Four years after FTX, exchanges show assets, not solvency

Major crypto exchanges now publish cryptographic proofs that they control specific on-chain wallets, four years after the collapse of FTX accelerated industry transparency efforts. Platforms supply wallet addresses, signed messages and Merkle-tree structures that let customers verify that their account balances were included in a published dataset.

Exchanges use different technical tools. Merkle trees allow a user to confirm their own balance without revealing other accounts. Some platforms add zero-knowledge proofs to show that calculations followed stated rules while keeping balances private; one large exchange introduced zk-SNARK verification after 2022. Several firms publish dashboards or downloadable proof files that customers can use to check inclusion in a reserve dataset.

Those cryptographic methods prove control over particular wallets at a particular moment. They do not show whether every customer account was included before the cryptographic structure was built, nor do they reveal bank loans, tax liabilities, litigation, guarantees to affiliates or whether the legal owner of a wallet is the entity responsible for repaying customers. Many exchanges operate through multiple legal entities across jurisdictions, and an aggregated dashboard can mask which subsidiary owes customers or whether the same assets are encumbered by other creditors.

Proofs are often based on snapshots that reflect holdings at a single time and may be published after outside reviewers or internal teams complete checks. A snapshot can be accurate for that moment while not representing the company’s typical position if funds move before or after the measurement or if liabilities change quickly because of derivatives, lending products or institutional flows. Archived historical records and frequent snapshots increase context by showing movements across time.

Accounting and regulatory overseers have cautioned that reserve reports vary in scope. The Public Company Accounting Oversight Board has warned that proof-of-reserve reports fall outside its audit oversight and can provide an inadequate basis for assessing whether a company has enough assets to meet obligations. The SEC chief accountant has noted that reviews, attestations and agreed-upon-procedures engagements typically examine a narrower set of evidence than a consolidated financial-statement audit. An outside accounting or security firm may be engaged only to compare selected wallet balances with selected customer liabilities, excluding corporate debt, internal controls, related-party transactions and legal obligations.

Exchanges publish different kinds of evidence. Some platforms offer account-level cryptographic checks and reserve ratios, others publish wallet lists and proof files, and a few provide external reviews for specific products. A publicly listed exchange publishes audited consolidated financial statements that disclose debt, collateral, derivatives, commitments, subsidiaries and related-party transactions and includes auditor reporting on internal control over financial reporting.

A framework for external assessment would combine cryptographic evidence with conventional financial reporting. That combination would link proofs of control over on-chain assets to reconciliations of customer balances with the company general ledger, identify the legal entities responsible for repayment, disclose assets pledged to other creditors and explain how fiat, derivatives, lending and institutional accounts are treated. External firms would publish the exact scope and limits of their work, and custodial platforms would provide audited consolidated statements or equivalent regulatory disclosures covering debt, liquidity and customer-asset segregation.

Cryptographic proofs provide precise information about specific wallets and customer balances. By themselves, those proofs do not demonstrate whether an exchange can meet all liabilities or which legal entity bears responsibility for customer claims.