Stablecoin reserve audits 2026: proof-of-reserves requirements for VASP licensing

The stablecoin market is rapidly expanding and becoming a key part of the global financial system. At the same time, a critical question is gaining importance – whether these assets are truly backed by real reserves. Following a series of trust crises, regulators have begun tightening requirements for transparency and financial stability. International bodies now require proof of reserves and regular audits. Proof-of-reserves is becoming a mandatory element for obtaining a VASP license and accessing regulated markets. In this article, we examine the key requirements and legal steps for launching a compliant stablecoin project.

What is proof-of-reserves and why stablecoin projects need it

Proof-of-reserves (PoR) is a mechanism used to confirm that issued tokens are backed by real assets. For stablecoins, this means holding reserves equivalent to the tokens in circulation, typically on a 1:1 basis. Such reserves usually include cash, bank deposits, or highly liquid instruments such as government bonds.

How proof-of-reserves works

PoR combines data from two sources: on-chain and off-chain. On the one hand, blockchain data shows the total number of issued tokens. On the other, reserves must be verified off-chain, for example through bank accounts or custodians.

Independent auditors or attestation providers play a key role by matching the issuer’s liabilities with actual assets. Depending on the project, this may involve regular attestations or more comprehensive audits.

Why regulators require reserve transparency

The growing focus on proof-of-reserves is directly linked to investor protection and financial stability. Regulators aim to prevent situations where a stablecoin is not properly backed and may lose its peg.

Organizations such as the Financial Action Task Force treat reserve transparency as part of broader risk management and AML controls. Under MiCA, disclosure of reserve structures becomes mandatory for issuers.

Lack of transparency can lead to a “run on a stablecoin”, where users withdraw funds en masse, creating systemic risks. For this reason, proof-of-reserves is no longer optional but a core requirement for operating in regulated markets.

Requirements for stablecoins reserves: global standards

Stablecoin regulation is gradually becoming more unified at the international level. Despite differences across jurisdictions, a common approach is emerging: reserves must be liquid, transparent, and fully cover the issuer’s obligations. These requirements are reflected in both national laws and international standards.

Full-reserve requirement and liquid assets

The key standard is the full-reserve principle, under which each issued token must be backed by assets on a 1:1 basis.

Commonly accepted reserves include:

• Cash held in bank accounts
• Short-term government securities (e.g., T-bills)
• Highly liquid deposits

Regulators place strong emphasis on asset quality: reserves must be low-risk and easily convertible without significant loss of value.

Redemption rights and issuer obligations

An essential regulatory element is the right of token holders to redeem their assets. This means investors must be able to exchange tokens for fiat currency or equivalent value.

Many jurisdictions set specific timelines for redemption. Under MiCA, for example, issuers must ensure prompt and unrestricted redemption, directly affecting reserve structure and liquidity management.

Governance and disclosure

Beyond reserve composition, regulators require transparent governance and regular disclosure. This includes:

• Publication of reports on reserve structure
• Disclosure of custodians and banking partners
• Description of risk management policies

Such requirements are закреплены both in international standards and local regulations, including guidance from the Financial Stability Board.

As a result, a clear global trend is emerging: successful stablecoin projects must combine full reserve backing, regular audits, and transparent reporting to meet regulatory expectations and build investor trust.

Proof-of-reserves as a requirement for VASP licensing

For companies operating with virtual assets, proof-of-reserves is no longer just a transparency tool but a key requirement for licensing. Regulators view verified reserves as evidence of financial stability and the ability to meet obligations to users.

FATF requirements for VASPs

International standards developed by the Financial Action Task Force establish a risk-based approach to VASP regulation. Under these requirements, companies must implement risk control mechanisms, including financial transparency and reserve management.

Although FATF does not directly regulate stablecoin reserve structures, its recommendations require VASPs to demonstrate their ability to cover liabilities and prevent financial abuse, making proof-of-reserves a core part of compliance frameworks.

The role of reserves in the licensing process

When reviewing license applications, regulators conduct a comprehensive assessment of the business. A key element of this process is evaluating the financial model and reserve structure.

In particular, regulators assess:

• Whether reserves sufficiently cover liabilities
• The quality and liquidity of assets
• How reserves are stored and controlled
• The transparency of reporting

This review ensures that the project can operate reliably without posing risks to users or the financial system.

Why licensing is impossible without audits

Having reserves alone is not sufficient – they must be verified through independent audits or regular attestations. Without this, regulators cannot objectively assess the project’s financial position. Under frameworks such as MiCA, disclosure and reserve verification are mandatory for obtaining licensed status. Similar approaches are applied in other jurisdictions, including Singapore and the UAE.

How are audits of stablecoins reserves

Reserve audits are a key element in confirming the stability of stablecoin projects. Regulators require not only the existence of reserves but also their regular independent verification. In practice, audits involve assessing asset structure, liquidity, and alignment with obligations to token holders.

Types of audits

Different formats of reserve verification are used depending on regulatory requirements and project maturity.

The most common include:

1. Attestations – regular confirmations (usually monthly) where auditors verify reserves at a specific point in time
2. Full audit – a comprehensive audit of financial statements with deeper analysis of assets and liabilities
3. Internal vs external audit – internal checks supplemented by independent auditors, which is mandatory for regulated projects

The format depends on the jurisdiction and licensing requirements, but VASPs typically need an external independent audit.

What auditors assess

Auditors review not only the existence of assets but also their quality. Key focus areas include:

• Composition of reserves and alignment with the stated model
• Asset liquidity and ability to support rapid redemption
• Matching reserves to liabilities (1:1 or other models)
• Custody arrangements and control over asset access

This comprehensive review helps assess the project’s actual financial stability.

Frequency and reporting format

Regulators increasingly require regular disclosure of reserve data. In most cases, a combined approach is used:

• Monthly attestations
• Annual or periodic full audits
• Public disclosure of key reserve information

Under MiCA and similar frameworks, reporting transparency is a mandatory condition for market access. As a result, reserve audits are no longer a formal procedure but an ongoing process that builds user trust and ensures regulatory compliance.

Main risks in the absence of transparent reserves

The absence of a transparent and verifiable reserve structure is one of the key risks for stablecoin projects. Even if assets exist, weak reporting or lack of independent audits can lead to serious legal and financial consequences. Regulators tend to view such projects as unstable and high-risk.

Regulatory risks

If a company cannot confirm its reserves, this may result in licensing refusal or regulatory intervention. Under frameworks such as MiCA, lack of transparency directly violates disclosure and financial stability requirements. In addition, regulators may classify the project as non-compliant with financial laws, leading to fines or operational restrictions.

Risk of license revocation

Even after obtaining a license, companies must continuously demonstrate compliance. Lack of up-to-date reserve data or deviation from the declared model may result in suspension or revocation of the license. This is particularly critical for VASPs, as licensing is essential for market access and partnerships with banks and payment providers.

Risks for investors and liquidity

If users begin to doubt the backing of a stablecoin, this can trigger массовый выкуп токенов. With insufficient liquidity, the project may fail to meet its obligations, leading to a loss of peg (depeg). Such situations not only create internal issues but can also impact the broader market, increasing volatility and reducing trust in digital assets.

Reputational consequences

Even short-term issues with reserve transparency can significantly damage a project’s reputation. Loss of trust from users, investors, and partners often has long-term effects. In an environment of increased regulatory and market scrutiny, reputational risks are as critical as legal ones.

Typical mistakes of projects when working with proof-of-reserves

Even when projects understand regulatory requirements, many still make mistakes when implementing proof-of-reserves. These errors can lead to licensing refusal, additional scrutiny, or loss of investor trust. In most cases, issues arise from a formal approach to audits and insufficiently developed legal structures.

Formal audits without actual backing

Some projects rely only on attestations without ensuring full reserve coverage. This creates an illusion of transparency but does not prove real financial stability. Regulators increasingly focus on asset quality and accessibility, not just the presence of reports.

Opaque reserve structures

Using complex or non-transparent asset holding structures can raise regulatory concerns. For example, if part of the reserves is held through affiliated entities or high-risk instruments, it undermines trust in the project. Lack of clear information on reserve composition is one of the most common triggers for additional reviews.

Lack of synchronization between on-chain and off-chain data

In some cases, the number of issued tokens does not match the reserves confirmed off-chain. This may result from reporting delays or accounting errors. Such discrepancies are a major red flag for regulators and auditors, as they call into question the integrity of the entire model.

Incorrect choice of jurisdiction

Some projects choose jurisdictions with lighter regulation without considering future scaling plans. As a result, when entering international markets, they must restructure their entire reserve and compliance model. Selecting the right jurisdiction from the outset helps avoid significant costs and legal risks in the future.

How Key2Law helps with reserve audits and VASP licensing

Launching a stablecoin project and obtaining a VASP license requires not only technical readiness but also thorough legal structuring. Companies must address reserve requirements, asset structure, compliance, and interaction with regulators across jurisdictions. Mistakes at this stage can lead to licensing refusal or significant launch delays. The Key2Law team helps businesses build a robust legal model and prepare for all regulatory procedures.

The firm’s experts provide comprehensive support in the following areas:

1. Structuring the legal framework of a stablecoin project, including reserve requirements and investor protection
2. Assessing the legal status of tokens and their compliance with financial regulations
3. Selecting the optimal jurisdiction for licensing and business scaling
4. Preparing for VASP licensing and managing interactions with regulators
5. Implementing compliance procedures, including AML/KYC and financial transparency requirements
6. Supporting reserve audits and coordinating with auditors
7. Preparing legal documentation, including whitepapers and token issuance terms

A well-structured legal model and transparent reserve system not only ensure regulatory compliance but also build trust with investors and partners. If you are planning to launch a stablecoin project or align an existing model with international standards, the Key2Law team can help develop an effective strategy and support you at every stage.