Over the past decade, Tether has weathered over $60 million in regulatory fines, a New York Attorney General investigation, and countless accusations of opaque reserve management. Now, for the first time in its history, it claims to have received a clean audit opinion from KPMG U.S. on its El Salvador-issued entity's financial statements for the year ended December 31, 2025. But here's the rub: the audit report and the financial statements remain unpublished. We have a sealed verdict, but no evidence to examine.
This is not a story of triumphant transparency. It's a story of a carefully choreographed trust exercise—one that tests the limits of what we, as a community, are willing to accept as proof of solvency.
Context: The Last Mile of Transparency
Tether International, S.A. de C.V., the El Salvador-registered entity that issues USDT, has been audited by KPMG U.S. under the American Institute of CPAs (AICPA) standards. The audit resulted in an unqualified opinion—the highest level of assurance a private company can receive. But the auditing standards used are not the Public Company Accounting Oversight Board (PCAOB) standards required by the U.S. GENIUS Act for licensed stablecoin issuers. The choice of AICPA over PCAOB is a deliberate one: it allows Tether to claim third-party validation while avoiding the stricter oversight, mandatory internal control audits, and regulatory inspection that come with PCAOB.
El Salvador, the jurisdiction of this audit, is a Bitcoin-friendly nation with no legal obligation to enforce PCAOB standards. By placing the issuing entity there, Tether gains a compliant facade while keeping a strategic distance from U.S. federal oversight. The audit covers only the El Salvador entity, not the entire Tether group—not Tether Holdings Limited in the British Virgin Islands, not the operational subsidiaries. The group's consolidated financial position remains a black box.
Core: What the Audit Actually Says (and Doesn't)
Based on my experience auditing DeFi projects during the 2020 crash, I've learned that a clean audit opinion without the underlying report is like a safe with the combination locked inside. The audit itself is a positive signal: KPMG, a Big Four firm, would not stake its reputation on a client with hopelessly messy books. The fact that Tether could prepare financial statements that passed muster suggests a significant improvement in its accounting systems. However, the audit's scope and standards raise critical questions.
First, the AICPA vs. PCAOB gap is not just a technicality. PCAOB audits require the auditor to opine on the effectiveness of internal controls over financial reporting (AS 2201). AICPA audits, while rigorous, do not mandate the same level of scrutiny. This means KPMG did not have to certify that Tether's internal controls are designed to prevent fraud or misstatement—a key concern for a company that has historically moved funds between Tether and Bitfinex without transparent disclosure.
Second, the audit covers only the El Salvador entity's 2025 financial statements. It does not address the billions of dollars in USDT circulating on-chain, nor does it reconcile the on-chain supply with the audited reserves. Without a public proof-of-reserves methodology that ties the on-chain token count to the audited balance sheet, the audit remains a paper exercise, not a cryptographic one.
Third, Tether has not released the audit report or the opinion letter. The announcement itself is a press release, not a document. In the crypto world, where trust is the only protocol that matters, withholding the primary evidence of trust is a contradiction. It's like a zk-proof that only the prover can see.
Contrarian: The Marketing Audit
Let me offer a counter-intuitive perspective: this audit might be more about crisis management than genuine transparency. The timing is conspicuous. The GENIUS Act is progressing through Congress, and stablecoin issuers are jockeying for position. Tether, facing the threat of being excluded from the U.S. licensed market, needs to demonstrate that it is a responsible actor. A clean audit—even under AICPA standards—sends a signal to regulators that Tether is willing to submit to external scrutiny. But the missing report is a self-inflicted wound that undermines the signal.
Code is law, but people are the context. The context here is that Tether has a long history of promising transparency and delivering half-measures. In 2019, it claimed to have a full audit “in progress.” In 2021, it published a reserve breakdown that was later criticized for lacking detail. This time, the audit is real, but the withholding of the report suggests that the company is still managing information rather than empowering the community to verify. Community over coin, always—but community requires access to the same data that the auditor saw.
Another blind spot: the audit does not address the relationship between Tether and Bitfinex. The two entities share ownership and have a history of intercompany loans. The New York Attorney General's 2021 settlement revealed that Tether had lent reserves to Bitfinex to cover a $850 million loss. An audit of a single entity does not capture the systemic risk of the group. The real test of solvency is whether Tether can withstand a coordinated redemption event while maintaining all its obligations to affiliates.
Takeaway: The Next Chapter
This audit is a milestone—but not the finish line. Tether has taken a step toward credibility, but it has not closed the transparency gap. The market will now watch for the release of the full report. If it comes within weeks, with clear disclosures on reserve composition, counterparty risk, and related-party transactions, the trust deficit will narrow. If it never comes, this will be remembered as a marketing audit, not a compliance audit.
For the industry, the lesson is that trust is a continuous process, not a single event. We need a standard where every stablecoin issuer, regardless of jurisdiction, submits to PCAOB-level audits and publishes the full results. Until then, the community must remain vigilant. Trust is the only protocol that matters—but protocols need to be verified, not just announced.
What happens next will define whether Tether evolves into a true pillar of the ecosystem or remains its most powerful ghost. The choice is theirs. The scrutiny is ours.
