Stablecoin Reserve Audits: Transparency and Attestation Compared

Reserve Transparency at a Glance

Every fiat-backed stablecoin makes the same basic promise: one token equals one dollar in reserves. The credibility of that promise depends entirely on how the issuer proves it. Some publish monthly attestations from Big Four accounting firms. Others release quarterly snapshots from smaller auditors. One major issuer has never completed a full financial audit.

The following table summarizes the current state of reserve transparency across the largest stablecoin issuers, covering audit frequency, auditor identity, report type, and regulatory oversight.

For a broader comparison of stablecoin features beyond transparency, see our stablecoin comparison tool.

Attestation vs. Audit: Why the Distinction Matters

The stablecoin industry frequently uses "audit" as shorthand for any third-party reserve verification. This is misleading. In accounting terms, an attestation and a full audit are fundamentally different engagements with different scopes, standards, and levels of assurance.

An attestation (formally, an examination-level engagement under AICPA AT-C standards) confirms a narrow assertion: that the reported reserve balance matches or exceeds the circulating token supply at a specific point in time. It does not test internal controls, examine custody arrangements, evaluate counterparty risk, or provide a going-concern opinion.

A full financial audit (under GAAS or PCAOB standards) covers the complete financial statements of the issuer, tests internal controls, examines asset custody and segregation, and provides an opinion on whether the statements fairly present the entity's financial position. As of mid-2026, no major stablecoin issuer has published a completed full GAAP audit specifically of its stablecoin reserves. Tether announced a Big Four engagement in March 2026, but results have not yet been published.

Key distinction: An attestation confirms a snapshot balance. An audit evaluates whether the systems, controls, and processes that manage reserves are sound. The GENIUS Act now requires annual GAAP audits for issuers with more than $50 billion in outstanding tokens.

Issuer-by-Issuer Breakdown

Circle (USDC)

Circle publishes monthly attestation reports performed by Deloitte & Touche LLP under AICPA attestation standards. These reports have been published continuously since October 2018. Before Deloitte took over in 2022, Grant Thornton performed the attestations.

Reserve composition is disclosed at a granular level: as of mid-2025, approximately 51% in repurchase agreements, 34% in U.S. Treasuries, 14% in bank deposits, and 1% in other instruments. The majority of reserves sit in the Circle Reserve Fund (ticker: USDXX), an SEC-registered 2a-7 government money market fund managed by BlackRock and held at BNY Mellon. Because USDXX is an SEC-regulated fund, it files daily portfolio holdings via Form N-MFP, making reserve data available on EDGAR between monthly attestations.

Circle completed its IPO on the NYSE (ticker: CRCL) in June 2025, bringing the company under full SEC reporting requirements and annual PCAOB-standard audits by Deloitte. S&P Global rated USDC "2 (Strong)" in its December 2025 stablecoin stability assessment.

Tether (USDT)

Tether publishes quarterly attestation reports performed by BDO Italia. These are agreed-upon-procedures engagements: they confirm reserve figures on a single snapshot date without testing internal controls or custody arrangements. The quarterly cadence is the slowest among the issuers covered here.

Reserve composition disclosure is moderately granular. As of Q3 2025, Tether reported approximately 80-84% in U.S. Treasuries (direct and via money market funds and repos), 4-6% in secured loans, 4-5% in Bitcoin (~$9.9 billion), 3-4% in gold (~$12.9 billion), with the remainder in corporate bonds and other investments. Total U.S. Treasury exposure reached roughly $135 billion, placing Tether among the largest holders of U.S. government debt globally.

Tether has a significant enforcement history. The CFTC levied a $41 million civil penalty in October 2021 after finding that Tether held sufficient fiat reserves only 27.6% of days during a 26-month sample period (2016-2018). Separately, Tether paid $18.5 million to the New York Attorney General in February 2021 over reserve misrepresentation and commingling of funds with Bitfinex. In March 2026, Tether announced engagement of an unnamed Big Four accounting firm to perform a full financial statement audit, which would be a first for the company if completed.

Paxos (PYUSD / USDP)

Paxos publishes monthly attestation reports for each of its stablecoin products (PYUSD, USDP, and the newer USDG). Since February 2025, these reports are performed by KPMG LLP, replacing the previous auditor WithumSmith+Brown. The transition to a Big Four firm was approved by the NYDFS.

Paxos maintains the most conservative reserve composition among major issuers: exclusively cash at FDIC-insured banks, short-duration U.S. Treasury bills (under 90 days maturity), and overnight reverse repurchase agreements collateralized by Treasuries. No commercial paper, corporate bonds, or crypto assets. Reserves for each stablecoin product are held in separate trust accounts and are never commingled with Paxos corporate funds.

Operating under a NYDFS limited-purpose trust company charter since 2015, Paxos is subject to bank-grade regulatory examination, fiduciary obligations, and segregated customer asset requirements. In addition to public monthly attestations, Paxos submits quarterly supervisory reports directly to the NYDFS.

First Digital (FDUSD)

First Digital publishes monthly reserve verifications through Prescient Assurance. As of March 2025, reported reserves totaled approximately $2.05 billion, exceeding circulating supply. Composition skews toward U.S. Treasuries (roughly 85%), with the remainder split between overnight repos and cash held at banks in Hong Kong, Switzerland, and Australia.

FDUSD faced a significant trust crisis in April 2025 when Justin Sun publicly alleged the issuer was "effectively insolvent," causing FDUSD to depeg briefly to approximately $0.87. The allegations actually related to First Digital Trust's separate custody of TUSD reserves, where $456 million had been frozen in illiquid investments. FDUSD itself recovered within a day after processing $25.8 million in redemptions, but the episode highlighted the reputational contagion risk when a custodian manages multiple stablecoin products.

Sky Protocol (USDS / DAI)

DAI and its successor USDS take a fundamentally different approach to transparency. As overcollateralized, crypto-backed stablecoins, all collateral positions are visible on-chain in real time. Anyone can inspect vault health, collateral ratios, and Peg Stability Module balances through blockchain explorers without waiting for a third-party report.

The tradeoff is that Sky Protocol's growing allocation to real-world assets (tokenized U.S. Treasuries via Monetalis and BlockTower, exceeding $1.5 billion in early 2026) introduces the same off-chain trust assumptions as fiat-backed models. These RWA positions cannot be verified on-chain with the same certainty as crypto collateral.

Reserve Composition Compared

What backs a stablecoin reserve matters as much as how often it is reported. U.S. Treasury bills are the gold standard for reserve quality: highly liquid, virtually zero credit risk, and subject to minimal duration risk. Cash deposits at banks are safe up to FDIC limits but carry counterparty exposure. Commercial paper, secured loans, and crypto assets introduce progressively higher risk.

Paxos stands out for explicitly excluding all non-government assets from reserves. Tether holds the broadest mix, including Bitcoin, gold, and secured loans alongside Treasuries. Circle's reserves sit primarily in an SEC-regulated money market fund, adding a layer of regulatory oversight to the assets themselves. For a deeper analysis of how these reserve structures affect peg stability, see our research on stablecoin peg mechanisms compared.

Regulatory Requirements for Reserve Transparency

Two major regulatory frameworks now set explicit standards for stablecoin reserve disclosure.

The U.S. GENIUS Act, signed into law on July 18, 2025, requires stablecoin issuers to publish monthly reserve composition reports on their websites, obtain monthly examinations by a registered public accounting firm, and secure CEO and CFO certifications of report accuracy. Issuers with more than $50 billion in outstanding tokens must also produce annual GAAP financial statements audited under PCAOB standards. Reserves must be segregated from operational funds, and rehypothecation is explicitly prohibited. The $10 billion threshold separates federally supervised issuers from those operating under certified state regimes.

The EU's MiCA regulation, with stablecoin provisions effective since June 30, 2024, requires daily reconciliation, quarterly attestation reports from independent auditors, and annual reserve composition disclosures. Tether has not obtained MiCA licensing, leading to USDT delistings from EU-based exchanges including Binance EU and Coinbase EU. Circle holds an Electronic Money Institution license via its French subsidiary.

The AICPA published updated stablecoin reporting criteria in two parts: Part I (March 2025) covering reserve presentation and disclosure standards, and Part II (January 2026) establishing 15 controls criteria (SC1-SC15) spanning token lifecycle management, reserve operations, vendor oversight, and cryptographic key management. These criteria are designed to serve as the "suitable criteria" for attestation engagements under the GENIUS Act.

Proof of Reserves: On-Chain vs. Off-Chain

Proof of reserves means different things depending on the asset type. For crypto-collateralized stablecoins like DAI/USDS, reserves are natively on-chain: anyone can verify collateral balances, vault health, and liquidation thresholds in real time through blockchain explorers.

For fiat-backed stablecoins, the assets (bank deposits, Treasury bills) exist off-chain and cannot be cryptographically proven on-chain. Verification depends entirely on third-party attestations. Some issuers have explored Chainlink Proof of Reserve oracle feeds to bring attestation data on-chain, but these feeds only relay information from off-chain sources: they prove data consistency, not reserve existence. The integrity of the system still depends on the accounting firm and the data it receives from the issuer.

Circle offers a middle path through its SEC-registered money market fund structure. Because the Circle Reserve Fund (USDXX) files daily portfolio holdings with the SEC via Form N-MFP, independent observers can access granular reserve data daily without relying solely on Circle's monthly attestation cycle. This does not constitute cryptographic proof of reserves, but it provides a higher-frequency verification channel than any other fiat-backed issuer offers.

Why Reserve Transparency Matters

Stablecoin depegging events are almost always triggered by doubts about reserve adequacy. When Silicon Valley Bank collapsed in March 2023, USDC depegged to $0.87 because Circle held $3.3 billion at SVB. The peg recovered after the FDIC backstopped deposits. When Justin Sun alleged First Digital insolvency in April 2025, FDUSD depegged to $0.87 despite the allegations relating to a different product entirely. These episodes demonstrate that transparency is not just a compliance checkbox: it is the mechanism that prevents bank-run dynamics in stablecoin markets.

For institutions, transparency determines whether a stablecoin can be used for treasury management, payment settlement, and corporate treasury operations. For developers building on stablecoins, the quality of reserve backing affects the systemic risk profile of any protocol that depends on that stablecoin as collateral. Bitcoin-native stablecoins like USDB on Spark bring stablecoin utility to the Bitcoin ecosystem, and their reserve transparency standards directly impact trust within that network.

Frequently Asked Questions

What is the difference between a stablecoin audit and an attestation?

An attestation is a narrow engagement where an accounting firm confirms that reserve balances match or exceed circulating supply at a specific point in time, performed under AICPA AT-C standards. A full audit (under GAAS or PCAOB standards) evaluates complete financial statements, tests internal controls, examines custody arrangements, and provides a going-concern opinion. Every major stablecoin issuer currently publishes attestations, not full reserve audits. The GENIUS Act requires annual GAAP audits only for issuers above $50 billion in outstanding tokens.

Which stablecoin has the most transparent reserves?

USDC offers the strongest combination of attestation frequency (monthly), auditor reputation (Deloitte), regulatory oversight (FinCEN, NYDFS, MiCA, pending OCC charter), and reserve visibility (daily SEC filings via the BlackRock-managed Circle Reserve Fund). S&P Global rated USDC "2 (Strong)" in its December 2025 assessment. For fully on-chain transparency, DAI/USDS allows real-time collateral verification, though its growing RWA allocation introduces off-chain trust assumptions.

Has Tether ever been fully audited?

No. As of mid-2026, Tether has never published a completed full financial audit of its reserves. Its quarterly reports from BDO Italia are agreed-upon-procedures attestations, not audits. In March 2026, Tether announced engagement of an unnamed Big Four accounting firm to perform a full financial statement audit, but the results have not been published. The CFTC found in 2021 that Tether held sufficient fiat reserves only 27.6% of days during a 26-month sample period from 2016 to 2018.

What does the GENIUS Act require for stablecoin reserve reporting?

The GENIUS Act (signed July 18, 2025) requires monthly public reserve composition reports, monthly examinations by a registered accounting firm, CEO and CFO certifications of accuracy, and segregation of reserves from operational funds. Issuers with more than $50 billion outstanding must also produce annual GAAP financial statements audited under PCAOB standards. Rehypothecation of reserves is prohibited. Issuers above $10 billion must be federally supervised.

What is proof of reserves for stablecoins?

For crypto-collateralized stablecoins like DAI, proof of reserves means on-chain verification: anyone can inspect collateral in smart contracts in real time. For fiat-backed stablecoins, reserves are off-chain (bank accounts, Treasury bills) and cannot be cryptographically proven. "Proof of reserves" in this context refers to third-party attestations and, in some cases, Chainlink oracle feeds that relay off-chain data on-chain. These feeds verify data consistency but still depend on the integrity of the accounting firm's examination.

How often does Circle publish USDC reserve reports?

Circle publishes monthly attestation reports performed by Deloitte. Between attestation cycles, the Circle Reserve Fund (USDXX) files daily portfolio holdings with the SEC via Form N-MFP, providing a higher-frequency verification channel than most fiat-backed stablecoins offer. As a publicly traded company (NYSE: CRCL since June 2025), Circle also files quarterly and annual SEC reports that include audited financial data.

Are stablecoin reserves FDIC insured?

Stablecoin tokens themselves are not FDIC insured. However, the cash portion of reserves held at FDIC-insured banks may be covered up to the standard $250,000 per depositor limit. Issuers like Paxos explicitly hold cash at FDIC-insured institutions. The bulk of most issuers' reserves are in U.S. Treasury securities and repos, which are not bank deposits and therefore fall outside FDIC coverage entirely.

This tool is for informational purposes only and does not constitute financial advice. Reserve data is approximate and based on publicly available attestation reports and regulatory filings. Audit frequencies, reserve compositions, and regulatory statuses change frequently. Always verify current data on each issuer's transparency page before making decisions.