Tether's KPMG Audit: A Step Forward, But the Blind Spots Remain
When KPMG signed off on Tether’s 2025 financial statements, the market breathed a collective sigh of relief. But beneath the headline of an unqualified opinion lies a more complex reality: the actual audit report remains unpublished, and the reserve buffer has been quietly shrinking. For a stablecoin that anchors over $180 billion in circulating supply, the gap between public perception and verifiable data is a vulnerability that no auditor’s signature can fully close.
Tether has long been the liquidity backbone of crypto—a quiet infrastructure layer that makes trading, lending, and payments possible. Yet its reserve transparency has been a persistent point of contention. For years, the company relied on quarterly “attestation reports” from BDO Italia, a mid-tier firm, which only confirmed a snapshot of assets on a specific date. The market demanded more: a full audit under GAAP by a Big Four firm. That demand was answered in 2026 when KPMG issued an unqualified opinion on Tether’s 2025 financial statements, marking the first time the issuer had undergone such rigorous scrutiny. According to the announcement, KPMG physically counted gold bars, tested transactions, systems, valuations, counterparties, and ownership—a clear upgrade in verification depth.
But as someone who has spent years tracing the hidden vulnerabilities in the code of DeFi protocols, I’ve learned that the absence of a public report is often more telling than its presence. The core of the matter is simple: KPMG’s audit opinion is a single statement, not a window into the full financial health of the issuer. The underlying balance sheet, income statement, and detailed KPMG report remain private. Market participants are left to rely on Tether’s own summary of the results—a summary that, by design, highlights the positive while sanding down the edges. This is not a criticism of KPMG’s work; it is a structural limitation of how audit results are disclosed in this industry.
Digging into the numbers, the most concerning signal is the reserve buffer. According to the 2025 year-end attestation, Tether’s excess reserves stood at $6.814 billion—a comfortable cushion. But by the second quarter of 2026, that buffer had fallen to $4.11 billion, a decline of nearly 50% in just six months. During the same period, USDT supply increased by approximately $446 million. This means that the per-unit safety margin—the buffer protecting each token against a sudden redemption wave—is thinning. In my experience auditing the liquidation engines of MakerDAO years ago, I learned that a shrinking buffer combined with opaque asset quality is a recipe for panic when volatility strikes. The buffer is not just a number; it is the first line of defense against a bank run. And it is getting smaller, even as the system grows.
Equally telling is the shift in reserve disclosure. In the Q2 2026 attestation, Tether removed the dollar-denominated valuation of its gold holdings and stopped reporting the bitcoin valuation altogether. This is a step backward in transparency. Gold and bitcoin have been part of Tether’s reserve narrative for years, adding a diversifying, non-correlated layer. But under the GENIUS Act—the U.S. stablecoin regulatory framework that is gaining traction—both gold and bitcoin are not considered qualified reserves. The timing of this disclosure change suggests Tether is quietly recalibrating its reserve composition to align with regulatory expectations, without explicitly stating that it is doing so. Quietly securing the layers beneath the hype means making adjustments that satisfy watchdogs, but the market is left to guess whether the underlying asset quality has changed.
The contrarian angle here is that KPMG’s audit, while a milestone, does not address the most critical risk: regulatory compliance. The USDT token remains non-compliant with the GENIUS Act, which requires stablecoin issuers to hold only U.S. Treasury bills, cash, and cash equivalents. Tether has launched a separate token, USAT, through Anchorage Digital, specifically for the U.S. market, and has hired KPMG and PwC to prepare its American infrastructure. This dual-track strategy—USAT for the U.S., USDT for the rest of the world—is a pragmatic hedge. But it also means that the core USDT, the one that underpins most of the market, still operates outside the regulatory perimeter. The audit does not change that. If the U.S. enforces its rules, the liquidity shift could be abrupt, and the reserve buffer may not be enough.
Building trust through rigorous, unseen diligence requires more than a year-end audit. It requires ongoing, verifiable disclosure. The market’s current relief may be premature. The real vulnerability is not that KPMG audited, but that the audit results are interpreted as a seal of approval for USDT’s regulatory status. They are not. The reserve buffer is declining, the disclosure is narrowing, and the regulatory clock is ticking. The next crisis won’t be triggered by a missing audit; it will be triggered by a sudden change in market confidence. And when that happens, the only thing that matters is whether the reserves are as solid as the summary claims.
So, the question remains: Is the market ready to rely on an opaque buffer, or will it demand to see the full picture? The answer will determine the stability of the entire crypto economy.