Stablecoin Attestation

What Is a Stablecoin Attestation?

A stablecoin attestation is a formal report issued by an independent, licensed accounting firm that verifies whether a stablecoin issuer holds sufficient reserve assets to back every token in circulation. The issuer publishes a management assertion: "On this date, the fair value of our reserves equaled or exceeded the value of tokens outstanding." The accounting firm then performs procedures to test that claim and publishes an opinion on whether it is fairly stated.

Unlike a full financial audit, an attestation is narrow in scope. It answers one question: are the reserves there? It does not evaluate the issuer's profitability, solvency, internal controls, legal liabilities, or broader financial condition. This focused approach allows attestations to be performed monthly rather than annually, giving token holders more frequent visibility into reserve backing.

Stablecoin attestations are performed under AICPA AT-C Section 205 (Assertion-Based Examination Engagements), which provides "reasonable assurance": the highest level of confidence available in attestation engagements. In March 2025, the AICPA published its "2025 Criteria for Stablecoin Reporting," a standardized framework covering reserve composition, token population, redemption terms, and custody arrangements.

Attestation vs. Full Audit

The distinction between an attestation and a full audit is critical to understanding what these reports actually prove. Both are performed by independent accounting firms, but they differ in scope, depth, and frequency.

An attestation confirms a snapshot. A full audit examines a movie. Both serve important roles: attestations provide frequent transparency, while audits provide deeper assurance about an issuer's overall financial integrity. Some issuers now provide both: Tether completed its first Big Four annual audit by KPMG in 2026 while continuing to publish quarterly attestations through BDO Italia.

How It Works

A stablecoin attestation follows a structured process governed by professional accounting standards.

1. The stablecoin issuer selects a reporting date and prepares a management assertion stating the total value of reserve assets and total tokens in circulation as of that date
2. The independent CPA firm obtains evidence: bank statements, custodian confirmations, asset management reports, and on-chain data showing circulating supply across all authorized blockchains
3. The firm performs examination procedures under AICPA AT-C Section 205 to test whether the management assertion is fairly stated
4. The firm issues an examination report with its opinion: typically that the assertion is "fairly stated, in all material respects"
5. The issuer publishes the report on its website, making it available to token holders and regulators

What Reports Contain

A typical attestation report discloses several categories of information:

• Total outstanding token supply across all blockchains where the stablecoin is minted
• Total fair value of reserve assets at the snapshot date
• Reserve composition breakdown by category: cash at regulated financial institutions, U.S. Treasury bills, reverse repurchase agreements, money market fund shares, and other qualifying assets
• Over-collateralization or under-collateralization comparison showing whether reserves equal or exceed circulation
• Counterparty and custodian details for each reserve asset category

Circle's monthly USDC reports, for example, include individual CUSIP numbers and maturity dates for each Treasury bill held, plus a list of U.S. financial institutions holding cash reserves. This level of granularity allows anyone to independently verify the composition and quality of the reserve portfolio.

Example Report Structure

Stablecoin Attestation Report — [Date]
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Management Assertion:
  "As of [Date], the fair value of assets held in
   reserve equals or exceeds the total USDC in
   circulation across all supported blockchains."

Tokens Outstanding:
  Ethereum .............. 25,400,000,000 USDC
  Solana ................  5,200,000,000 USDC
  Base ..................  3,100,000,000 USDC
  Other chains ..........  1,300,000,000 USDC
  ─────────────────────────────────────
  Total .................  35,000,000,000 USDC

Reserve Composition (Fair Value):
  U.S. Treasury Bills ... $28,500,000,000
  Reverse Repo ..........  $4,200,000,000
  Cash at Banks .........  $2,500,000,000
  ─────────────────────────────────────
  Total Reserves ........  $35,200,000,000

Over-collateralization:     $200,000,000 (0.57%)

Opinion: Fairly stated, in all material respects.

Major Attestation Providers

As the stablecoin market has grown, the accounting firms performing attestations have shifted toward larger, more established practices.

The trend is clear: as regulatory expectations have increased, issuers have moved toward Big Four firms. Circle transitioned from Grant Thornton to Deloitte in early 2023. Paxos moved from WithumSmith+Brown to KPMG in February 2025, a change approved by the New York State Department of Financial Services. Tether, long criticized for its transparency practices, completed its first Big Four annual audit (by KPMG) covering its 2025 financials.

The GENIUS Act and Mandatory Attestations

The GENIUS Act, signed into law in July 2025 with full enforcement beginning January 2027, establishes the first comprehensive U.S. federal framework for stablecoin attestations.

Monthly Attestation Mandate

Every permitted payment stablecoin issuer must publish monthly reports disclosing:

• Total number of outstanding payment stablecoins
• Amount and composition of reserves, broken down by asset category
• Average tenor (maturity) of reserve instruments
• Geographic location of reserve custody

Each report must be examined by an independent, PCAOB-registered public accounting firm. The issuer's CEO and CFO must personally certify the accuracy of each disclosure, subject to criminal penalties under 18 U.S.C. Section 1350(c) for knowingly false certifications.

Reserve Composition Rules

The Act strictly limits what qualifies as a reserve asset:

• U.S. currency and Federal Reserve Bank balances
• Demand deposits at federally insured depository institutions
• U.S. Treasury bills with remaining maturity of 93 days or less
• Repurchase agreements with maturity of 7 days or less, collateralized by short-dated Treasuries
• SEC-registered money market fund shares investing only in qualifying assets

Reserves cannot be pledged, rehypothecated, or reused. Issuers with more than $50 billion in outstanding stablecoins must also produce audited annual financial statements under PCAOB standards.

Real-Time Attestation with Chainlink Proof of Reserve

Traditional attestations verify reserves at a single point in time: typically once per month or quarter. Between snapshots, reserves could theoretically fluctuate without visibility. Chainlink Proof of Reserve (PoR) addresses this gap by providing automated, near-real-time verification on-chain.

Chainlink PoR uses a decentralized oracle network that queries reserve accounts and publishes cryptographic attestations directly on-chain. As of mid-2026, Chainlink operates over 40 active PoR data feeds across 56 integrated projects, verifying more than $17 billion in reserve assets.

How On-Chain Attestation Works

1. A third-party accounting firm (such as The Network Firm) continuously verifies off-chain reserve balances
2. Chainlink oracles publish these verified balances on-chain, updating every 24 hours or when balances change by more than 5%
3. Smart contracts can read the on-chain PoR feed before executing operations
4. In advanced implementations like TrueUSD's Secure Mint, new tokens can only be minted when the PoR feed confirms sufficient reserves

The limitation of on-chain attestation is that it verifies data consistency, not asset existence: the oracle reports what the data source says, but it does not independently inspect vaults or bank accounts. This makes it complementary to, not a replacement for, traditional CPA attestations.

International Requirements: MiCA

The EU's Markets in Crypto-Assets regulation (MiCA) takes a different approach. Under MiCA, issuers of asset-referenced tokens and significant e-money tokens must commission an independent reserve audit every six months, with results published within weeks. MiCA also mandates daily reconciliation between reserve assets and outstanding token supply, and requires at least 30% of reserves (60% for significant tokens) to be held as deposits at credit institutions.

Use Cases

• Investor due diligence: institutional buyers use attestation reports to verify that a fiat-backed stablecoin is genuinely collateralized before acquiring large positions
• Regulatory compliance: under the GENIUS Act, monthly attestations are a legal requirement for any permitted payment stablecoin issuer operating in the United States
• DeFi protocol integration: lending protocols, DEXs, and yield platforms can reference on-chain Proof of Reserve feeds to automatically pause operations if a stablecoin's backing falls below thresholds
• Market confidence during stress events: when a depeg event occurs, up-to-date attestation reports help distinguish genuine reserve shortfalls from market-driven price dislocations
• Cross-border payment corridors: businesses settling via stablecoin payment rails rely on attestation transparency to satisfy counterparty and compliance requirements

Why It Matters

The collapse of algorithmic stablecoins like UST in 2022 demonstrated what happens when backing claims go unverified. Even among fiat-backed stablecoins, Tether faced years of scrutiny over whether its reserves truly matched its circulating supply. Attestations exist to provide independent, verifiable proof that reserves are real.

As the evolution of stablecoin proof of reserves continues, the industry is moving toward a layered transparency model: monthly CPA attestations provide the legal and regulatory baseline, on-chain Proof of Reserve feeds provide continuous monitoring, and annual audits examine the issuer's broader financial health. For stablecoin-native platforms like Spark that enable stablecoin redemption and swaps, the quality of underlying attestation directly impacts user trust.

Risks and Considerations

Snapshot Limitations

Attestations verify reserves at a single moment. An issuer could hold compliant reserves on the attestation date and deploy them differently the next day. Monthly frequency mitigates this risk but does not eliminate it. The gap between snapshots remains a window of opacity that on-chain Proof of Reserve systems aim to close.

Scope Constraints

An attestation does not evaluate whether the issuer can meet mass redemption demands, whether reserve assets are truly liquid under stress conditions, or whether the issuer faces legal claims that could encumber reserves. These questions require a full audit or specialized analysis.

Accounting Firm Risk

The quality of an attestation depends on the competence and independence of the examining firm. Smaller firms may lack the resources or expertise to properly verify complex reserve structures. The industry trend toward Big Four firms (Deloitte, KPMG) reflects growing demand for more rigorous examination standards.

On-Chain Attestation Limitations

Chainlink Proof of Reserve and similar systems verify data consistency: they confirm that the number reported by the data source matches what appears on-chain. They do not independently verify the existence of underlying assets. A compromised data source could report false balances that the oracle would faithfully publish. On-chain attestation complements, but cannot replace, independent CPA examination.

Regulatory Fragmentation

Different jurisdictions impose different standards. The GENIUS Act requires monthly attestations under AICPA standards. MiCA requires semi-annual independent audits. Issuers operating globally must navigate overlapping and sometimes conflicting requirements, increasing compliance costs and complexity.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.