A smart contract audit tells you the code is sound. It tells you nothing about whether the operator holding your balance actually has the money.
Those are two different questions, and only one of them matters on the day a platform stops paying.
How a Reserve Attestation Works
Five steps, and the third and fourth are where the value is won or lost.
-
The operator publishes wallet addresses it claims to control. This is the easy part and on its own it proves nothing, since anyone can copy a public address from a block explorer and claim it.
-
It demonstrates control by signing a message. A signature from those addresses proves the operator holds the keys. Without this step, a published address list is a screenshot.
-
A snapshot is taken at a stated timestamp. Here is the weakness the exchange sector learned the hard way: reserves can be borrowed to pass a snapshot and returned afterwards. A single point-in-time attestation says what was true for one moment, not what is true continuously.
-
Liabilities are counted, which is the harder half. Holdings alone prove nothing without knowing what is owed. An operator with substantial reserves and larger obligations is insolvent, and the assets side of that equation looks reassuring on its own. A Merkle tree lets an individual player confirm their own balance was included in the total without exposing anyone else's, which is how the liability side becomes checkable.
-
A third party attests to it. At which point the useful question becomes who that party is and what they actually examined, since attestation scope varies enormously and a firm confirming addresses exist has done far less than one reconciling liabilities.
Reserves Against Audits
Worth setting the two side by side, because they are treated interchangeably and are not.
A smart contract audit examines code. It answers whether the logic does what it claims, whether the contract can be drained, whether permissions are scoped correctly. It is a correctness question.
Proof of reserves examines holdings. It answers whether the funds exist and, done properly, whether they cover what is owed. It is a solvency question.
An operator can pass one and fail the other in either direction. Immaculate contracts on a platform that has lent out its reserves is a real failure mode.
So is a fully backed operator running code nobody has reviewed. Neither document substitutes for the other, and checking what a platform actually publishes means checking for both.
The Structural Answer
Here is the point that reorganises the whole category.
Proof of reserves only means something where the operator holds player funds. The entire exercise exists to answer a question created by custody: you gave them money, do they still have it?
Remove the custody and the question disappears. A non-custodial platform where settled funds return to a wallet you control is not failing to publish an attestation, it has nothing to attest, because your balance was never in its possession to begin with.
That is a stronger position than any attestation, since a snapshot can be gamed and a self-custodied balance cannot. It is also narrower than it sounds, which the ranking below makes explicit.
Five Platforms and Where Each Stands
Ranked on how much of the solvency question each actually removes or answers.
-
Dexsport is non-custodial, so settled play returns to a wallet you hold and there is no player-fund pool for a reserve attestation to cover. Its contracts carry reviews from CertiK and Pessimistic, which answers the code question separately. The honest boundary: this covers settled funds, not money committed to an open bet, and it says nothing about terms disputes, where its Anjouan licence sits lighter than Curacao or Malta.
-
Cloudbet holds balances custodially and has traded since 2013 with its company named on a Curacao licence. A long record under a named entity is the traditional substitute for an attestation, and for many players a credible one.
-
Stake is custodial at very large scale, with market-specific licences in several jurisdictions. Scale itself functions as a solvency signal, since a business of that size has regulatory relationships that a failure to pay would forfeit.
-
BC.Game is custodial under reformed Curacao licensing, which now carries named beneficial owners on record. That naming is a meaningful improvement on the older sublicence model where the entity behind a brand was often unclear.
-
Rollbit holds balances during play with on-chain elements sitting outside the casino product, so the custody question applies in full to the casino side.
Where an operator holds your balance, the absence of any reserve disclosure is a real question, and licensing decides what recourse exists if the answer turns out badly.
Three Questions to Ask
Three questions, in order of how much they tell you.
-
Does the platform hold your balance between sessions? If not, the rest is moot
-
Has it published anything about reserves, and does that cover liabilities or only assets?
-
Is there a signature demonstrating control, or just a list of addresses?
Most crypto casinos answer none of the three. That is worth knowing before depositing, not after.
Confirm what is legal where you live, keep stakes within a set budget, and play only if you are of legal age, since KYC or AML checks may apply.
Responsible gambling connects here in a small practical way: withdrawing at the end of a session removes the solvency question entirely, whatever the operator does or does not publish.
Disclaimer: The information here is provided for general purposes only and is not legal, tax, investment, or financial advice. Custody arrangements, attestations and audit status vary by operator and change over time, so verify current disclosures directly with the platform and the attesting firm. Betting carries risk, and rules vary by country, so check the law where you live. Please gamble responsibly, within your means, and only if you are of legal age.
