On September 15, MEXC published its monthly Proof of Reserves report. The headline number — a 297% Bitcoin reserve ratio — spread across Crypto Twitter within hours, wrapped in the usual hopium. Screenshot accounts framed it as proof that MEXC holds nearly three times the BTC its users own. Safe. Conservative. Bulletproof.
I went to the source table. The snapshot is dated September 10, five days before publication. It covers exactly four assets: BTC, USDT, USDC, ETH. Hacken signed the audit. And the 297% figure everyone is celebrating is, on closer inspection, the least informative number in the document. The stablecoin ratios sit at 111-119%. ETH at 111%. Those are the figures that describe MEXC's actual solvency cushion. The one they promoted can be manufactured by user flight.
I didn't need a dashboard to see it. Just arithmetic.
Proof of Reserves has become the commodity of exchange trust since FTX. The mechanics are uniform: a Merkle Tree hashes user balances into a root, the exchange publishes the root, and users verify their leaf is included. Hacken — an Estonian blockchain security firm — audits the figures. This is MEXC's monthly ritual, running for years.
The setup is not the story. Merkle Tree PoR is the same configuration Binance, OKX, and Kraken use. No zk-STARK innovation, no zero-knowledge liability proof, no cryptographic differentiator. OKX has pushed further with its zk-STARK implementation. MEXC's real "innovation" is simply that it keeps publishing. That is table stakes now, not an edge.
What matters is scope. MEXC's PR claims coverage of "170+ markets" spanning crypto, equities, tokenized assets, and derivatives. The PoR report discloses four assets. The disclosure universe and the business universe are not the same thing, and the gap between them is where the risk lives.
Hacken's audit scope covers Proof of Liabilities, Proof of Ownership, reserve calculation, and PoR evaluation. Thorough on paper. But the range of assets is defined by MEXC, not by Hacken. An auditor only backs the envelope it is handed. If that envelope contains four assets while the platform lists hundreds, the auditor has done its job correctly and still told you almost nothing about total solvency. I've spent enough hours auditing reserve proofs to know the real question is never "did the auditor sign?" It's "what did the auditor agree to ignore?"
Here's the arithmetic on BTC. MEXC reports 12,202.13 BTC on the asset side and 4,106.57 BTC on the user liability side. Ratio: 297%. Now the trap. That ratio equals (platform-owned BTC + other BTC) divided by user BTC liabilities. If users keep withdrawing BTC, the denominator shrinks — and a shrinking denominator inflates the ratio. The 297% "record of safety" could just as easily be a 297% record of user BTC exodus. The document doesn't tell you which. You'd need the month-over-month user balance trend to decide. MEXC doesn't provide it.
The 297% Bitcoin ratio is a vanity metric — its rise is undecidable between "platform is over-collateralized" and "users are leaving."
The real buffer numbers are the stablecoin ratios. USDT at 119%, USDC at 112%, ETH at 111%. These are the unflattering figures, and they are closer to the truth of MEXC's actual margin. A 111% ratio means roughly an 11% cushion against the covered liability. Fine in calm conditions. Thin in a liquidation cascade.
Then examine liability composition. MEXC's user USDT liability is 1.53 billion — the single largest line in the disclosure. The reserve side is also USDT-heavy. MEXC's solvency is, mechanically, levered to USDT's credit. If the stablecoin wobbles, both sides of the balance sheet wobble at once. Asset and liability move together. That is the correlation nobody puts in the marketing deck.
Step back to the aggregate. MEXC reports four asset reserves, all above 1:1. Comforting — until you remember it is a partial balance sheet. Every other tradable asset, including the hundreds of long-tail tokens MEXC is known for listing aggressively, carries no reserve proof at all. If those liabilities are fully backed, great. If they are not, this report will never show it. The audit is honest within its scope, and the scope is exactly where the honesty ends.
The snapshot problem compounds it. September 10 is a single point in time. History is full of exchanges arranging books around a snapshot date — the venerable practice of window dressing. A one-time proof of ownership cannot rule out borrowing assets for the photograph. Hacken's Proof of Ownership verifies what MEXC holds at that instant. It cannot prove the absence of off-book borrowing or rehypothecation. No PoR can. This is a structural blind spot of the entire format, and the report doesn't mention it once.
The insurance figures deserve the same cold eye. A futures insurance fund of roughly 798 million USDT and a Guardian Fund of 101 million dollars, with a "plan" to reach 500 million in two years. The plan has no custodian, no funding source, no third-party escrow. It is a forward-looking sentence, not a balance sheet item. Against 1.53 billion in user USDT alone, the current fund is a modest cushion, not a fortress.
The contrarian read is this: MEXC's risk was never fraud. Eight years of operation with monthly third-party audits means it is not a ponzi-style immediate collapse. The risk is selective disclosure dressed as transparency — compliance-grade misleading.
The press release was filed from Mutsamudu, Comoros. No mainstream regulatory framework — no Singapore, no Hong Kong, no EU. That jurisdiction choice usually means the primary operating entity sits outside heavy-compliance zones. The report is silent on KYC, AML, licensing, and regulatory affiliation. For a document whose entire purpose is trust, dodging the core trust variable is a choice, not an oversight. When an exchange leads with technology-grade proof, it is often compensating for the absence of institution-grade licensing.
And "zero trading fees" looks generous until you ask where revenue comes from: market-maker rebates, listing fees, withdrawal fees, spread, token pumping. The story carries no revenue structure, so there is no way to assess the long-term source of solvency.
Watch three things, not the BTC headline. First, whether MEXC expands disclosure beyond four assets — if it doesn't, treat this as partial evidence, never as full solvency. Second, the month-over-month user BTC balance, the only way to tell outflow from over-collateralization. Third, USDT's peg, because MEXC's solvency is a leveraged bet on it.
The blockchain doesn't care about press releases. It only tallies what moves.
