Share article

Brazil's Central Bank has just put a hard date on a transparency upgrade that most exchanges have talked about for years and delivered in half measures: daily proof-of-reserves (PoR), with full compliance required by 2027. [1] The catalyst here is simple: Brazil is turning "trust me, bro" custody into a regulated reporting problem, and it wants the numbers every day.

That matters because PoR is one of those crypto phrases that sounds reassuring on CT (Crypto Twitter) but can be surprisingly squishy in practice. A deadline from a major regulator forces the industry to standardise what counts as "reserves", how they are verified, and how quickly customers get told when something looks off.

Enjoy articles without ads?

Register for free and get unlimited access to all articles.

What Brazil is actually pushing exchanges to do

The central bank's directive, as reported, requires crypto exchanges operating in Brazil to prove they hold the assets they owe customers, with a daily verification standard to be met by 2027. [2] In plain English: if an exchange says it has X Bitcoin$62,477.67 and Y Tether$0.999021 on behalf of clients, it needs a repeatable method to demonstrate those assets exist and are available, not just once a quarter when everyone is watching, but continuously.

Daily verification is the key detail. Most "PoR" efforts to date have been periodic snapshots, often accompanied by glossy dashboards and a big asterisk. Regulators know snapshots can be gamed. If the rule genuinely enforces day-by-day proof, it raises the cost of reserve window dressing.

Brazil is not doing this in a vacuum, either. The country has been building out a framework for crypto service providers since its broader crypto legislation was passed, with the central bank positioned as a primary supervisor for parts of the sector. [3] This is the next step: fewer vibes, more controls.

Why daily proof-of-reserves is a big operational ask

Daily PoR is not just "post some wallet addresses". To be meaningful, an exchange needs to show two things:
  1. Assets (reserves): The coins it controls, ideally verifiable on-chain for public networks, or via attestations for off-chain and custodied assets.
  2. Liabilities: What it owes customers, ideally with a method users can verify without exposing everyone else's balances.

Most exchanges historically focus on the first half because it is easy marketing. The second half is where it gets messy.

A proper system usually involves a cryptographic commitment to customer balances (commonly via Merkle trees), so each user can verify their balance is included, while auditors and regulators can check the total liabilities number. Then you reconcile that against reserves that are provably controlled by the exchange (on-chain signatures, controlled addresses, or custodian confirmations).

Doing that daily means:

  • More frequent internal reconciliation: Matching database balances to wallet and custodian balances every day.
  • Better segregation of funds: If client assets and house funds are commingled, daily reporting becomes a nightmare and a compliance risk.
  • Tighter operational security: Publishing controlled addresses and signing proofs increases the need for clean key management and clear procedures.
For large exchanges, the tech is doable, but the governance is the real work. For smaller venues, it could be a bit of a mess.

The degen reality: proof-of-reserves can still be gamed

Even daily PoR does not automatically eliminate insolvency risk. It reduces certain failure modes, but it does not magically make an exchange safe.

Here are the classic loopholes regulators will need to close:

"Borrow and show" reserves

An exchange can temporarily borrow assets, display them for a proof, then return them. Daily proofs make this harder to sustain, but not impossible if the exchange has access to large credit lines or friendly counterparties.

Proof-of-reserves without proof-of-liabilities

If Brazil's framework allows reserves reporting without strong liabilities verification, PoR becomes optics. Customers care about net solvency, not just "we own some coins".

Hidden leverage and rehypothecation

An exchange can hold assets but have them pledged elsewhere, locked in lending, or otherwise encumbered. The PoR needs to address whether reserves must be unencumbered and readily available.

Stablecoins and off-chain exposure

A lot of customer balances are in stablecoins, which are on-chain assets, but the risk is often off-chain (issuer risk, banking exposure, redemption friction). Daily PoR does not solve stablecoin depegs or issuer problems.

So yes, this is directionally bullish for customer safety, but anyone calling it "problem solved" is overselling it.

What this could change for the Brazilian market

Brazil is a serious crypto market with real retail participation and a growing institutional footprint. A daily PoR requirement could reshape the local exchange landscape in a few ways: [4]

1. More consolidation toward well-capitalised venues

If compliance costs rise, smaller exchanges may either upgrade quickly, merge, or exit. That is not automatically good or bad, but it tends to concentrate liquidity.

2. Better custody practices, more third-party custodians

Daily verification pushes exchanges to professionalise custody. Expect more use of regulated custodians, multi-sig setups, and clearer asset segregation, especially where auditors can sign off on controls.

3. Marketing shift: "PoR" becomes table stakes

After FTX, many exchanges rushed out PoR pages. A central bank deadline forces a higher standard and makes it harder for venues to hide behind vague attestations. "We publish addresses" will not cut it if the reporting has to hold up under supervisory scrutiny.

4. Pressure on "paper volume" venues

Brazil's rules are aimed at reserves, not trading volume, but transparency tends to spill over. If a venue is already being forced to show daily solvency, regulators and users will be more willing to ask whether liquidity is real, whether order books are thin, and whether any of the activity looks wash-traded.

What to watch between now and 2027

The headline is the deadline, but the details will decide whether this becomes a real consumer protection win or just another compliance checkbox.

Key questions worth tracking:

  • Does the standard require liabilities disclosure that is user-verifiable?
  • Are reserves required to be unencumbered (not pledged or lent out)?
  • Will the central bank mandate independent audits, or allow self-attestation?
  • How will the rule handle assets held with third-party custodians or in omnibus wallets?
  • What happens when an exchange fails a daily check? Suspension, remediation plan, customer notification, or something softer?

If Brazil gets those enforcement mechanics right, 2027 could mark a meaningful step toward real-time solvency monitoring, not just periodic PR proofs.

Risk box: what would invalidate the "this improves safety" take?

This move is only as strong as the implementation. The bullish case breaks if any of the following happens:

  • Daily PoR becomes a daily marketing screenshot with no liabilities verification.
  • Exchanges are allowed to count encumbered or borrowed assets as reserves without clear disclosure.
  • Enforcement is weak, delayed, or full of exemptions for major players.
  • The framework does not require timely action when discrepancies appear (no mandatory customer communication, no trading halts, no remediation deadlines).

Brazil has set the clock. Now the industry has to prove it can do transparency on schedule, and not just when the timeline suits it.