What is proof-of-reserves and can exchanges be trusted when they publish it?

Proof-of-reserves (PoR) is an attestation that an exchange has enough assets on hand to cover customer deposits. It often uses cryptographic proofs (Merkle trees), a third-party auditor, and a published snapshot of assets versus liabilities. PoR varies in scope and timing; gaps like off-chain liabilities or funds lent out can undermine credibility. Trust hinges on auditor reputation, transparency, and verifiability.

I got curious about PoR after a friend asked if my go-to exchange really held the coins I left there. I read a PoR report and learned it shows a reserves-versus-liabilities snapshot and is usually signed by an auditor. But it isn’t a magic shield. The auditor can be reputable, data public, and proofs verifiable, yet there can be off-chain liabilities, futures exposure, or funds lent out not counted. In one case, I found a PoR with a Merkle tree and a clear total, then cross-checked against on-chain balances. The numbers matched, but the report didn’t say how fast withdrawals would process or what would happen in a liquidity crunch. So I started pairing PoR with practical checks: ask for frequent attestations, ensure independent custody of private keys, verify insurance or fund protection, and keep a portion in cold storage or self-custody. PoR helps, but personal risk management and diversification matter more.