Attestation or Audit: Reading a Stablecoin Report

Issuers publish reserve reports from accounting firms at regular intervals. These are attestation engagements, and the distinction from an audit is not pedantic — it determines which questions were asked, over what period, and what the accountant is professionally on the hook for.

What an attestation is

An attestation engagement examines a specific assertion made by management and reports whether it is fairly stated. The assertion is usually narrow: that reserves at a stated moment totalled a stated amount, held in stated categories.

That is genuinely useful. An independent firm has confirmed the assets exist and are held where management says, and its professional reputation is attached to that confirmation.

The limits are structural rather than a matter of effort. It is a point in time, not a period. It covers the assertion presented, not the questions management did not put. And it does not extend to the issuer's obligations, its other liabilities, or whether it can continue operating.

What an audit would add

A financial statement audit examines the whole picture: assets and liabilities of every kind, related-party transactions, the controls that produce the numbers, and an explicit assessment of whether the entity can continue as a going concern.

For a stablecoin issuer that difference is precisely the interesting part. An attestation showing reserves equal to tokens in circulation says nothing about money the issuer owes elsewhere, and an issuer can be fully reserved against its tokens and insolvent because of obligations no attestation examined.

The reason issuers publish attestations rather than audits is partly cost and timing — an audit is annual and slow, an attestation can be monthly — and partly that an audit is a much larger commitment. Both explanations are true and the gap is real either way.

The five things to check in any report

The report date and what it covers. A single date is a snapshot, and the useful question is whether reporting is frequent and whether the dates are predictable. Predictable dates are easier to prepare for.

The scope paragraph, which is where the accountant states what they did and did not examine. It is the most informative part of the document and the least read.

Whether liabilities appear at all. Most reports state tokens in circulation from management records rather than examining what the issuer owes more broadly.

The composition breakdown and its granularity. A category labelled other, or one grouping several instrument types, is where the questions live.

Who signed it, and whether the same firm signs consistently. A change of firm without explanation is a fact worth noticing.

What regulation changes

Where comprehensive stablecoin regimes exist, they impose reserve, segregation and reporting requirements directly, backed by supervision rather than by voluntary publication.

That is a materially different arrangement: a supervisor with examination powers is not the same as an accountant engaged by management, and the requirements apply continuously rather than at reporting dates.

It is also why the compliance pillar carries real weight for stablecoins specifically. For a non-custodial protocol, asking which regulator supervises it is close to a category error. For an instrument whose entire value is a redemption promise by a named entity, it is the question.

• Read the scope paragraph before the headline figure.
• Establish whether liabilities were examined or merely reported by management.
• Check reporting frequency and whether dates are predictable enough to be prepared for.
• Look for granularity in the composition table, and treat aggregated categories as unanswered questions.
• Note whether a supervisory regime applies, which changes the nature of the assurance entirely.