • PCAOB investor advisory on caution with third-party verification PoR reports: https://pcaobus.org/news-events/news-releases/news-release-detail/investor-advisory-exercise-caution-with-third-party-verification-proof-of-reserve-reports
  • Mazars pauses work for crypto clients (Reuters): https://www.reuters.com/technology/auditing-firm-mazars-pauses-work-binance-other-crypto-clients-coindesk-2022-12-16

Market context

Across the crypto sector, PoR reporting is increasingly weighed against broader market conditions, including liquidity dynamics and evolving regulatory expectations. As more exchanges publish PoR data, the market is cautiously evaluating how these attestations fit within a bigger risk framework that includes governance, custody controls, and ongoing disclosures. The balance between transparency and operational risk remains a focal point for investors, users, and potential counterparties seeking to understand the resilience of platforms in volatile markets.

Why it matters

Proof-of-reserves has entered crypto discourse as a concrete mechanism for visibility into asset custody. For users, it offers a tangible way to confirm that a platform actually holds the assets it claims. However, as discussions mature, it’s clear that PoR alone cannot reveal the full risk profile of an exchange, especially under stress. The value of PoR increases when paired with verifiable liabilities, clear encumbrance disclosures, and governance-driven transparency. In short, PoR is a useful start, but sustained trust requires a broader, multi-faceted approach that includes robust internal controls, ongoing disclosures, and independent assurance beyond a single balance snapshot.

Institutions and regulators alike stress that PoR should be part of a comprehensive trust stack rather than a stand-alone credential. As the industry evolves, market participants will likely demand more standardized methodologies, consistent reporting formats, and independent attestations that extend coverage beyond assets to include liabilities, liquidity, and operational risk over time.

Advertisement

In this context, the crypto ecosystem is moving toward a more nuanced understanding of what constitutes credible transparency. While PoR can reduce information asymmetry, it should be interpreted within a framework that also addresses solvency, liquidity, governance, and risk management. The next phase of market evolution will hinge on how effectively exchanges can merge on-chain verifiability with robust off-chain disclosures to deliver a coherent narrative of resilience for users and investors alike.

What to watch next

  • Updates to PoR methodologies by major exchanges and any moves toward continuous or periodic attestations.
  • Regulatory guidance clarifying expectations for liability disclosure and solvency proofs in PoR-like reports.
  • Public disclosures around liquidity profiles and unencumbered reserves during periods of stress.

Risk & affiliate notice: Crypto assets are volatile and capital is at risk. This article may contain affiliate links. Read full disclosure

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Coinbase Launches Stock Perpetual Futures for Non-U.S. Users

Published

on

Coinbase Launches Stock Perpetual Futures for Non-U.S. Users

The exchange is offering leveraged contracts on major technology stocks and ETFs.

Coinbase on Friday rolled out perpetual futures contracts tied to U.S. equities, becoming one of the first major centralized exchanges to offer the product and expanding its derivatives lineup beyond crypto.

The contracts cover all seven Magnificent 7 stocks — Apple, Microsoft, Alphabet, Amazon, Nvidia, Meta, and Tesla — as well as ETF perpetuals tracking the S&P 500 (SPY) and Nasdaq-100 (QQQ) in select jurisdictions. They are available to eligible non-U.S. retail users on Coinbase Advanced and to institutions on Coinbase International Exchange.

The contracts trade around the clock, are cash-settled in USDC, and offer up to 10x leverage on individual stocks and 20x on ETF products. Like crypto perpetuals, they have no expiration date and use a funding rate mechanism to track spot prices.

Advertisement

Competing With DeFi

The launch positions Coinbase against decentralized platforms that have already built significant traction in equity-linked perpetuals. TradeXYZ, the perpetuals arm of Hyperliquid tokenization layer Unit, has crossed $1.4 billion in open interest and routinely processes more than $1 billion in daily volume, according to DeFiLlama.

Earlier this week, the platformlanded a license from S&P Dow Jones Indices to launch the first officially sanctioned S&P 500 perpetual futures contract on-chain — a milestone that lends institutional credibility to the DeFi side of the equity perps market.

Coinbase acknowledged in itsblog post that much of the demand for continuous equity exposure has been concentrated on decentralized venues.

The launch follows Coinbase’s recent push into European derivatives, where its MiFID-regulated entity began offering crypto futures across 26 countries earlier this month. The company said it plans to expand the lineup over time, adding more equities, indices, commodities, and other globally traded assets.

Advertisement

This article was written with the assistance of AI workflows. All our stories are curated, edited and fact-checked by a human.

Source link

Continue Reading

Crypto World

Crypto Clarity Act may be cleared to move after senators agree on stablecoin yield

Published

on

Crypto Clarity Act may be cleared to move after senators agree on stablecoin yield

The two U.S. senators negotiating a controversial provision in the crypto industry’s market structure bill — Republican Thom Tillis and Democrat Angela Alsobrooks — have reportedly agreed on a compromise that could advance the industry’s top priority to the next stage in the Senate.

The two were reported by Politico to have agreed in principle on an approach to stablecoin yield in the Digital Asset Market Clarity Act, and that potentially knocks down one of the top unresolved issues in the wide-ranging bill. Still, no further details emerged, other than Alsobrooks reiterating that the yield accord would bar rewards on passive balances of stablecoins.

Bankers had argued that stablecoin rewards on holdings of the U.S. dollar-tied tokens could closely resemble interest on bank deposits, and any threat to that core component of U.S. banking could put lending at risk. Both Alsobrooks and Tillis had agreed to find an approach that wouldn’t threaten banking.

“Sen. Tillis and I do have an agreement in principle,” Alsobrooks told Politico on Friday. “We’ve come a long way. And I think what it will do is to allow us to protect innovation, but also gives us the opportunity to prevent widespread deposit flight.”

Advertisement

The White House was reviewing updated legislative text on Thursday, CoinDesk previously reported. White House officials didn’t immediately respond to a request for comment on the Friday development.

Industry insiders have told CoinDesk that they were aware of a new compromise, but they haven’t yet seen the legislative text that the senators agreed on.

Though the stablecoin question was at the forefront of the Clarity Act negotiations, there remain a number of other points to iron out, including the bill’s treatment of decentralized finance (DeFi), a corner of the sector in which some Democrats had expressed unease over illicit finance.

Lawmakers have suggested in recent days that the Clarity Act could get a Senate Banking Committee hearing late next month. If it’s approved there, it advances toward the Senate floor, though it first needs to be melded with a similar version that already passed in the Senate Agriculture Committee.

Advertisement

Senator Cynthia Lummis, the Republican atop the banking panel’s crypto subcommittee, said earlier this week she expected a hearing in the latter half of April. She posted on image Friday on social media site X that depict a “yield” sign.

Advocates have been hoping for a May resolution of the years-long legislative effort. But Senate floor time is at a premium, and it’s under some threat from unrelated issues, such as the Republican’s voter-ID bill and the back-and-forth over the war in Iran.

Read More: Key U.S. senator on crypto market structure bill negotiation: ‘We think we’ve got it’

UPDATE (March 20, 2026, 15:36 UTC): Adds quote from Senator Alsobrooks and tweet from Senator Lummis.

Advertisement

Source link

Continue Reading

Crypto World

Google warns over 200 million iPhone crypto wallets at risk

Published

on

Google warns over 200 million iPhone crypto wallets at risk

Google just disclosed a vulnerability that targets iPhone crypto wallets and could have affected an estimated 270 million Apple devices.

The DarkSword exploit, which strings together multiple zero-day vulnerabilities, is still live today and affects iPhones running iOS 18.4 through 18.7, updates that were released between April and September last year.

Up-to-date Apple devices use iOS 26.3.1. However, because many people don’t automatically upgrade, 24% of all iPhones still use iOS 18 according to Apple’s own data.

DarkSword allows hackers to orchestrate six vulnerabilities together to silently compromise devices, dump their Keychain databases, and vacuum up crypto wallet data. 

Advertisement

Frequently targeted apps by DarkSword hackers include crypto wallets MetaMask, Phantom, and dozens of others by Coinbase, Ledger, and more. Visiting a poisoned website in Safari is all it takes to trigger the attack.

Google’s Threat Intelligence Group has observed Russian state-linked hackers, a Turkish surveillance vendor, and another threat cluster wielding DarkSword against targets in Saudi Arabia, Turkey, Malaysia, and Ukraine since at least November 2025.

Read more: Legacy DeFi platforms lose $27M as hacking spree continues into 2026

Zero-day access to iPhone crypto wallet files

DarkSword isn’t a keylogger or clipboard sniffer; it gains kernel-level access, then injects JavaScript into privileged iOS system processes to pillage the device.

Advertisement

The sinister toolkit hunts specifically for crypto wallet files, scanning for apps matching terms like “metamask,” “ledger,” “trezor,” “phantom,” “coinbase,” “binance,” and “kraken.” It grabs whatever wallet data it finds.

It can also pull the device’s Keychain database which is an Apple system-level storage service for passwords. 

DarkSword can also access WiFi passwords, iCloud data, Safari cookies, iMessages, WhatsApp histories, call logs, location histories, photos, and encryption keys protecting stored credentials called keybags.

Read more: Venus Protocol hacker lost $4.7M after nine months of planning

All six vulnerabilities have now received patches if an iPhone user upgrades their operating system.

Apple addressed most in iOS 18.7.2 and 18.7.3. However, if their passwords, files, or crypto wallet data have already been stolen, all of those credentials and personal security implications would have to be re-secured.

Got a tip? Send us an email securely via Protos Leaks. For more informed news, follow us on X, Bluesky, and Google News, or subscribe to our YouTube channel.

Advertisement

Source link

Advertisement
Continue Reading

Crypto World

Institutions Expect Digital Asset Prices to Rebound in 2026

Published

on

Institutions Expect Digital Asset Prices to Rebound in 2026

Institutional demand for crypto is holding up despite ongoing turbulence, with new data showing large investors are preparing to increase allocations even after the market’s sharp sell-off since October.

At the same time, stablecoins are gaining traction across both retail and institutional channels. Japan is moving ahead with regulated USDC (USDC) lending products, while new models tied to real-world assets are beginning to take shape.

Elsewhere, crypto companies continue to tap traditional capital markets, with Abra pursuing a public listing via a special purpose acquisition company (SPAC) deal.

Together, the latest developments point to a market that is still expanding through regulated pathways, even as price volatility and regulatory uncertainty persist.

Advertisement

Institutional investors double down on crypto

Despite recent volatility and a 40% crypto market sell-off since October, institutional investors are preparing to increase their digital asset exposure, with most expecting prices to rise over the next 12 months. 

A January survey of 351 investors by Coinbase and EY-Parthenon found that 73% plan to buy more digital assets this year, while 74% expect prices to move higher.

Bitcoin (BTC) and Ether (ETH) remain the primary entry points, but interest is expanding into stablecoins and tokenized assets. Two-thirds of respondents said they prefer gaining exposure through regulated vehicles such as exchange-traded products.

The data points to steady institutional demand, with capital continuing to move through structured, compliant channels despite market turbulence.

Advertisement
Crypto exchange-traded products remain an attractive entry point for institutional investors. Source: Coinbase-EY

SBI rolls out retail USDC lending in Japan

SBI VC Trade is expanding stablecoin use in Japan with the launch of a retail USDC lending service, as regulated access to dollar-backed tokens gains traction. The move follows recent regulatory changes that allow licensed companies to handle foreign stablecoins, such as Circle-issued USDC.

The platform enables users to lend USDC in exchange for yield, marking one of the first retail-facing products of its kind in Japan. SBI, a major financial group, has been building out its crypto offering within the country’s regulated framework.

The rollout highlights how stablecoins are moving beyond trading into regulated financial products, particularly in markets where legal clarity has already been established.

A table comparing Japan’s tax treatment of USDC lending and foreign currency deposits. Source: SBI VIC Trade

Abra targets Nasdaq listing through SPAC deal

Crypto wealth manager Abra is planning to go public through a merger with New Providence Acquisition Corp., in a deal that values the combined entity at around $750 million. The company is expected to list on Nasdaq under the ticker ABRX.

Abra has shifted its focus toward wealth management services, including trading, custody and yield products, following regulatory challenges tied to its earlier lending operations. The SPAC route offers a faster path to public markets at a time when traditional IPO activity remains limited.

The deal reflects continued efforts by crypto companies to access public capital, even as regulatory scrutiny and market conditions remain uneven.

Advertisement

Theo launches $100M gold-linked yield stablecoin vault

Tokenization platform Theo has unveiled a $100 million vault tied to a gold-linked, yield-bearing stablecoin, designed to combine price stability with onchain returns. The structure links the token’s value to gold while offering yield to users.

The model introduces a hybrid approach that blends commodity backing with onchain financial mechanisms, reflecting broader efforts to bring real-world assets into crypto markets. Gold serves as the underlying collateral, offering an alternative to fiat-backed stablecoins.

The product highlights growing experimentation around yield-bearing stablecoins, as developers look to expand their role beyond simple price stability.

Crypto Biz is your weekly pulse on the business behind blockchain and crypto, delivered directly to your inbox every Thursday.

Advertisement