In short
A reserve attestation is a point in time statement about a position that changes continuously. Automating it means reconciling outstanding token supply against segregated reserve holdings continuously, sealing each run cryptographically, and generating the attestation as an output of that record rather than as a periodic assembly exercise.
The limits of a monthly attestation
The standard market practice of publishing a monthly attestation carries an implicit claim that is stronger than the evidence supports. The attestation describes the position at a single moment, usually the last day of a month, chosen by the issuer.
Between two such moments, the issuer might have been under-reserved for an extended period without any published artefact revealing it. Nothing in a month end snapshot addresses the intervening days.
Holders and counterparties increasingly understand this, which is why attestation frequency has become a competitive dimension and why some issuers now publish more often.
Higher frequency helps, but it does not change the underlying structure. A snapshot at any frequency remains a snapshot, and the gaps between snapshots are where the risk sits.
Continuous reconciliation as the basis of attestation
The alternative is to reconcile continuously and treat the attestation as a report drawn from a record that exists at every moment, rather than as an exercise performed at a moment.
That requires the liability and asset sides to be tracked with equal rigour. On the liability side, issuance and redemption records reconciled against observable on-chain supply across every deployment, with treasury and bridge escrow positions identified and excluded from circulation correctly.
On the asset side, reserve holdings reconciled against custodian, bank and fund records, carrying eligibility and encumbrance attributes so that composition is tested alongside value.
Coverage is then a continuously computed figure rather than a periodically calculated one, and any period of under-coverage is visible in the record whether or not it coincided with a reporting date.
Getting the liability side right
The liability figure is where attestations most often become imprecise. Multi-chain deployment means the same token exists in several places, and bridged representations can double count if the escrowed original is not excluded.
Treasury holdings, tokens minted but not yet distributed, and tokens held in contracts pending settlement each need a defined treatment that is applied consistently rather than judged each month.
Safeheld reconciles issuance records, on-chain supply per deployment and treasury positions as independent references, so a divergence between what the issuer believes it has issued and what is observably outstanding is detected as it arises.
Because on-chain supply is publicly observable, this is also the figure most easily challenged by third parties, which makes precision here a reputational control as much as a regulatory one.
Getting the asset side right
Reserve assets sit across banks, money market funds, custodians and settlement infrastructure, each reporting on its own timetable and in its own format.
Format-agnostic ingestion with automated schema mapping allows those sources to be reconciled as they are, rather than requiring each provider to conform to a specification before it can be included.
Eligibility and encumbrance must be tracked as attributes of each holding. An asset that has been pledged is not available to meet redemption even though it remains in the custody statement, and treating it as reserve overstates coverage.
Missing or late reserve data is treated as an exception rather than as an absence, so that a custodian feed failing to arrive does not produce an artificially clean reconciliation.
Sealing attestations so they can be verified independently
An attestation produced by the issuer and published by the issuer requires the reader to trust the issuer. Cryptographic sealing removes that dependency for the integrity question, if not for the underlying data.
Each reconciliation run is sealed with a SHA-256 Merkle root fixing inputs, logic, outcome and reviewer. A third party can verify that a published attestation corresponds to a specific sealed run, and that the run has not been altered since.
This does not replace external examination, and issuers should not present it as doing so. It changes what the examiner has to establish, moving effort from proving record integrity to testing substance.
For counterparties conducting due diligence, it provides a basis for reliance between formal examinations, which is precisely the period a monthly attestation leaves unaddressed.
Connecting attestation to peg and redemption monitoring
Coverage is one dimension of stability. Redemption capacity and market peg behaviour are the others, and they interact.
A reserve fully invested in instruments settling in two days provides coverage without same day liquidity, and a peg deviation under redemption pressure is far more likely to originate in liquidity profile than in coverage.
Monitoring redemption velocity, available same day liquidity and secondary market peg deviation alongside coverage gives the issuer a composite view, with escalation triggered on the dimension that is deteriorating.
Reporting this composite view to the board from the same record that produces the public attestation ensures internal governance and external disclosure describe the same reality.
Frequently asked questions
What is wrong with a monthly reserve attestation?
It describes a single moment chosen by the issuer. Between two attestation dates, an issuer could be under-reserved for an extended period without any published artefact revealing it. Increasing frequency narrows the gaps but does not change the structure, because a snapshot at any frequency leaves the intervening period unaddressed.
How is outstanding supply calculated across multiple chains?
By reconciling issuance and redemption records against observable on-chain supply for each deployment, then applying consistent treatment to treasury holdings, undistributed mints and bridge escrow. Bridged representations double count if the escrowed original is not excluded, which is the most common source of overstated or understated liability.
Should pledged reserve assets count toward coverage?
No. An encumbered asset is not available to meet redemption even though it continues to appear in the custody statement. Encumbrance and eligibility should be tracked as attributes of each holding so that composition is tested continuously alongside value, rather than assessed only at reporting dates.
Does cryptographic sealing replace external examination?
No, and issuers should not present it as doing so. It settles the integrity question, allowing a third party to confirm that a published attestation corresponds to a specific unaltered run. The examiner's effort then moves from establishing record integrity to testing substance, which shortens examination rather than eliminating it.
Why monitor liquidity profile separately from coverage?
Because full coverage in instruments that settle in two days does not provide same day redemption capacity. Peg deviations under redemption pressure usually originate in liquidity profile rather than in coverage, so redemption velocity and available same day liquidity need their own monitoring and escalation triggers.