GENIUS Act Compliance: How US Stablecoin Issuers Use Safeheld

The federal framework for payment stablecoins establishes a category of permitted issuers and constrains how they operate. The central obligations are reserve backing of not less than one to one against outstanding payment stablecoins, restriction of reserves to specified high quality liquid assets, public monthly disclosure of reserve composition, executive certification of that disclosure and examination by a registered public accounting firm.

It also constrains conduct around redemption, requiring clear policies for timely redemption at par, and restricts the use of reserves, prohibiting rehypothecation outside narrow permitted purposes.

Read as an operating specification rather than a statute, it describes a firm that must know its outstanding token supply and its reserve composition at all times, and must be able to prove both retrospectively.

The monthly disclosure is the visible artefact, but it is the least demanding part of the regime. Producing an accurate monthly figure requires the underlying position to have been correct and evidenced on every day of the month.

The liability side of a stablecoin balance sheet is unusual because it is publicly observable and continuously mutable. Tokens are minted and burned around the clock, across multiple chains, sometimes through bridges that create wrapped representations of the same liability.

An issuer must therefore reconcile its own mint and burn records against on-chain supply across every deployment, and must account for tokens held in treasury, in bridge escrow, and in contracts that are not in circulation in an economic sense but exist on chain.

Errors here are directional and dangerous. Overstating burned supply understates liability and therefore overstates coverage, which is precisely the misstatement the regime exists to prevent.

Safeheld reconciles issuance records, on-chain supply across deployments and treasury positions as independent references, so a divergence between the issuer's own record and observable supply is detected as it arises.

The asset side sits with banks, money market funds, custodians and, for treasury holdings, the settlement infrastructure of the underlying instruments. Each reports differently and on different timetables.

Two questions must be answered continuously. First, does the total value of reserves equal or exceed outstanding supply. Second, is every reserve asset within the permitted categories, held in the permitted manner and free of encumbrance.

The second question fails more often than the first. An issuer can be comfortably over-collateralised while holding an instrument that falls outside the permitted set, or holding an asset that has been pledged, which removes it from the reserve in substance while leaving it in the custody report.

Reconciliation therefore has to carry eligibility attributes alongside balances, so that composition is tested as continuously as coverage.

Executive certification changes the character of the monthly disclosure. An officer certifying a reserve report is making a personal representation, and the basis for that representation should be a record the officer can inspect rather than a schedule prepared by a team.

Where the report is assembled separately from daily operations, the two can diverge, and the divergence will be found by the examining accounting firm rather than internally.

Safeheld generates reserve composition reporting from the same continuous reconciliation that runs the daily control, so the monthly figure is a summation of evidenced daily positions rather than an independent calculation.

The examining firm can then test the underlying daily record rather than only the summary, which shortens the examination and reduces the probability of a restatement.

Redemption at par on demand is the promise that gives a payment stablecoin its function. Meeting it under stress depends on liquidity profile rather than on total coverage.

An issuer fully reserved in instruments that settle in two days cannot meet same day redemption pressure regardless of coverage, so the control must monitor the maturity and settlement profile of the reserve alongside its value.

Monitoring redemption velocity against available same day liquidity, continuously rather than at month end, is what converts a reserve policy into an operating control.

Escalation should be tied to that measurement, with defined triggers, recipients and timings, so that a deteriorating liquidity position generates action rather than a note in a monthly pack.

Sealing each reconciliation run with a SHA-256 Merkle root fixes the inputs, the logic applied, the outcome and the reviewer. The seal can be verified independently, without access to the issuer's systems.

For an examining accounting firm, that removes a substantial portion of the procedures otherwise needed to establish that records have not been altered since the period under examination.

For institutional counterparties and distribution partners, it provides a basis for reliance that does not require them to accept an internally produced report at face value.

In a category where the entire product proposition is that the token is worth one unit of currency, evidence of coverage is the product rather than a compliance overhead.