Hook
KPMG signed off on Tether’s 2025 financial statements. The headline reads like a victory lap for the world’s largest stablecoin issuer. But the signature is a seal of accounting, not a guarantee of solvency. The ledger remembers what the code forgot: audits verify historical numbers, not future liquidity. Between the press release and the unqualified opinion lies a gap that technical investors must dissect.
Context
Tether has been the backbone of crypto liquidity since 2014. USDT commands over $120 billion in market capitalization, spanning Ethereum, Tron, Solana, and 15 other chains. For years, the company faced relentless skepticism over its reserve backing. Attestations from accounting firms like BDO and Friedman LLP provided partial assurance, but never a full audit. The 2025 KPMG engagement marks the first time a Big Four firm has issued an unqualified opinion on Tether’s consolidated financial statements.
Yet the announcement came with caveats. Tether’s CEO Paolo Ardoino framed it as “the largest inaugural financial audit in history.” The report itself is not publicly available in full. The scope covers Tether Holdings Limited’s financial position as of December 31, 2025, under International Financial Reporting Standards (IFRS). It does not cover the smart contracts, the multi-chain issuance mechanisms, or the real-time reconciliation of USDT in circulation against reserves.
Core
Financial audits and technical audits serve different masters. A financial audit confirms that a company’s books are free of material misstatement. It does not verify that the code backing the digital token is secure, that the reserves are liquid during a market crash, or that the chain-specific contracts are free of reentrancy bugs. In my years auditing Layer 2 rollups and DeFi protocols, I have learned that accounting assumptions break under cryptographic stress.
Let me walk through the technical layers that the KPMG audit does not touch.
First, the on-chain issuance. USDT is minted through centralized contracts on each chain. The Tether treasury can inflate the supply at will. The audit confirms that the liabilities (USDT in circulation) match the assets on the balance sheet. But the balance sheet is a snapshot at a single point in time. The daily reconciliation between chain balances and the master ledger is opaque. Tether publishes a daily reserve breakdown, but the methodology for calculating the ‘total assets’ includes the market value of corporate bonds, commercial paper, and cash equivalents. The illiquidity of these assets during a bank run is a known risk.
Second, the reserve composition. The 2025 audit likely includes a breakdown of assets by category, but the press release did not disclose the percentage of commercial paper, secured loans, or Bitcoin holdings. In 2022, after the collapse of FTX, Tether reduced its commercial paper holdings to zero. But the shift to Bitcoin and corporate bonds introduces volatility. The audit does not stress-test the reserves under a 90% drawdown scenario.
Third, the multi-chain fragmentation. USDT exists on Ethereum (ERC-20), Tron (TRC-20), Solana (SPL), and others. Each chain has its own smart contract, its own bridge, and its own risk profile. The KPMG audit covers the consolidated entity. It does not verify that the contract on Solana has the same security posture as the one on Ethereum. In 2023, I audited a cross-chain bridge that held USDT in a liquidity pool; the contract had a single admin key that could drain the entire balance. Tether’s contracts are similarly centralized. The audit does not address that.
Fourth, the redemption mechanism. USDT holders can redeem through verified partners, but retail users rely on exchanges. The audit does not test the end-to-end redemption flow. In a stress scenario, the five-day settlement window and the KYC requirements could bottleneck withdrawals. The last time USDT traded below $0.95 was in March 2020, during the COVID crash. The reserves held up, but the peg recovered only after the Fed intervened. The audit does not model such tail risks.
Contrarian Angle
The KPMG audit is a positive signal for institutional adoption. Pension funds, mutual funds, and corporate treasuries now have a Big Four stamp on Tether’s books. This could unlock billions of dollars in new investment into crypto markets. But the contrarian truth is that the audit may create a false sense of security.
I have seen this pattern before. In 2018, during the ICO aftermath, I audited the 0x Protocol v2 smart contracts. The project had a clean financial audit from a mid-tier firm, but the code contained seven reentrancy vulnerabilities. The market assumed the audit meant the project was safe. It was not. The financial audit addressed the balance sheet, not the execution environment.
Tether’s case is similar. The KPMG audit verifies that the company’s financial statements are accurate. It does not verify that the USDT token is backed by dollar-equivalent assets at all times, because the backing is a function of market prices and redemption requests. The audit is a point-in-time verification, not a continuous guarantee.
Moreover, the audit standard (IFRS) allows for significant judgment in asset valuation. Corporate bonds can be marked to model, not to market. Bitcoin holdings are recorded at market value, but the impairment rules under IFRS are one-way: if the price drops, the asset is written down; if it recovers, the gain is not recognized until sold. This creates a gap between the reported reserves and the actual liquidation value.
Another blind spot: the audit does not cover the operational security of the issuance process. Tether’s treasury team has the power to mint USDT on any chain at any time. The audit checks that the total issued and outstanding match the records, but it does not verify that the minting process is protected against internal fraud. In 2024, I led a team auditing a Layer 2 rollup’s dispute resolution logic. We found a bug that could allow a malicious sequencer to manipulate state roots. The team behind the project had a clean financial audit, but the code was flawed. The same principle applies here.
Takeaway
Stability is engineered, not emergent. Tether’s KPMG audit is a step toward transparency, but it does not eliminate the fundamental risks of a centralized stablecoin. The next time USDT faces a bank run, the audit will not help. The only thing that will is the willingness of Tether to redeem at par, and the liquidity of the underlying assets. The ledger remembers what the code forgot: audits are historical, safety is continuous.
For technical investors, the takeaway is clear. Do not mistake a financial audit for a security audit. Do not assume that the reserves are liquid because the books are balanced. The real test will come when the market stops trusting the price of the peg. Until then, the KPMG stamp is a milestone, not a silver bullet.
_Postscript: Based on my experience auditing DeFi protocols during the 2020 liquidity stress tests, I have seen how financial audits can mask technical fragility. The only way to trust a stablecoin is to verify the reserves, the smart contracts, and the redemption logic independently. Tether's audit is a start, but the work is far from done._