What happened
Effective September 1, the leading crypto derivatives exchange Deribit implemented a significant shift in its asset management and reporting strategy. The exchange migrated approximately 90% of client assets to Coinbase Custody, a highly regulated US-based institutional custodian. Alongside this migration, Deribit discontinued its daily Proof-of-Reserves (PoR) check, which previously utilized a Merkle Tree structure to allow users to verify their individual account balances against the exchange's total reserves.
Technology context
Proof-of-Reserves (PoR) is a cryptographic auditing method that became an industry standard following the high-profile collapse of FTX. It relies on a Merkle Tree, a mathematical structure that hashes large amounts of data into a single fingerprint. This allows users to confirm their funds are accounted for without exposing sensitive private information. By moving assets to Coinbase, Deribit is shifting from a self-custody model (where the exchange manages its own hot and cold wallets) to a third-party institutional custody model, where a regulated entity holds the keys and provides insurance and compliance guarantees.
Why it matters
This move highlights a growing tension in the crypto industry between algorithmic transparency (don't trust, verify) and institutional trust (regulated audits). For retail users, the removal of the Merkle check reduces the ability to perform instant, independent audits of the platform's solvency. However, for institutional traders, the involvement of Coinbase provides a layer of legal and operational security that a standalone exchange might lack. It signals that Deribit is prioritizing regulatory alignment, specifically with Dubai's VARA framework, over community-led cryptographic verification.
Key terms explained
- Merkle Tree: A cryptographic tree where every leaf node is a hash of a data block, enabling efficient and secure verification of large datasets.
- Institutional Custody: A financial service where a regulated third party holds a customer's securities or crypto assets to minimize the risk of theft or loss.
- VARA: The Virtual Assets Regulatory Authority of Dubai, known for its comprehensive regulatory framework for crypto businesses operating within the region.
Impact
In the short term, the crypto community may view the end of daily PoR checks as a step backward for transparency. In the medium term, however, this transition could solidify Deribit's position as a preferred platform for institutional investors who require assets to be held with reputable custodians. The reliance on audited materials and VARA reports replaces real-time data with periodic, professionally verified financial statements.
What's next
We are likely to see a bifurcation in the exchange landscape. Some platforms will double down on "ZK-proofs" and real-time on-chain transparency to satisfy the decentralized ethos, while others, like Deribit, will lean into the traditional financial model of regulated custody and periodic audits. The industry is still searching for a balance between the speed of crypto and the safety of established financial regulations.
Educational analysis generated with AI and editorially reviewed.