Back to Editorial
    Institutional BriefCALCULATORiQ

    The Stablecoin Reserve Attestation Gap: What GENIUS, MiCA, and the HKMA Ordinance Still Leave Open

    By CALCULATORiQ™ Editorial Team//17 min read
    The Stablecoin Reserve Attestation Gap: What GENIUS, MiCA, and the HKMA Ordinance Still Leave Open
    Institutional Brief
    Tokenisation & Governance
    Executive Brief
    Institutional · CALCULATORiQ

    TL;DR

    Monthly reserve attestations tell the market what the reserves were on a single day. They do not tell the market who governs the attestation process, how the chain-of-custody on the underlying assets is controlled, or how the issuer would respond to a deviation. That gap is now the issuer's exposed surface.

    Quick Read

    Under the GENIUS Act in the United States, MiCA Title III in the European Union, the HKMA Stablecoin Ordinance in Hong Kong, and the MAS framework in Singapore, the legal status of issuers has been clarified. The continuous control plane behind the attestation has not. Listing venues, custodians, and large counterparties are the parties now demanding it.

    A credible stablecoin reserve attestation today requires four layers of governance: asset-level chain-of-custody, NAV-strike timing reconciliation, redemption-pathway resilience, and independent attestation governance. The first three are issuer-owned. The fourth is the gap most issuers still treat as the auditor's problem.

    Section · Index

    Contents

    01The four-layer attestation stack02Four obligations the auditor cannot discharge03What an issuer board should ask04Frequently asked questions05Glossary
    Section · The stack

    The four-layer attestation stack

    Behind every credible stablecoin attestation are four layers of governance. The market sees the top one. Counterparties now want evidence on all four. Reserve composition by issuer is tracked in the stablecoin issuer tracker.

    L1

    Custody bookkeeping

    Qualified custodian

    Securities-account records of the underlying T-bills, repo, or cash holdings.

    L2

    Rebalance authority

    Issuer treasury

    Authority chain and tested controls around moving reserves between sleeves and counterparties.

    L3

    Attestation engagement

    External auditor

    Point-in-time auditor report under SSAE 18 or ISAE 3000.

    Above the rail
    L4

    Attestation governance

    Issuer-owned control plane

    Continuous control evidence between attestation dates, including audit-engagement-letter scope challenge, counterparty risk monitoring, and bridge-derivative disclosure governance.

    Section · Issuer-owned

    Four obligations the auditor cannot discharge

    01

    Asset-level chain-of-custody

    Granular custodian-by-custodian, account-by-account reconciliation, not aggregate reserve totals.

    GENIUSMiCA III
    02

    NAV-strike timing reconciliation

    The strike used in the attestation must reconcile to on-chain redemption commitments with stated lag.

    IFRS 13ASC 820
    03

    Redemption-pathway resilience

    Tested capability to honour primary-market redemption at promised tenor under stress, including weekend events.

    HKMA SOMAS
    04

    Attestation governance

    Issuer-owned challenge of audit scope, counterparty risk, and bridge-derivative inclusion or exclusion.

    SSAE 18ISAE 3000
    Section · Board oversight

    What an issuer board should ask

    Q01

    Who challenges the attestation engagement letter on the issuer side, on a named basis, and to whom do they escalate scope disagreements?

    If the auditor sets scope unilaterally, the issuer has not yet established attestation governance.

    Q02

    What is the tested redemption pathway under a Friday-evening stress event, end to end, including custodian liquidation lag?

    Untested redemption pathways are the principal cause of historical stablecoin de-peg events.

    Q03

    How are bridged derivatives of the issuer's token disclosed to attestation users, and who maintains the bridge-derivative inventory?

    Bridge derivatives outside the attestation are a recurring 2026 disclosure finding.

    Q04

    Is the issuer's counterparty-risk monitoring on reserve custodians evidenced between attestation dates, or only on attestation date?

    Counterparty risk does not pause between attestation dates.

    Frequently Asked Questions

    Glossary

    Attestation
    An auditor's report on the accuracy of a representation, typically reserve composition on a given date.
    Bridge derivative
    A wrapped representation of an issuer's stablecoin on a chain other than the issuer's primary chain, often not covered by the issuer's attestation.
    GENIUS Act
    United States federal stablecoin issuance framework, signed into law in 2025, establishing payment stablecoin issuer licensing.
    MiCA Title III
    European Union Markets in Crypto-Assets Regulation provisions governing asset-referenced and e-money tokens.

    This article was researched and written by human editors with analytical assistance from AI tools. All conclusions, interpretations, and editorial decisions are independently reviewed by the CALCULATORiQ Editorial Team before publication.

    For questions about our editorial process, see our Editorial Standards page.

    Share this brief

    Share:

    Related Articles

    Stablecoin Run Risk After the GENIUS Act: First Ninety Days of the Live Attestation Regime
    Institutional Brief

    Stablecoin Run Risk After the GENIUS Act: First Ninety Days of the Live Attestation Regime

    18 min read
    Governance Above the Rail: Why the US Tokenisation Stack Needs a Control Layer Banks Cannot Outsource
    Institutional Brief

    Governance Above the Rail: Why the US Tokenisation Stack Needs a Control Layer Banks Cannot Outsource

    20 min read
    Tokenised US Treasuries Have a Control Plane Problem: BUIDL, ONDO, Franklin, and What Sits Above the NAV
    Institutional Brief

    Tokenised US Treasuries Have a Control Plane Problem: BUIDL, ONDO, Franklin, and What Sits Above the NAV

    18 min read