Auditing Payment Stablecoins Under the GENIUS Act

The GENIUS Act’s auditing requirements are essential for financial stability.

The collapse of algorithmic stablecoins, most notably the TerraUSD failure of 2022, exposed systemic weaknesses in the crypto-financial ecosystem—particularly the absence of robust disclosures and independent verification of asset backing. Unlike reserve-backed stablecoins that are backed by high-quality assets like fiat currency or gold, algorithmic stablecoins attempt to maintain their value through self-executing algorithms and arbitrage incentives, a structure that proved fragile under stress. In essence, this means they rely on code and market dynamics rather than physical collateral to maintain their peg, or their fixed value relative to a traditional currency like the U.S. dollar. These vulnerabilities matter because stablecoins have become integral to digital payments and decentralized finance, with the market reaching over $280 billion in capitalization by August 2025. Just two issuers, Tether and USD Coin, account for more than $145 billion, underscoring the concentration of risk and the systemic consequences of audit failures.

Against this backdrop, Congress enacted the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act in 2025, mandating monthly audits, public disclosures, and certifications by executives for “permitted payment stablecoin issuers.” The Act’s auditing requirements, particularly monthly reconciliations and personal executive accountability, are indispensable to safeguarding financial stability and ensuring market confidence.

The GENIUS Act represents a decisive shift from the prior regime of voluntary attestations to mandatory, legally binding declarations from stablecoin issuers to financial regulators confirming the accuracy of reserve assets. Permitted payment stablecoin issuers must now submit to monthly independent audits by registered public accounting firms, publish reserve reports, and certify that all stablecoins are fully backed on a one-to-one basis by high-quality liquid assets segregated from issuer funds.

The GENIUS Act also imposes criminal liability on CEOs and CFOs who knowingly misrepresent reserve adequacy, reflecting an emphasis on executive responsibility in the style of the Sarbanes-Oxley Act, which requires top executives to personally attest to the accuracy of financial reports to deter securities fraud. These provisions embed accountability at both institutional and individual levels, seeking to restore confidence in payment stablecoins as credible instruments within the U.S. financial system.

Stablecoin failures have demonstrated how quickly “depegging” events, or significant deviations from a linked asset’s value, can unfold. TerraUSD lost parity within days, erasing over $60 billion in market value and spreading contagion across decentralized finance markets. Had monthly independent audits with mandatory reconciliation been in place, discrepancies between circulating tokens and reserves would likely have been identified before collapse.

Quarterly auditing, the traditional cadence of corporate reporting, is inadequate for instruments operating continuously on global blockchains. Disruptions can occur within hours, not months. The GENIUS Act’s monthly audit requirement appropriately calibrates oversight to the risk profile of stablecoins. Industry auditing cost estimates of $1.8 to $6 million annually for large issuers represent only 0.02 to 0.06 percent of reserves under management, a minimal expense relative to potential systemic harm.

The technical core of stablecoin auditing lies in reconciling blockchain transparency with custodial opacity. On-chain data, which are the immutable records of token minting and burning, can be verified using blockchain analytics tools. Minting refers to the creation of new digital tokens, and burning is the irreversible process of their permanent removal from circulation. However, this transparency must be reconciled with the custodial opacity of off-chain reserves—the traditional financial assets that back the stablecoins.

The GENIUS Act requires issuers to provide formal declarations to financial regulators, but confirming reserve adequacy requires auditors to match blockchain data against off-chain financial statements from banks, custodians, and money market funds. Off-chain refers to data, transactions, or assets that exist outside of a public blockchain ledger, typically within traditional financial systems. Timing mismatches complicate matters, as blockchain transactions occur continuously while off-chain settlement may lag.

Without harmonizing these data sources, audits risk overlooking discrepancies that could destabilize markets. The GENIUS Act’s evidentiary requirements rightly demand that independent auditors integrate both sources, combining traditional financial controls with blockchain analytics expertise.

Perhaps the most significant innovation is the GENIUS Act’s imposition of direct accountability on executives. CEOs and CFOs must certify each monthly reserve report, subject to criminal penalties for false statements. This mirrors the certification regime under the Sarbanes-Oxley Act, which sought to curb corporate misreporting after high-profile scandals at Enron and WorldCom.

Executive liability creates a strong deterrent effect, incentivizing robust internal controls and effective audit committee oversight. It signals to markets that stablecoin issuers are held to standards comparable to systemically important financial institutions, creating a dual structure of technical and personal responsibility.

Although the statutory mandate centers on traditional audit practices, advanced tools such as zero-knowledge proofs offer promising enhancements. A zero-knowledge proof is a cryptographic protocol that permits one party to demonstrate the truth of a statement to another party without revealing any underlying information about the statement itself. These audit methods allow issuers to prove reserve sufficiency without disclosing sensitive account-level details, reducing security risks while enabling verification.

The GENIUS Act leaves flexibility for such innovation. The Public Company Accounting Oversight Board and American Institute of Certified Public Accountants should develop technical standards for zero-knowledge proof-based verification to ensure consistency across issuers. Such tools can supplement, but not replace, the statutory requirement of monthly reconciliation.

To strengthen the GENIUS Act’s framework, regulators and professional bodies should develop stablecoin-specific auditing standards integrating on-chain analytics and reserve verification, require training programs for executives and auditors in blockchain operations, maintain monthly audits for large issuers with tiered obligations for smaller ones, and encourage adoption of privacy-preserving verification techniques under standardized frameworks.

The GENIUS Act sets a new benchmark for stablecoin regulation, replacing voluntary attestations with enforceable, recurring audits and executive accountability. Monthly audits, coupled with reconciliation of on- and off-chain data, are indispensable to prevent systemic failures like TerraUSD’s collapse.

Stablecoins can only achieve their potential as part of the U.S. payment system if trust in their backing is rigorously verified. The GENIUS Act takes a decisive step in that direction; regulators, auditors, and issuers must now ensure its mandates are fully implemented. The stakes, which include financial stability in an increasingly digital economy, could not be higher.

David Krause

David Krause is an emeritus associate professor of finance at Marquette University.

Eric Krause

Eric Krause is an assistant professor of accounting at Iowa State University.