Four years after the catastrophic collapse of FTX, the crypto industry's largest trading platforms are still playing a dangerous game of hide-and-seek with their balance sheets. While exchanges routinely publish proof-of-reserves reports to reassure users, these audits stop short of proving that liabilities are fully covered, leaving a critical gap in transparency. The lesson of FTX — that customer funds can vanish overnight — remains as relevant as ever, yet the sector's response has been, at best, half-hearted.

The Illusion of Proof-of-Reserves

In the wake of FTX's implosion, a wave of exchanges rushed to commission third-party attestations of their holdings, branding these as proof-of-reserves (PoR). These reports typically show that an exchange controls a certain amount of on-chain assets, ostensibly matching customer deposits. However, as industry analysts have repeatedly pointed out, these snapshots are far from a full financial audit.

PoR reports often exclude liabilities entirely, or they calculate them in a way that can be easily manipulated. For example, an exchange might count its own native token as an asset at inflated value, or fail to account for off-chain obligations like derivatives positions and pending withdrawals. This means that even a glowing PoR report can hide severe insolvency risks — the exact scenario that doomed FTX.

Why Full Solvency Audits Are Still Elusive

Full solvency audits, which would compare total assets against total liabilities in real time, require a level of transparency that most exchanges are unwilling to provide. Such audits would expose lending practices, proprietary trading desks, and the extent to which customer funds are being rehypothecated — information that many platforms consider proprietary.

Moreover, there is no industry-wide standard for what constitutes a credible solvency proof. Unlike traditional finance, where regulated bodies enforce quarterly disclosures, crypto exchanges operate in a regulatory gray zone. This allows them to cherry-pick auditors, choose favorable methodologies, and release reports only when it suits their marketing calendar.

"The very fact that we're still debating this four years later shows how little has changed," one crypto risk analyst noted.

Regulatory Pressure Mounts

Regulators around the world have taken notice, but progress has been slow. In the United States, the SEC has filed charges against several exchanges for misleading customers about the safety of their funds. Meanwhile, the European Union's Markets in Crypto-Assets (MiCA) regulation, which came into force in 2024, includes provisions for mandatory disclosure of reserves, but implementation is still underway.

Despite this, many exchanges continue to resist full transparency, arguing that revealing detailed liability structures could jeopardize competitive advantages or trigger bank runs. Critics counter that this lack of accountability is precisely what enables fraud and mismanagement to flourish, and that the industry cannot truly mature until it embraces the same rigorous standards as traditional financial institutions.

The User's Dilemma

For average users, the practical advice remains unchanged: do your own due diligence. Relying solely on an exchange's word — or even a PoR report — is not enough. Users should look for platforms that undergo regular independent audits, maintain segregated client funds, and are transparent about their lending and investment activities.

  • Check if the exchange publishes a full audit, not just an asset snapshot.
  • Look for proof of negative equity or liability coverage.
  • Consider using self-custody wallets for long-term holdings.

What Would Real Solvency Proof Look Like?

To truly restore trust, exchanges would need to adopt a framework similar to traditional banking, where financial statements are audited quarterly and made public. This would include a balance sheet that lists all assets and liabilities, including off-balance-sheet items, and a clear methodology for valuing digital assets.

Some startups are exploring cryptographic solutions, such as zero-knowledge proofs, that could allow exchanges to prove solvency without revealing sensitive details. However, these technologies are still nascent and have yet to be widely adopted. Until then, the burden of proof remains on the exchanges — and so far, they have chosen to do the bare minimum.

Key Takeaways

Four years after FTX, the crypto industry has made only token gestures toward transparency. Proof-of-reserves is not proof of solvency, and exchanges continue to exploit this distinction. Regulatory efforts are ramping up, but users must remain vigilant. The ultimate lesson is that trust in centralized exchanges is a risk, not a given — and the industry's future depends on closing the gap between what is shown and what is actually owed.