Skip to content

What Is Proof of Reserve for Tokenized Assets?

Proof of reserve shows that real assets back every token in circulation. See how it works, where it falls short and how to build it into a tokenized asset.

Buckleson logoBuckleson Engineering6 min readPart 2 of 5 · Launch a tokenized asset

How it works

How unbacked mints hide between reports, and a mint rule stops them

Without Hyper 0X

Supply exceeds the reserve until the next report

  1. IssuerAsks to mint 10,000
  2. Token contractNo reserve check
  3. InvestorsBuy unbacked tokens
  4. AttestationFinds the gap later
  1. 1The issuer asks to mint 10,000 gold tokens, but no new gold reached the vault.
  2. 2The token contract mints them, because it does not read the reserve.
  3. 3Investors buy the new tokens, so the supply is now larger than the reserve.
  4. 4The gap shows only in the next attestation, after investors hold the tokens.

With Hyper 0X

Mint rejected before it executes

  1. IssuerAsks to mint 10,000
  2. Reserve recordSigned by the custodian
  3. Mint ruleRuns before execution
  4. Hyper 0X L2Final in one pass
  5. InvestorsHold backed tokens only
  1. 1The custodian signs each reserve update and sends it to the L2 of the issuer.
  2. 2The issuer asks to mint 10,000 tokens, but no new gold reached the vault.
  3. 3The mint rule compares the new supply with the signed reserve before the mint executes.
  4. 4Hyper 0X rejects the mint, so the supply never exceeds the reserve.

Proof of reserve is evidence that the real assets behind a token exist and are at least equal to the tokens in circulation. It compares two numbers: the token supply on the blockchain and the assets that a custodian holds. When the reserve is equal to or larger than the supply, every token has full backing. The strongest proof of reserve is frequent, independent and linked to the rule that mints new tokens.

Why does proof of reserve matter?

A tokenized asset is only as good as the asset behind it. A token for gold, a fund unit or a bond is a claim on something real. The holder trusts that the issuer holds that asset and keeps it safe. If the reserve is short, the last holders to redeem can lose money. In past failures of crypto platforms, customers learned about a shortfall only after withdrawals stopped.

For executives, proof of reserve is a trust tool and a sales tool. Investors, partners and regulators ask for it before they commit money. A clear reserve record also shortens due diligence, because a buyer can check the backing directly. Our asset tokenization guide puts proof of reserve in the first step of a launch: structure and custody.

What does proof of reserve compare?

Proof of reserve compares what the issuer owes with what the issuer holds. The two halves need different checks.

  • Liabilities (the tokens). Every token is a claim on the reserve. On a blockchain (a shared ledger that many computers keep in sync), you can count the tokens in circulation at any moment. This half of the check is exact and live.
  • Assets (the reserve). The real asset stays off the chain with a custodian, a regulated firm that holds assets for others. A vault, a bank or a fund administrator reports what it holds. This half needs an independent check.

The reserve ratio is the reserve divided by the supply. A ratio of 1.0 or more means full backing. Say that an issuer has minted 100,000 gold tokens of one gram each. The vault must then hold at least 100 kg of gold for the token holders.

What are the main methods of proof of reserve?

Issuers use five main methods. Most strong programs combine two or more of them.

Method What it shows How often Main limit
Attestation An accounting firm confirms that the reserve covered the supply on one date Monthly or quarterly A snapshot of one day
Full audit The controls and finances of the issuer over a period Usually yearly Slow, and less common
Holdings report Each asset in the reserve, for example each gold bar with its serial number With each attestation The custodian prepares it
On-chain reserve feed The reserve figure on the blockchain, next to the live supply With each update Only as good as its data source
Holder balance proof Each holder can check that their balance is in the total With each report Shows what is owed, not what is held

An attestation is the most common method today. An accounting firm checks the records of the custodian on one date and confirms the totals. A full audit goes deeper and tests the controls of the issuer over a full period. An on-chain reserve feed puts the reserve figure on the blockchain. There, a smart contract (a program on the blockchain) can read it and act on it.

Where does proof of reserve fall short?

Proof of reserve answers one question: does the asset exist? It does not answer every question about the issuer. Watch for these gaps.

  • Snapshots. A report on one date says nothing about the other days. An issuer can borrow assets for the check and return them the next day.
  • Hidden claims. The reserve can exist and also secure a loan. Ask whether any other party has a claim on the assets.
  • Quality of the reserve. Cash, short-term government bonds and corporate debt carry different risks. A full ratio in weak assets is not the same as a full ratio in cash.
  • The data source. An on-chain feed is only as accurate as the custodian report behind it. An independent firm must still check the custodian.
  • The legal claim. Holders need a legal right to the reserve if the issuer fails. A trust or a special-purpose vehicle (SPV) keeps the assets away from the creditors of the issuer.

When you read a reserve report, check five things. Check the date, the firm and the scope. Check the ratio and the type of assets. Then compare the report with the live supply on the chain.

How do you build proof of reserve into a tokenized asset?

Build proof of reserve into the mint rule, not only into a report. A report finds a gap after it happens. A mint rule stops the gap before it starts. Do these steps in this order:

  1. Hold the asset with an independent custodian. Keep allocated, segregated holdings in a trust or an SPV.
  2. Mint one to one. Create tokens only when matching assets arrive in custody. Burn (destroy) tokens when assets leave.
  3. Put the reserve figure on the chain. The custodian signs each reserve update with its own key.
  4. Make the mint check the reserve. Write a rule that rejects any mint that puts the supply above the reserve.
  5. Keep independent checks. Publish regular attestations, because the feed only repeats what the custodian reports.
  6. Watch the ratio. Alert the issuer and pause new mints when the ratio falls below 1.0.

Our post on tokenized gold shows how bar lists and attestations work for one asset class. The same steps apply to fund units, bonds and invoices.

How does Hyper 0X support proof of reserve?

On Hyper 0X, the Buckleson blockchain, each issuer runs its own private L2. An L2 is a private blockchain that settles on a main chain. Hyper 0X runs compliance as code: rules that the chain checks before a transaction executes. You can write the mint limit from step 4 as one of these rules. A mint that exceeds the signed reserve figure fails, and it never reaches the ledger.

Hyper 0X is final in one pass, with no reorgs (rewrites of recent blocks). So the supply that an auditor reads today is the same supply tomorrow. Our post on blockchain finality explains why this matters. Per-party encryption keeps the records of each investor private. The issuer can still give an auditor access to the supply and the reserve record.

Trades also stay clean. When an investor buys or sells a token for cash, both legs settle in one step through atomic settlement. No investor pays without the token, and no seller delivers without payment. Read what compliance as code is for the full rule model. Our asset tokenization services build the token, the reserve checks, the investor rules and the app as one system.

Where should you start?

  1. Write down the asset, the custodian and the legal structure that holds the asset.
  2. Decide how often you will publish reserve data, and which firm will check it.
  3. Ask the custodian if it can sign reserve updates and send them to the chain.
  4. Write the mint rule: no new tokens above the reserve.
  5. Show the reserve ratio where investors can see it at any time.

Book a call with a Buckleson engineer to design proof of reserve for your tokenized asset.

Frequently asked questions

Is proof of reserve the same as an audit?

No. An audit reviews the controls and finances of an issuer over a full period. Proof of reserve checks one thing: that the reserve is at least equal to the tokens in circulation. Many issuers use attestations for this check and full audits less often.

How often does an issuer need to publish proof of reserve?

No single rule fits every asset. Monthly or quarterly attestations are common. A live reserve feed on the chain shows changes between reports. We recommend both: a live feed for the mint rule and regular independent checks.

Can proof of reserve stop an issuer from minting unbacked tokens?

A report alone cannot, because it shows a problem only after it happens. A mint rule that reads the reserve figure can. On Hyper 0X, the chain runs that rule before the mint executes, so an unbacked mint fails.