Key Takeaways
Cryptocurrency custodians use Proof of Reserves (PoR) audits to prove that they’re holding users' funds in full.
Binance conducts and publicly publishes internal audits, where third-party auditors help to verify them using cryptographic techniques to prove users’ funds are securely held in company reserves.
Binance users can also independently verify that their account balances are included in these audits.
Introduction
Blockchain-enabled cryptographic proofs facilitate the transparency of crypto exchanges’ financial transactions. Proof of Reserves (PoR) further increases this transparency by creating an authorized framework for auditing crypto custodians.
What Is Proof of Reserves (PoR)?
A PoR audit is one that aims to ensure that custodians are holding 100% or more of their clients’ funds. In the Web3 space, crypto exchanges and other custodial businesses use PoR audits to prove to depositors and the public that their deposits match their balances. Typically, these audits are done by independent third parties to eliminate the possibility of reserve data being falsified.
PoR is essential for many reasons. First, it enables users to verify that the balances they hold on a cryptocurrency exchange have absolute asset backing. Second, it drives businesses to meet transparency standards, which helps filter out businesses with questionable or illegal financial activity.
Ideally, PoR should benefit both users and businesses. It protects users by minimizing security risks and safeguarding against harmful players. At the same time, it helps businesses retain users by increasing their trustworthiness.
The ability to audit crypto exchanges creates a more transparent crypto ecosystem. For example, PoR prevents exchanges from acting as banks that loan deposited assets to third parties.
Similarly, exchanges can't use user deposits to invest in other protocols or businesses. In other words, PoR eliminates the risk of companies maximizing the yield and other possible returns from customer asset holdings.
With PoR, any entity can prove that a crypto exchange holds the entirety of its users’ deposits. Therefore, exchanges are naturally encouraged not to mishandle these balances, as it would break user trust and affect their reputation.
What Does PoR Verification Do?
In PoR verification, the auditor verifies the inclusion of each account’s balance using cryptography. There are a few key steps as to how this works.
First, the auditor takes a snapshot of all account balances. It then converts the fund data to a Merkle tree, which is used to structure large amounts of data for more straightforward processing.
User balance data is hashed into a "leaf". A group of these "leaves" is then hashed to form a "branch", and a group of "branches" is hashed to form the "root".
Next, the auditor can use various methods to verify ownership of the user address. On Binance, for example, an auditor has three ways to identify ownership. When the extraction process for this information is run by the exchange, it is also verified by the auditors.
Cryptographic message signing: An auditor will provide the exchange a unique message to cryptographically sign using their associated private key(s).
Instructed movement of funds: The exchange is tasked with performing an “instructed movement of funds”, where the management will move a specific amount from a public key/address at a specific time and obtain the transactional hash to verify the instructed transaction on the respective blockchain.
Search addresses on a blockchain explorer: The auditor can also search the ETH and BSC addresses on explorers like Etherscan and BscScan to ensure that the addresses have been tagged as belonging to the exchange.
If the balances match, the exchange has verified PoR and shown that it holds all deposited assets.
PoR: Limitations and Potential Improvements
A crypto exchange’s balances change as users move their assets in and out. The issue with PoR is that it verifies the correctness of reserve balances only at the specified time of the audit. This can be problematic because any issues may appear too late, and a custodian may even use this opportunity to obscure facts.
It’s also important to note that third-party businesses conduct the audits, which means audit results may depend on each auditor's competence or whether they’re influenced by outside interests.
But how can a crypto exchange improve its PoR audits to build and maintain users’ trust? It can start by shortening the intervals between audits to ensure there are no suspicious financial activities between cycles. An exchange could also use a reputable third-party firm with no financial interest in it or its related bodies.
Verifying that your account has been audited
You can verify the inclusion of your Binance account in the last PoR audit yourself. Simply follow the instructions below.
Log in to your Binance account and bring your cursor to the wallet menu at the top right corner. Next, select the "Verification" tab.
You will see all the recent audits in which your account balance was verified by the PoR process.
Select a specific audit for which you want more information. There, you can also download the Merkle tree.
You can also scroll down to check your holdings and more details about Binance’s wallets and their respective addresses.
For more information, please refer to the official Proof of Reserves page.
Closing Thoughts
You can access a PoR audit to see if a crypto custodian holds the entire reserves of your and other users' funds. The audits should deter crypto exchanges from mismanaging user funds and help improve transparency in the crypto space.
Further Reading
Disclaimer: This content is presented to you on an “as is” basis for general information and educational purposes only, without representation or warranty of any kind. It should not be construed as financial, legal or other professional advice, nor is it intended to recommend the purchase of any specific product or service. You should seek your own advice from appropriate professional advisors. Products mentioned in this article may not be available in your region. Where the article is contributed by a third party contributor, please note that those views expressed belong to the third party contributor, and do not necessarily reflect those of Binance Academy. Please read our full disclaimer for further details. Digital asset prices can be volatile. The value of your investment may go down or up and you may not get back the amount invested. You are solely responsible for your investment decisions and Binance Academy is not liable for any losses you may incur. This material should not be construed as financial, legal or other professional advice. For more information, see our Terms of Use and Risk Warning.