Research/Education/Gold/How to Verify Tether Gold's Reserves: A Step-by-Step Read of the Attestation Report
# Tradfi

How to Verify Tether Gold's Reserves: A Step-by-Step Read of the Attestation Report

BloFin Academy09/17/2026

Tokenized gold makes a specific promise: that every token in circulation corresponds to real metal sitting in a vault, checked and reported on some regular schedule. That promise is only as good as the evidence behind it, and the only way to actually check it is to read what the issuer publishes, not what a third party claims on its behalf. For Tether Gold (XAUT), that evidence is a periodic independent assurance report, and reading one well is a different skill from reading a press release or a headline reserve figure. It means knowing what the document actually asserts, whose claim you're looking at, and exactly where its coverage stops.

To check the gold behind XAUT yourself, open the current reserve report from Tether Gold's report hub. Read it as an assurance report, not a guarantee. Note who signed it, the standard, and the snapshot date. Note the reserve figure it gives. Just as important, note what it does not cover.

This assumes you already know what XAUT is; if not, start with BloFin's Tether Gold explainer. This piece is only the due-diligence method. It pairs with the general idea of proof of reserves.

What this guide covers: finding the current report, its anatomy, a reading checklist, what it does and does not establish, and how it differs from an audit or an exchange proof-of-reserves. What it leaves to other guides: the XAUT product primer, redemption, and the allocation lookup keyed to your blockchain address all live in the Tether Gold explainer, with self-custody basics alongside. This is a method for reading the evidence, not an endorsement of XAUT or investment advice.


Where Tether Gold publishes its reserve report

Start at the source. Tether Gold publishes its reserve reports on a dedicated report hub. The discipline that matters most is simple: open the newest report there, not a screenshot, a reposted total, or a search snippet. A reserve figure changes each period, so a number quoted elsewhere may already be out of date.

The hub, not any single report file, is the link to keep. It shows a summary of the latest report and links to the underlying document. The issuer publishes on a regular quarterly cadence, so there is normally a most-recent report, while prior reports stay archived for their own reporting dates (source: Tether Gold reserve reports). Third-party pages are an easy trap. They either quote a reserve total from an old quarter, or simply assert that XAUT is "audited" and "fully backed." Neither points you at the document that would let you check. Opening the report yourself is the whole point of due diligence. It is the difference between taking a claim on faith and reading the evidence behind it.

Use a short routine to reach the right file every time:

  1. Open the report hub rather than a third-party summary or a cached total.

  2. Find the most recent report period; if two are listed close together, take the one with the later reporting date.

  3. Click through to the underlying report file, not the summary tile shown first.

  4. If a value does not load, refresh the page, since the hub is live and script-rendered.

That routine is also why this guide prints no reserve figure of its own: any number here would age, while the habit of opening the current report does not.


What the assurance report actually contains

An assurance report has a predictable anatomy. Knowing it lets you read the document instead of skimming for a headline. The current report is an independent assurance engagement performed under ISAE 3000 (Revised). That standard covers assurance engagements other than audits of historical financial statements (source: IAASB: ISAE 3000 (Revised)).

Read the front matter first. The report names the engagement, the standard, the signing firm, and the reporting date before it gets to any figures. At the current report, the signer is BDO Advisory Services S.r.l., which Tether's hub labels "BDO Italia." Note the exact legal entity on the report you open, because the signatory can change between periods (source: current Tether Gold assurance report). One distinction drives everything else: the report carries both management's assertions about the reserves and the practitioner's independent conclusion on them, and only the second is written by the firm rather than by the issuer.

This table maps the sections you will meet, in reading order, to what each states and what to check as you go:

Report section

What it states

What to check

Front matter

The engagement, the standard (ISAE 3000 Revised), the signing firm, the reporting date

The exact legal signer and the "as of" date

Management's assertion

The issuer's own claim about the reserves

That it is labeled the issuer's statement, not the firm's

Inventory and token population

The gold held and the report-defined set of tokens it is measured against

How the report defines the token population it counts

Procedures

Existence checks, a third party's sample inventory and quality testing, valuation, ledger reconciliation

Who performed each step, the firm or a named specialist

Conclusion and scope limitation

The independent conclusion and the date and limits it applies to

That the conclusion is the firm's, for one date only

Reading in that order, front matter to conclusion to limitation, keeps the independent opinion clearly separate from the issuer's own claim.


How to read the report: A due-diligence checklist

You do not need to be an accountant to read the report critically. You just need to check a short list of things in order. The goal is to establish what the document supports at its snapshot date, then note where its evidence stops. Work through these before you rely on any figure.

  1. Open the current report from Tether Gold's report hub, not a screenshot or a repost, and confirm the report period is the latest one.

  2. Record two dates: the report's "as of" date and the date it was signed. Treat the reserves as a balance at that moment, not a live number.

  3. Read the engagement title, the standard, the signing entity, and the conclusion first. Read them before the headline reserve data, so the numbers arrive with their context.

  4. Separate management's assertions from the practitioner's conclusion, using the anatomy above, and rely on the second as the independent opinion.

  5. Compare the report's gold-reserve amount against the report's own definition of the XAUT population. Do not swap in a token count from a block explorer without understanding what each figure counts.

  6. Read the inventory breakdown, the valuation basis, the custody wording, and the procedures listed. Notice whether the report names a specific custodian or only refers to "custodian(s)."

  7. Read the scope-limitation and any emphasis-of-matter language, which set the exact date and conditions the conclusion applies to.

Running this list turns a dense PDF into a handful of concrete checks. It also shows you where the report is silent. The allocation lookup that Tether offers is a separate, address-based check on an individual holding, covered in the Tether Gold explainer. It complements the total-reserves report rather than replacing it.


What the attestation does not prove

A reserve report is necessary evidence, not complete proof. Reading it well means knowing its boundary. The report gives reasonable assurance on the reserves against its stated criteria, at a single date. It is not a full audit of the issuer, a legal opinion on title, or a statement about insurance.

The clearest way to hold that boundary is a two-column view of what the current report does and does not establish:

The report can support

The report does not establish

Reported gold inventory and its valuation at the snapshot date

The reserve level at any other date, including today

The firm's independent conclusion under ISAE 3000 (Revised)

A full financial-statement audit of the issuer

Reconciliation of reserves to the report-defined token population

Legal title, insurance coverage, or every custody control

Procedures performed, such as existence and sample quality testing

A named custodian or facility, unless the report states one

The point-in-time nature is an easy limitation to overlook. A clean snapshot last quarter tells you the reserves were there then. It does not tell you they are there now. That is why point-in-time reporting is necessary, but not sufficient on its own (source: BIS and Bank of England: Project Pyxtrial). So read what the conclusion and procedures actually say, and stop there. Treat anything beyond them as unconfirmed by this document, unless the report itself names it. That includes a named vault, an insurer, or support for a specific chain. If a third-party page states one of those as fact, that is your cue to go back to the report and check whether the report actually says it.


How do attestation, audit, and proof of reserves differ?

These three terms get used interchangeably, and conflating them makes readers over- or under-trust a report. Calibrating them is the last step of reading one well. An audit, an assurance engagement like this reserve report, and an exchange's Merkle-tree proof of reserves are three different instruments. Only some apply to a physical-gold issuer.

An audit expresses an opinion on complete financial statements (source: AICPA: the difference among a compilation, review, and audit). An ISAE 3000 (Revised) assurance engagement is narrower: it gives a conclusion on specific subject matter, here the reserves report, to a stated level of assurance. A crypto proof-of-reserves exercise is different again, usually built for on-chain custody. It commits customer balances into a Merkle tree and proves the exchange controls its on-chain assets. BloFin describes its own proof of reserves as Merkle-tree user-balance verification plus on-chain address-ownership and reserve-ratio checks.

The three line up like this:

Instrument

What it opines on

How it gets evidence

Fit for physical-gold reserves

Financial-statement audit

The issuer's complete financial statements

Full audit procedures across the accounts

Broader than a reserve question; not what a reserve report is

ISAE 3000 (Revised) assurance

Specific subject matter, here the reserves report

Existence, valuation, and reconciliation work at a stated date

Direct fit; this is what the Tether Gold report is

Exchange proof of reserves

On-chain assets versus customer liabilities

Merkle-tree balances plus proof of wallet control

Built for on-chain custody, not gold in a vault

The bottom row is why a physical-reserve report is read through inventory, custody, valuation, and the assurance scope, rather than through Merkle proofs.

A regulator's due-diligence lens is a useful cross-check on top of any of them. It asks five things: the legal claim on the asset, whether reserves are segregated, who safeguards them, how transparent the reporting is, and whether complete audited financials exist (source: IOSCO: crypto and digital-asset recommendations). Applied as questions rather than accusations, that lens tells you how far a single reserve report gets you, and where to look next. For whether tokenized gold belongs in your book at all, that broader question sits in Bitcoin vs Gold and the note on tokenized gold and yield.

Reading the report is a recurring habit, not a one-time task. If you hold XAUT exposure, or plan to, run these checks against each new report. That applies whether you hold the token itself or trade a perpetual on BloFin futures. Do not trust the last report you read to describe today.


Frequently asked questions

Is a clean reserve report the same as the token being safe to hold?

No. A clean report is evidence that the reserves met the report's criteria at one date, which is important evidence but not sufficient for a safety judgment. Safety also turns on things the report does not cover: your legal claim, custody and insurance, redemption access, secondary-market liquidity, and the token's own smart-contract and issuer risk. Treat the report as one input among several, not as a verdict that the token is safe to hold.

Who chooses the accounting firm, and does that affect the report's independence?

The current report says BDO was engaged by Tether Global Investments Fund SICAF SA, while TG Commodities' Sole Director is responsible for preparing the Tether Gold Reserves Report and its stated criteria. ISAE 3000 and the IESBA Code impose independence requirements, and BDO states that it complied with them. Those are professional requirements, not an absolute guarantee, so read the engagement scope, criteria, and conclusion on their own terms.

Can I inspect the vaulted gold myself instead of relying on the report?

Tether's public materials do not describe a routine right for an XAUT holder to enter the custodian's vault or personally test bars. The assurance report provides independent evidence in lieu of that routine direct access, within its stated procedures and date. Your practical options are to read the current report carefully, note who performed the inventory and quality testing, and weigh how recent and how well-scoped that work is.

Does a reserve report mean the issuer is regulated or licensed?

No. The existence of a reserve report, whether published voluntarily or because a rule requires it, is not by itself proof of authorization. Whether a gold token is regulated, and under which regime, depends on its structure and jurisdiction, which is a separate question from whether a reserve report exists. Do not read "attested" or "assured" as "licensed" or "approved." If regulatory status matters to you, check the relevant regulator's own register rather than inferring it from the presence of a report.

What if a new report is late or missing?

Treat the absence of a current report as a due-diligence signal in itself. The value of periodic assurance depends on the reports arriving on schedule. So a long gap since the last report, or a missing one, is something to weigh rather than ignore. Check the hub for the latest available report and its date. Factor how current it is into how much weight you give it, especially before opening or adding to a position.

Does the report cover the token's smart contract, or only the gold?

Only the gold, not the code. The current Tether Gold report covers the reserves report, the gold reserves, and the reserve-to-token reconciliation; it does not include a security review of the token's smart-contract code. Smart-contract risk, such as bugs or administrative controls, is a separate matter this kind of report does not address. If the code's behavior matters to you, look for a dedicated smart-contract audit, and treat it as evidence distinct from the reserve report.


Researched and written by the BloFin Academy editorial team with AI-assisted drafting. All facts independently verified. Updated July 2026. Sources cited inline include Tether Gold's reserve report hub and current assurance report, the IAASB (ISAE 3000 Revised), AICPA guidance on audits and assurance, the BIS and Bank of England's Project Pyxtrial, and IOSCO.

This article is educational content, not financial advice. It is a method for reading Tether Gold's published reserve report, not an assessment or endorsement of XAUT's safety. Trading crypto assets, including with leverage, carries risk of loss beyond your initial margin. Past performance does not predict future results, and a reserve report is point-in-time and limited in scope. Consider your own risk tolerance and consult a qualified professional before opening a position.