SFAI member · international network in 70 countries
Home / Services / IT Risk Management / Proof of Reserves Audit
IT Risk Management

Proof of Reserves Audit

The mandatory quarterly reserve audit and reporting for crypto asset service providers under the CMB principle decision.

What is Proof of Reserves Audit?

A proof of reserves audit is a legally mandatory audit verifying that a crypto asset service provider genuinely and fully holds the assets belonging to its clients. The work is based on account balances and the existence of matching reserves, and concludes with a Reserve Audit Report under the CMB principle decision.

We combine our independent audit methodology with on-chain verification techniques, providing the assurance the regulator expects through randomly selected dates, confirmation of wallet ownership and high sample coverage.

What does our Proof of Reserves Audit work include?

  • Audits in quarterly periods (periods covering months 3, 6, 9 and 12 of the year)
  • Coverage of at least the 10 crypto assets with the largest balances and at least 80% of client balances
  • Audit of all assets in the platform's liquid reserve, reported under a separate heading
  • Checks on two random dates within the period, not announced in advance
  • Verification that wallet addresses belong to the service provider
  • Confirmation of assets held for liquidity provision through the custodian's record system
Proposal request

Get a tailored proposal for Proof of Reserves Audit

Share the scope in a few lines and we will send you our team, timeline and fee proposal in writing. Free of charge and non-binding.

  • Under founding-partner supervision
  • Member of the SFAI international network
  • Written, transparent proposal

or call: +90 212 951 02 47

Report and delivery

  • Report contents: the purpose and scope of the audit, tools used, dates and auditor details; appendix tables (crypto asset reserve breakdown, liquid reserve breakdown and summary), the management representation and the auditor's opinion.
  • Delivery: to the board of directors within 10 business days of period end; to the Board (CMB), together with the board resolution, within 15 business days at the latest.
  • Critical notification: immediate notification to the Board if the reserve coverage ratio falls below 100%.
  • Rotation: the same audit firm may audit a service provider for no more than 12 consecutive periods, and the lead information systems auditor for no more than 4 periods.

How do we work?

  1. EngagementWe plan the work no later than the first month of each quarter (or under a single annual engagement).
  2. VerificationWe carry out balance, wallet and reserve verifications on random dates.
  3. ReportingWe submit the Reserve Audit Report to the board of directors on time.

Who needs Proof of Reserves Audit?

  • Crypto asset service providers
  • Platforms
  • Custodians used by platforms

Which standards is Proof of Reserves Audit based on?

CMB principle decisionBDS 500 Audit EvidenceBDS 520 Analytical ProceduresBDS 530 Audit Sampling

Frequently asked questions about Proof of Reserves Audit

How can I get a proposal for Proof of Reserves Audit?
Share your company and needs via the proposal form and we will send our scope, team, timeline and fee proposal in writing. Phone: +90 212 951 02 47.

Last updated: October 22, 2026

Let's talk about Proof of Reserves Audit.

Tell us what you need and we will define the right scope and team together.

CallRequest a Proposal