Services
Proof of Reserves audit
Demonstrate transparency and build lasting trust with CertiK's Proof of Reserves audit. Our independent, Skynet-enabled solution verifies your reserves in real time, protecting users, investors, and stakeholders while helping you meet regulatory expectations. Offer the public verifiable assurance backed by continuous monitoring and industry-leading security standards.
Why CertiK
Verify reserves with the trusted auditor at the forefront of security
The standard for transparency
As the leading auditor in Web3, CertiK sets the standard for Proof of Reserves transparency.Backed by security experts
Our PoR service is managed by the leading security experts trusted across the ecosystem.Showcase your credibility
We provide a unique way to demonstrate your reserves accountability and credibility with Skynet.
Compliance
Deep compliance and regulatory expertise
Globally recognized standards
Our Proof of Reserves services are built on a robust foundation of security, privacy, and transparency, fully aligning with globally recognized standards such as ISO 27001 and SOC 2. This alignment ensures the highest benchmarks for compliance, data protection, and operational integrity.Strong partnerships with global policymakers
Backed by strong partnerships with global policymakers, we bring deep regulatory expertise to every Proof of Reserves engagement. Our approach not only strengthens user trust but also positions your platform to confidently navigate evolving compliance landscapes and future regulatory requirements.
Monetary Authority of Singapore
Hong Kong Web3 Task Force
Financial Services Agency of Japan
MiCA European Union
MOUs with Seoul and Busan Gov
FSRA of the Abu Dhabi Global Market
The CertiK advantage
More than a report, a live trust signal
A CertiK Proof of Reserves audit is a dynamic asset for your project's growth. We provide what no other platform can: a direct showcase of your transparency to the entire Web3 security ecosystem via Skynet.
Auditor-led expertise
Our PoR service is managed by the same security engineers who conduct CertiK's world-class audits. We bring a deep understanding of your security posture, ensuring a more rigorous and context-aware verification process.Unmatched community trust with Skynet
A CertiK PoR provides a public showcase of your reserves directly on your Skynet profile. This gives you direct access to the entire Web3 ecosystem, millions of users, investors, and researchers, building broad community trust in your reserves posture and Skynet Score.Offerings for exchanges and projects of all sizes
Proof of Reserves is a key milestone in your security journey. We support exchanges, Stablecoins, RWA projects, and DeFi protocols of all sizes with tailored PoR solutions.
Method
Proof of Reserves audit methodology
Our Proof of Reserves approach provides assurance through a multi-phase process. Each phase is designed to transparently verify your reserves, culminating in a clear and credible showcase of trust.
- Phase 1
Strategic scoping & onboarding
The process begins with a kickoff to establish a clear foundation for the audit. This initial phase is critical for aligning on objectives and ensuring a smooth, predictable process.
- Define PoR audit scopeWe partner with your team to define a clear audit scope, timeline, and a precise list of all in-scope assets and networks.
- Plan Skynet integrationWe establish the plan for integrating the final verification results with your public Skynet profile to provide maximum community visibility.
- Phase 2
Privacy-preserving liability verification
Next, our engineers focus on the first side of the ledger: your user liabilities. This phase is dedicated to cryptographically proving the total value of user funds with a process that prioritizes accuracy and user privacy.
- Client liability reportUnder our supervision, your team generates a Client Liability Report, which is a snapshot calculating all user balances for the in-scope assets.
- Data privacy & hashingTo protect user privacy, we collect only the minimum necessary data. For confidentiality, each user is assigned a unique user hash, ensuring auditors cannot link specific balances to identifiable individuals.
- Merkle tree integrityThis privacy-protected data is used to construct a Merkle Tree, allowing us to aggregate all user liabilities into a single Merkle Root Hash, which serves as a cryptographic proof of the total liability amount.
- Phase 3
Complete asset & ownership verification
Simultaneously, we verify the assets held in reserve. This track focuses on providing undeniable proof that your organization has complete control over all wallets holding the assets.
- Wallet address collectionOur team obtains a complete list of all public keys and addresses from your management that hold the in-scope assets.
- Ownership proofsWe conclusively prove your control over these addresses using secure and verifiable on-chain methods, including:
- "Send-to-self" transactionsVerifying control by monitoring a small, pre-defined transaction sent from each address.
- Custom digital signaturesEstablishing ownership by having you sign a custom message with each private key.
- Phase 4
Integrated analysis & reporting
In the final phase, we bring the two verification tracks together to provide a clear picture of your reserve status, translating technical verification into a powerful, public showcase of your commitment to transparency.
- Collateralization analysisWe conduct a meticulous one-to-one comparison of your total verified assets against your total verified liabilities.
- Valuation & reportingTo ensure accuracy, we standardize asset values using a common currency (e.g., USD) and pull prices from multiple leading data sources. We then calculate the collateral ratio for each asset, ensuring it exceeds 100%.
- Skynet showcase & attestationThe results are delivered in a detailed attestation report and activated on your public Skynet profile, turning your PoR audit into a live showcase of trust for the entire Web3 ecosystem.
A one-time Proof of Reserves audit is typically completed in 2 weeks, depending on the scope and complexity. The engagement concludes with two key deliverables: a detailed attestation report for your records and the public activation of your verification status on your Skynet profile.
Plans
Choose your level of assurance
We offer two distinct services tailored to your project's goals.
One-time PoR audit
Ideal for regulatory filings, investor due diligence, and user transparency.- DeliverableA comprehensive, signed attestation report detailing our findings.
- Skynet integrationA Verified Reserves badge displayed on your Skynet profile with the audit date, along with the PoR report available for public viewing.
Continuous living PoR
The premier solution for exchanges and projects requiring ongoing, real-time assurance.- DeliverableIncludes the PoR audit plus a dedicated, real-time Reserves dashboard on your public Skynet profile.
- PoR APIA client-side API for secure data updates and a public interface for your users to verify their balances.
FAQ
Questions, answered
Proof of Reserves is an independent verification process that confirms a platform holds sufficient assets to fully back user liabilities. It provides transparent, cryptographic assurance that customer balances are collateralized by verifiable on-chain reserves.
PoR strengthens user trust by demonstrating that assets are not misrepresented or rehypothecated. It reduces counterparty risk, supports regulatory transparency, and provides stakeholders with clear evidence of financial integrity.
CertiK’s PoR audit follows a multi-phase methodology that verifies both liabilities and assets. It cryptographically proves total user balances using privacy-preserving techniques and confirms wallet ownership through on-chain verification methods, culminating in a transparent collateralization analysis.
User balances are aggregated into a cryptographic structure known as a Merkle Tree. Each user is assigned a unique hash, ensuring personal information is not disclosed while allowing total liabilities to be mathematically verified through a Merkle Root proof.
CertiK verifies control over reserve wallets through secure on-chain methods such as signed digital messages or predefined “send-to-self” transactions. This ensures that the organization demonstrably controls the private keys associated with the disclosed reserves.
Collateralization analysis compares total verified reserves against total verified liabilities. Asset values are standardized using consistent pricing sources, and the collateral ratio is calculated to confirm reserves exceed 100% of user liabilities.
A one-time PoR audit delivers a signed attestation report and a verified reserves badge on Skynet. Continuous PoR extends this assurance with real-time updates, a public reserves dashboard, and API integrations for ongoing transparency.
CertiK integrates PoR results directly into a project’s public Skynet profile. This transforms the audit into a live trust signal, allowing users, investors, and researchers to view verification status and reserve transparency in real time.
A standard one-time PoR audit is typically completed within approximately two weeks, depending on the scope and complexity of assets and supported networks.
CertiK’s PoR services align with globally recognized standards such as ISO 27001 and SOC 2, and are informed by regulatory engagement across major jurisdictions. This positions platforms to meet evolving compliance requirements while reinforcing operational integrity and public trust.