In 2017, I spent four months auditing the smart contracts of a flashy ICO called EtherTrust. I found a reentrancy vulnerability that could have drained $4.2 million from users. I published the full technical report, not for profit, but because I believed that trust in decentralized systems must be built on radical transparency. That decision cost me a lucrative consulting contract, but it cemented a principle I still carry: conscience over consensus.
Now, in 2025, Tether—the behemoth of stablecoins—announced that KPMG US had delivered a full, unqualified audit opinion on its 2025 fiscal year. The result: reserves exceed liabilities by $6.814 billion. The CEO, Paolo Ardoino, called it a “historic milestone.” The CFO, Simon McWilliams, promised this is just the beginning of a new transparency standard. The crypto market cheered. But after a decade of watching this space, I see a more nuanced story—one where the gap between spectacle and substance remains wide.
You can’t move a single USDT without relying on Tether’s centralised promise. They issue the tokens, they manage the reserves, they decide who gets blacklisted. The KPMG audit is a traditional financial audit, not a blockchain-native proof-of-reserves. It confirms that on a single day—December 31, 2025—Tether’s balance sheet showed a healthy surplus. It does not confirm that the reserves are liquid, that the composition is safe, or that the company hasn’t taken on hidden risks. The physical verification of each gold bar is a nice touch, but what about the billions in commercial paper, treasury bills, and corporate loans? We don’t know their maturity, their counterparty risk, or their real-world marketability.
The core insight is this: the audit is a leap in credibility, but it’s a leap into the same old pool of centralised trust. Tether is still a private company with a black-box governance structure. No token holders vote on anything. No on-chain mechanism verifies reserves in real time. The audit is a snapshot, not a live feed. In a bull market where euphoria often masks technical flaws, this distinction matters. The market may treat the KPMG seal as a full guarantee, but it’s no substitute for the kind of transparency that DeFi was built on—the kind that uses Merkle trees, zero-knowledge proofs, and smart contracts to let anyone verify the system’s health at any moment.
Let me be contrarian here: this audit might actually increase systemic risk. By giving regulators and institutions a warm, familiar stamp of approval, Tether may be able to deepen its integration into the global financial system without addressing the underlying structural fragilities. The $6.8 billion surplus sounds reassuring, but it’s an accounting number. If a sudden panic triggers a massive redemption wave, the real liquidity of those reserves—especially the gold and the less liquid assets—could be far lower. The last time we saw a stablecoin depeg, it was because of a concentration of risk in a single asset class. Tether’s books are opaque enough that we can’t run a stress test from the outside. That’s not transparency; it’s a trust fall.
Trust is earned, not mined. That’s a phrase I’ve used in my “Values First” curriculum for institutional investors. Tether has earned some trust by finally getting a Big Four audit, but it’s far from fully mined. The real test will come when the next bear market hits, or when a regulator decides to dig deeper into the company’s counterparty relationships. The audit is a necessary condition for Tether’s survival, but it’s not a sufficient one. The industry needs more than a once-a-year stamp of approval. It needs continuous, on-chain, verifiable proof that the reserves are always there.
I’ve been in this industry long enough to see the pattern: a major player announces a step toward transparency, the market rallies, and then the community forgets to ask the hard questions. The KPMG audit is a good step, but it’s not a destination. Soul in the machine—that’s what we need. The soul of a system that is open, auditable, and resilient by design, not by press release. Until Tether publishes its full reserve composition, commits to a monthly real-time proof-of-reserves using cryptographic tools, and opens its governance to a wider set of stakeholders, the KPMG audit will remain a beautiful photo of a house that could still be built on sand.
So what’s the takeaway? Don’t let the KPMG seal lull you into complacency. The bull market rewards narratives, but the bear market punishes structural weaknesses. If you hold USDT, ask yourself: what would happen if the next audit didn’t come? What if the regulator demands a full breakdown of the reserve portfolio? The answer is that Tether’s current model is still a centralised black box with a cleaner window. That’s an improvement, but it’s not the revolution. True decentralization requires that we replace the need for trust with verifiable code. Until then, every stablecoin—even with a Big Four audit—is a promise, not a proof. And as I learned from the EtherTrust saga, a promise is only as strong as the integrity of the people who make it.
Conscience over consensus. The industry consensus is that this audit is a win. My conscience tells me we’ve won a battle, but the war for a truly transparent, resilient financial system is far from over.