Proof of Reserves vs Statutory Audit: Understanding the Difference
Why Proof of Reserves Is Not a Substitute for an Independent Financial Statement Audit
Following several high-profile failures within the global cryptocurrency industry, many digital asset businesses introduced Proof of Reserves (PoR) initiatives to demonstrate transparency regarding the crypto-assets they hold. These exercises have helped increase public confidence by enabling users to verify that certain digital assets exist on a blockchain at a particular point in time.
While Proof of Reserves can be a valuable transparency mechanism, it should not be confused with a statutory audit.
A statutory audit is an independent examination of an entity's financial statements conducted in accordance with International Standards on Auditing (ISA). It evaluates not only assets but also liabilities, revenue, expenses, internal controls, governance, accounting policies, disclosures and numerous other financial reporting considerations.
Understanding the distinction between Proof of Reserves and a statutory audit is essential for directors, investors, lenders, regulators and users of financial statements.
Our firm specialises in statutory audits of Crypto-Asset Service Providers (CASPs) and blockchain businesses, providing independent assurance in accordance with International Standards on Auditing together with expertise in digital assets and blockchain technology.
What Is Proof of Reserves?
Proof of Reserves generally refers to procedures designed to demonstrate that an organisation controls certain crypto-assets at a particular point in time.
Depending on the methodology adopted, Proof of Reserves may involve:
-
publication of wallet addresses;
-
blockchain verification;
-
cryptographic proofs;
-
Merkle tree methodologies;
-
independent observations by third parties;
-
wallet balance confirmations; or
-
periodic transparency reports.
The precise methodology varies between organisations.
Importantly, there is currently no universally accepted international auditing standard governing Proof of Reserves engagements.
What Is a Statutory Audit?
A statutory audit is an independent examination of the annual financial statements performed by a registered auditor in accordance with International Standards on Auditing.
The auditor's objective is to obtain reasonable assurance that the financial statements are free from material misstatement, whether arising from fraud or error.
The audit culminates in an independent auditor's report expressing an opinion on whether the financial statements have been prepared, in all material respects, in accordance with the applicable financial reporting framework.
Different Objectives
Although both exercises relate to financial transparency, their objectives differ significantly.
Proof of Reserves primarily seeks to demonstrate the existence of certain crypto-assets at a specified date.
A statutory audit seeks to determine whether the financial statements as a whole present a true and fair view of the entity's financial position, financial performance and cash flows.
These objectives are fundamentally different.
Assets Are Only One Part of the Financial Statements
A common misconception is that verifying crypto-assets is equivalent to auditing the company.
In reality, financial statements include considerably more than digital asset balances.
A statutory audit evaluates matters including:
-
cash and bank balances;
-
digital assets;
-
receivables;
-
liabilities;
-
borrowings;
-
customer obligations;
-
revenue;
-
operating expenses;
-
taxation;
-
equity;
-
related-party transactions;
-
accounting estimates; and
-
financial statement disclosures.
Proof of Reserves generally focuses on only one element of the balance sheet.
Liabilities Matter
One of the principal limitations of Proof of Reserves is that it may demonstrate assets without providing corresponding assurance regarding liabilities.
For example, an organisation may appear to hold substantial crypto-assets while simultaneously having significant obligations to customers, lenders or other counterparties.
A statutory audit considers both assets and liabilities to determine whether the financial statements provide a complete and balanced representation of the entity's financial position.
Internal Controls
Proof of Reserves generally does not evaluate the effectiveness of an organisation's internal control environment.
A statutory audit requires the auditor to obtain an understanding of internal controls relevant to the preparation of the financial statements.
These controls may include:
-
wallet governance;
-
approval procedures;
-
segregation of duties;
-
accounting systems;
-
reconciliation processes;
-
access controls;
-
IT general controls;
-
management oversight; and
-
financial reporting processes.
Strong internal controls contribute to reliable financial reporting and effective corporate governance.
Revenue Recognition
Revenue recognition is frequently one of the most judgemental areas of financial reporting for Crypto-Asset Service Providers.
During a statutory audit, auditors assess whether revenue has been recognised appropriately in accordance with the applicable accounting framework.
This assessment may include:
Proof of Reserves does not address revenue recognition.
Valuation
Crypto-assets often experience significant price volatility.
Accordingly, management must establish appropriate valuation methodologies and accounting policies.
The statutory auditor evaluates whether:
-
management's valuation methodology is appropriate;
-
assumptions are reasonable;
-
accounting policies are consistently applied;
-
supporting evidence exists; and
-
disclosures adequately explain significant judgements.
Proof of Reserves generally demonstrates quantities of assets rather than whether those assets have been appropriately measured or presented in the financial statements.
Governance and Risk Management
A statutory audit also considers aspects of governance relevant to financial reporting.
Auditors develop an understanding of matters such as:
-
board oversight;
-
organisational structure;
-
risk management;
-
accounting processes;
-
significant estimates;
-
management review controls; and
-
the overall control environment.
Proof of Reserves normally does not provide assurance regarding governance arrangements.
Going Concern
Directors are responsible for assessing whether the business can continue operating for the foreseeable future.
During the statutory audit, auditors evaluate management's assessment and consider whether any material uncertainties exist that require disclosure.
Factors may include:
-
liquidity;
-
financing arrangements;
-
regulatory developments;
-
operational risks;
-
litigation;
-
business plans; and
-
market conditions.
Proof of Reserves does not evaluate the entity's ability to continue as a going concern.
Fraud Risk
International Standards on Auditing require auditors to assess the risk of material misstatement due to fraud.
Audit procedures may include consideration of:
-
management override;
-
unusual journal entries;
-
related-party transactions;
-
significant estimates;
-
incentive structures;
-
internal control weaknesses; and
-
other fraud risk factors.
Proof of Reserves does not constitute a fraud investigation or financial statement audit.
The Importance of Professional Standards
Statutory audits are performed within an established international framework that includes:
-
International Standards on Auditing;
-
ethical requirements;
-
independence rules;
-
quality management standards;
-
documentation requirements; and
-
professional oversight.
These standards promote consistency, transparency and public confidence in the audit process.
Proof of Reserves methodologies vary considerably and are not currently governed by an equivalent comprehensive global assurance framework.
Can the Two Approaches Complement Each Other?
Yes.
Many organisations view Proof of Reserves as an additional transparency measure that complements, rather than replaces, statutory financial reporting.
For example:
Together, these approaches may contribute to enhanced stakeholder confidence.
Common Misunderstandings
The following statements are frequently misunderstood:
"Proof of Reserves proves the company is solvent."
Not necessarily. Solvency depends on both assets and liabilities.
"If wallets can be verified, no audit is needed."
Incorrect. Financial statements contain considerably more information than wallet balances.
"Proof of Reserves replaces the statutory audit."
No. The two serve different objectives and provide different forms of assurance.
"Blockchain transparency eliminates accounting risk."
No. Financial reporting continues to involve accounting policies, estimates, controls, governance and disclosures that extend beyond blockchain transactions.
Frequently Asked Questions
Does MiCA require Proof of Reserves?
MiCA establishes regulatory obligations for crypto-asset businesses. Whether an entity publishes Proof of Reserves depends on its business model, regulatory expectations and commercial considerations. It should not be regarded as a substitute for statutory financial reporting obligations.
Can auditors use blockchain information?
Yes. Blockchain records may provide valuable audit evidence. However, auditors also obtain evidence from accounting records, contracts, confirmations, reconciliations and numerous other sources.
Does Proof of Reserves verify liabilities?
Generally, no. Proof of Reserves primarily focuses on demonstrating specified digital asset holdings rather than providing assurance over liabilities or the complete financial position of the entity.
Can investors rely solely on Proof of Reserves?
Investors should understand the scope and limitations of any assurance exercise. Proof of Reserves and audited financial statements serve different purposes and provide different information.
Why is an independent statutory audit important?
A statutory audit provides reasonable assurance over the financial statements as a whole, supporting confidence among shareholders, regulators, lenders, investors and other stakeholders.
Independent Assurance for the Digital Asset Industry
Transparency is fundamental to the long-term development of the digital asset sector. While Proof of Reserves can provide useful information regarding certain crypto-asset holdings, it should not be confused with the broader assurance provided through an independent statutory audit.
Our firm provides statutory audit services to Cyprus Crypto-Asset Service Providers, fintech companies and blockchain businesses in accordance with International Standards on Auditing. Combining expertise in blockchain technology, IFRS Accounting Standards and financial reporting, we help organisations deliver reliable financial information that supports informed decision-making and enhances stakeholder confidence.
Whether your organisation is preparing for its first statutory audit or seeking experienced auditors with specialist blockchain expertise, our team is ready to assist.