Bybit Reports $17.3B in Reserves Across 50 Assets, Audit Scope Has Limits

Bybit says its 41st proof-of-reserves report covered $17.3 billion in customer assets across 50 cryptocurrencies, with figures verified by security firm Hacken against an October 27 snapshot. The exchange announced the results on November 3, marking the latest in a recurring disclosure series that now stretches to 41 editions.

Bybit reported reserve ratios exceeding 100% for all 50 covered assets. The standout figures include 405% for USDC, 112% for USDT, 102% for Bitcoin and 101% for Ether. The percentages compare identified reserves against customer balances under the exchange's stated methodology.

What do the ratios actually prove?

The ratios establish one thing precisely: at the snapshot moment, identified reserves matched or exceeded customer balances for each covered token. They do not establish that the business holds the same excess in every asset, and they do not show whether reserves could move freely between customer pools.

Analysts should also distinguish a token-by-token reserve ratio from consolidated corporate solvency. Solvency accounts for obligations that may not appear in a proof-of-reserves snapshot at all.

Why does the snapshot date matter?

The audit point was October 27 at 06:00 UTC. Reserve balances, withdrawals, borrowing, market prices and off-exchange exposures may all have shifted since then. A single publication cannot serve as permanent reassurance.

The value of recurring disclosures lies in comparability. Users can track successive reports for persistent gaps or unexpected movements between editions. Bybit says the checks covered 50 listed assets, but the exact perimeter, the included customer categories and the handling of institutional arrangements remain questions for the detailed report.

What can Hacken's verification establish?

Bybit says Hacken carried out the verification. Third-party involvement adds credibility, particularly when the reviewer explains methods and limitations. But the word "audit" carries a broader meaning than this exercise supports.

A Merkle-tree construction lets customers verify that their balance was included, while the exchange proves possession of identified on-chain assets. The method does not, by itself, rule out undisclosed debts, encumbrances, affiliated-party claims or operational weaknesses. The scope of the work deserves as much scrutiny as the name of the verifier.

How should customers read the report?

Asset backing is a core question for custodial exchanges because users depend on the firm to return assets they cannot directly control. Yet a fully funded snapshot covers only one layer of counterparty risk. Security controls, market surveillance, legal ownership of customer property, segregation practices and withdrawal resilience all shape the broader picture.

Bybit users can inspect the methodology and verify their own balances where the tooling supports that check. External analysts can compare claimed assets against observable on-chain holdings across successive reports. The milestone here is the reporting process itself, not a declaration that counterparty risk has disappeared.

Bybit has committed to continuing the series, and the next report's comparability with the October 27 data will determine whether the disclosure regime delivers analytical value beyond a single headline figure.