An exchange balance is not an on-chain UTXO assigned to you
When bitcoin remains on a custodial platform, the provider controls the keys and records a liability to the customer in its internal database. The customer may request a withdrawal, but cannot independently authorise an on-chain spend from the custodian's wallets.
This structure introduces counterparty risk: the service may become insolvent, freeze access, suffer theft, experience an operational failure or be compelled to restrict withdrawals. Regulation and contractual rights vary by provider and jurisdiction.
Reserve evidence can prove control of assets
A custodian can demonstrate control of bitcoin addresses by signing a challenge with the corresponding keys or by moving funds in a verifiable way. Anyone can check the relevant on-chain balances at the stated block height.
This is useful evidence that the custodian controlled particular assets at a moment in time. It does not, on its own, identify whether those assets were borrowed, pledged elsewhere or reused in another report.
Liabilities are the other side of solvency
A reserve figure is meaningful only when compared with what the custodian owes. Some systems commit to a list or tree of customer liabilities so an individual can check that their balance was included without publishing every customer's balance.
A customer inclusion proof does not guarantee that the liability set is complete. Hidden creditors, negative balances, loans, corporate debts and off-platform obligations can change the overall position. The process and scope must therefore be documented and independently scrutinised.
A snapshot cannot guarantee future conduct
Proof of reserves is normally a snapshot. Assets can move and liabilities can change immediately afterwards. Repeated or real-time evidence reduces the time gap but cannot prove future security, governance or withdrawal availability.
An attestation is also not automatically the same as a full financial-statement audit. Read exactly what a reviewer tested, what management supplied and which matters were excluded rather than relying on a proof-of-reserves label.
Compare risks instead of promising zero risk
Self-custody removes reliance on a custodian's permission to spend, but creates direct responsibility for keys, backups, recovery and personal security. A poorly managed self-custody setup can be more fragile than a carefully governed arrangement.
A proportionate approach considers value, transaction frequency, personal capability and failure consequences. Evidence, withdrawal testing and diversification can reduce uncertainty, but no custody model removes every operational and human risk.
Visual recap
What a solvency claim must connect
Asset control is only one side of a custodian's financial position.
Prove asset control
Commit to liabilities
Verify inclusion
Review missing obligations
Repeat over time
Key vocabulary
Terms worth knowing
- Custodial claim
- A promise from a service that it owes a customer a specified amount.
- Proof of reserves
- Evidence intended to show control of certain assets at a particular point in time.
- Liabilities
- Amounts a custodian owes to customers and other creditors.
Worked example
An exchange publishes wallet balances
A custodian signs a message proving control of several bitcoin addresses and publishes a customer-liability snapshot.
- 1Verify the signed ownership evidence
- 2Check how customer liabilities were included
- 3Ask whether hidden debts or borrowed assets are excluded
- 4Check the snapshot date and independent review scope
- 5Separate solvency evidence from ongoing custody risk
Reserve evidence can improve transparency but cannot, by itself, prove complete solvency or prevent future misuse.
Common misconceptions
What learners often get wrong
Misconception
A public wallet balance proves every customer can withdraw.
More accurate
It does not reveal all liabilities, encumbrances, operational controls or whether the same assets were temporarily borrowed.
Misconception
Self-custody removes every risk.
More accurate
It replaces custodian risk with key-management, backup, device and personal-security responsibilities.
Try it yourself
Evaluate a fictional reserve report.
- List what the report proves
- List what it cannot prove
- Identify the time covered
- Identify who performed the review
- Decide what additional evidence would reduce uncertainty
Use fictional values and public information only. Never enter seed words, private keys or other wallet secrets into a learning exercise.
Key takeaways
- An exchange balance is a custodial liability, not direct control of a specific UTXO.
- Cryptographic evidence can demonstrate control of identified reserves at a point in time.
- Reserve evidence must be compared with a complete and credible account of liabilities.
- A snapshot does not prove future solvency, security or withdrawal availability.
- Self-custody changes the risk model rather than eliminating risk.
Lesson recap
Check what you learned
Reveal each model answer, then honestly mark whether you understood it or need another review.
1 of 3
Recall
Why does proving control of bitcoin addresses not, by itself, prove that an exchange is solvent?
References
