Proof of Reserves

Prove every token is backed. Independently.

On-chain reconciliation by AuditKey, assurance by an independent auditor. Monthly or on demand, public or private, for stablecoin issuers, tokenization platforms, exchanges and privacy protocols.

Proof of reserves is where we started.

Before AuditKey, our team ran proof of reserves for Brazilian stablecoins and tokenization platforms as Fact Finance. That practice, its clients and its methodology are now part of AuditKey, alongside our KYT engine.

Why a reserve report matters.

  • Holders trust what they can verify.

    A reserve report is the only answer to "is my token backed?" that does not ask for faith.

  • Partners ask before they list.

    Exchanges, banks and distributors want an independent report before onboarding a token.

  • Regulators expect it.

    Reserve disclosure is becoming a legal obligation for stablecoin issuers.

Four kinds of proof of reserves.

Stablecoins

Every token, backed. Every month.

We read total supply directly from every chain your token lives on, reconcile it with bank and custodian statements, and break down reserve composition by asset type. Your holders get a public attestation page. Your auditor signs the report.

  • Multi-chain supply, read on-chain
  • Reserve composition by asset type
  • Public attestation page with report history
  • Monthly or on demand

Tokenization platforms

One token, one real asset.

For tokenized receivables, real estate, commodities and other real-world assets, we reconcile the on-chain token registry with custody records, registrar data and asset documentation, so investors know each token is tied to an asset that exists.

  • Token registry vs custody and registrar
  • Per-offering or per-asset reports
  • Fits CVM-regulated offerings in Brazil

Exchanges & custodians

Customer funds, fully backed.

Each customer can check their own balance is counted, without seeing anyone else's. We also prove control of the wallets that hold reserves. Reports can be public, or private for partners and regulators only.

  • Reserve assets vs customer liabilities
  • Check My Account verifier, embeddable on your site or behind login
  • On-chain proof of wallet control
  • Public or private report

Privacy protocols

Early access

Solvent, without exposing a single user.

Shielded pools hide individual balances by design. We reconcile total commitments with the on-chain pool balance and use zero-knowledge proofs of liabilities, so the protocol can prove solvency while every user stays private.

  • Commitments vs on-chain pool balance
  • Zero-knowledge proof of liabilities
Privacy Pool Compliance

Assurance under recognized accounting standards.

Every report is signed by an independent auditor under Brazilian (NBC) and international (ISAE) assurance standards.

For auditors and compliance teams
NBC TO 3000NBC TSC 4400
EngagementAssurance engagement other than an audit or review of historical financial informationAgreed-upon procedures
Auditor's outputA conclusion: reasonable assurance (positive opinion) or limited assuranceFactual findings of the procedures agreed with the client, with no assurance conclusion
International counterpartISAE 3000ISRS 4400
Best forPublic attestations to holders, partners and regulatorsMonthly reconciliations between assurance reports, and internal or partner checks

Every Independent Auditor's Report is signed by an independent auditor, not by AuditKey. Reports are point-in-time, as of the snapshot date. We produce and reconcile the data. The auditor tests it and concludes.

Signed by Rodrigo Molin, independent auditor registered with CNAI (CFC).

From on-chain data to a signed report.

  1. 1

    Scope

    AuditKey + client

    Define the asset, the wallets and the assurance standard.

  2. 2

    Collect

    AuditKey

    Fix the snapshot date and collect on-chain balances and the matching statements.

  3. 3

    Reconcile

    AuditKey

    Match liabilities to reserves and document every difference.

  4. 4

    Assure

    Independent auditor

    The independent auditor tests the evidence and signs the report.

  5. 5

    Publish

    AuditKey + client

    The signed report locks the data so it can't be changed later.

  • Monthly, quarterly or on demand
  • Public page, private PDF, or both
  • API and daily automation for issuers that want continuous monitoring between reports

Getting ready for GENIUS Act reserve reporting.

From January 2027, US payment stablecoin issuers must publish a monthly reserve report, certified by their CEO and CFO and examined by a PCAOB-registered accounting firm. AuditKey prepares the data package that report is built on: on-chain supply across every chain, reserve reconciliation and composition, ready for your examiner's review.

  • In force January 18, 2027
  • Monthly reserve report on the issuer's website
  • Examined by a PCAOB-registered accounting firm
  • Audited annual statements above US$50 billion

What this engagement also covers.

  • Zero-knowledge solvency

    Privacy protocols can prove the shielded pool is solvent without exposing a user. That proof of liabilities is part of the engagement.

  • Reserves and KYT

    Prove the reserves exist, and that mint and redemption funds come from clean sources, with the same provider.

  • Supply read on-chain

    Total supply is read on-chain across every chain the token lives on, not only the balance the platform reports.

  • Brazilian standards

    Engagements run under NBC TO 3000 and NBC TSC 4400, with the work delivered in Portuguese and Spanish as well as English.

The technical whitepaper on proof of reserves.

Cryptographic architecture and verifiability through Merkle trees, for crypto exchanges and digital asset custodians. October 2026 edition.

Download the whitepaper

Enter your details and we'll send the download link to your inbox.

It's not a newsletter subscription. Just a download link.

FAQ

Questions about proof of reserves.

How an AuditKey proof of reserves engagement works.

What is proof of reserves?

Proof of reserves is an independent check that the assets backing a token or a platform cover what it owes to holders. AuditKey reconciles on-chain supply and balances with reserve statements, and an independent auditor tests the result and signs the report.

Is proof of reserves the same as an audit?

No. A financial statement audit covers a company's full financials. Proof of reserves covers one subject: whether reserves match liabilities at a point in time. AuditKey reports are assurance or agreed-upon procedures engagements, not audits.

Should I choose NBC TO 3000 or NBC TSC 4400?

Choose NBC TO 3000 when holders, partners or regulators need the auditor's conclusion, with reasonable or limited assurance. Choose NBC TSC 4400 when a defined set of checks is enough, such as monthly reconciliations between assurance reports. AuditKey prepares the reconciliation for either engagement.

Does AuditKey's proof of reserves meet the GENIUS Act?

The GENIUS Act requires monthly reserve reports examined by a PCAOB-registered accounting firm. AuditKey prepares the reserve data package for that examination. The examination itself must be performed by a PCAOB-registered firm.

Can the report be private?

Yes. AuditKey proof of reserves reports can be published on a public attestation page, shared privately with partners and regulators, or both.

How often can reserves be verified?

AuditKey verifies reserves monthly, quarterly or on demand. Continuous on-chain monitoring between reports is available for issuers that need it.

How can a privacy protocol prove solvency without exposing users?

AuditKey reconciles total commitments in the shielded pool with its on-chain balance and uses zero-knowledge proofs of liabilities, so solvency is proven without revealing any user's balance.

How do exchange customers verify their own balance?

AuditKey builds a Merkle tree of customer liabilities. Each customer receives an inclusion proof showing their balance is counted, without seeing anyone else's.