Investigación verificada por fuentes: Coinbase

Verified source facts

1. The 2026 Coinbase and EY-Parthenon survey covered 351 institutional investors. 2. The survey reports 85% use or are interested in stablecoins for internal cash management and money movement. 3. The BIS says stablecoin outcomes depend on reserve composition, use, regulation and interactions with bank funding and capital flows. 4. The BIS assesses singleness, elasticity and financial integrity as foundational monetary-system properties.

Comparison at a glance

1. Control test: Issuer allowlist

A trading-control disclosure is meaningful only when converted into a testable rule. For issuer allowlist, inspect approved legal obligors. Use a sandbox, non-production context, or the smallest reversible test available, then govern centrally. Capture configuration and event evidence without recording credentials, and verify the documented cancel, reject, decrement, or history behavior.

Model the failure path, not just the setup path. Ask which strategy owns the maker and taker orders, which account boundary the venue evaluates, which message reveals intervention, and how reconciliation behaves after a partial fill or disconnect. Platform documentation describes supported settings; it cannot prove that an operator configured them correctly. In this dimension, issuer drift is therefore an explicit audit gap.

The issuer allowlist row should end with a concrete monitoring rule tied to approved legal obligors. Make the operator govern centrally, retain the venue response, and assign an owner for exceptions. Documentation quality is a useful signal, but it does not certify the exchange or the trading system; issuer drift remains a separate production risk until observed.

2. Control test: Chain allowlist

For chain allowlist, inspect approved networks and contracts. Use a sandbox, non-production context, or the smallest reversible test available, then pin identifiers.

In this dimension, bridged clone is therefore an explicit audit gap.

The chain allowlist row should end with a concrete monitoring rule tied to approved networks and contracts. Make the operator pin identifiers, retain the venue response, and assign an owner for exceptions. Documentation quality is a useful signal, but it does not certify the exchange or the trading system; bridged clone remains a separate production risk until observed.

3. Control test: Reserves

For reserves, inspect composition and attestation. Use a sandbox, non-production context, or the smallest reversible test available, then retain evidence.

In this dimension, timing gap is therefore an explicit audit gap.

The reserves row should end with a concrete monitoring rule tied to composition and attestation. Make the operator retain evidence, retain the venue response, and assign an owner for exceptions. Documentation quality is a useful signal, but it does not certify the exchange or the trading system; timing gap remains a separate production risk until observed.

4. Control test: Redemption

For redemption, inspect direct eligibility and cutoff. Use a sandbox, non-production context, or the smallest reversible test available, then test route.

In this dimension, gate is therefore an explicit audit gap.

The redemption row should end with a concrete monitoring rule tied to direct eligibility and cutoff. Make the operator test route, retain the venue response, and assign an owner for exceptions. Documentation quality is a useful signal, but it does not certify the exchange or the trading system; gate remains a separate production risk until observed.

5. Control test: Custody

For custody, inspect wallet and key controls. Use a sandbox, non-production context, or the smallest reversible test available, then segregate duties.

In this dimension, key loss is therefore an explicit audit gap.

The custody row should end with a concrete monitoring rule tied to wallet and key controls. Make the operator segregate duties, retain the venue response, and assign an owner for exceptions. Documentation quality is a useful signal, but it does not certify the exchange or the trading system; key loss remains a separate production risk until observed.

6. Control test: Authorization

For authorization, inspect transaction approval policy. Use a sandbox, non-production context, or the smallest reversible test available, then use quorum.

In this dimension, insider risk is therefore an explicit audit gap.

The authorization row should end with a concrete monitoring rule tied to transaction approval policy. Make the operator use quorum, retain the venue response, and assign an owner for exceptions. Documentation quality is a useful signal, but it does not certify the exchange or the trading system; insider risk remains a separate production risk until observed.

7. Control test: Addresses

For addresses, inspect allowlist and beneficiary proof. Use a sandbox, non-production context, or the smallest reversible test available, then test changes.

In this dimension, misdirection is therefore an explicit audit gap.

The addresses row should end with a concrete monitoring rule tied to allowlist and beneficiary proof. Make the operator test changes, retain the venue response, and assign an owner for exceptions. Documentation quality is a useful signal, but it does not certify the exchange or the trading system; misdirection remains a separate production risk until observed.

8. Control test: Accounting

For accounting, inspect subledger and reconciliation. Use a sandbox, non-production context, or the smallest reversible test available, then close daily.

In this dimension, chain reorg is therefore an explicit audit gap.

The accounting row should end with a concrete monitoring rule tied to subledger and reconciliation. Make the operator close daily, retain the venue response, and assign an owner for exceptions. Documentation quality is a useful signal, but it does not certify the exchange or the trading system; chain reorg remains a separate production risk until observed.

9. Control test: Incident response

For incident response, inspect depeg or issuer event. Use a sandbox, non-production context, or the smallest reversible test available, then define triggers.

In this dimension, slow escalation is therefore an explicit audit gap.

The incident response row should end with a concrete monitoring rule tied to depeg or issuer event. Make the operator define triggers, retain the venue response, and assign an owner for exceptions. Documentation quality is a useful signal, but it does not certify the exchange or the trading system; slow escalation remains a separate production risk until observed.

10. Control test: Concentration

For concentration, inspect issuer, chain and custodian limits. Use a sandbox, non-production context, or the smallest reversible test available, then set caps.

In this dimension, correlated failure is therefore an explicit audit gap.

The concentration row should end with a concrete monitoring rule tied to issuer, chain and custodian limits. Make the operator set caps, retain the venue response, and assign an owner for exceptions. Documentation quality is a useful signal, but it does not certify the exchange or the trading system; correlated failure remains a separate production risk until observed.

Decision scenarios

Scenario 1: when issuer allowlist becomes decisive

Consider a reader whose main constraint is approved legal obligors. The correct response is not to infer a universal platform or product winner. It is to govern centrally, retain the evidence, and define a stop condition before funds or permissions are committed. If the evidence changes, the decision must be reopened. This produces a repeatable operating rule rather than a one-time opinion.

Scenario 2: when chain allowlist becomes decisive

Consider a reader whose main constraint is approved networks and contracts. It is to pin identifiers, retain the evidence, and define a stop condition before funds or permissions are committed.

Scenario 3: when reserves becomes decisive

Consider a reader whose main constraint is composition and attestation. It is to retain evidence, retain the evidence, and define a stop condition before funds or permissions are committed.

Scenario 4: when redemption becomes decisive

Consider a reader whose main constraint is direct eligibility and cutoff. It is to test route, retain the evidence, and define a stop condition before funds or permissions are committed.

Scenario 5: when custody becomes decisive

Consider a reader whose main constraint is wallet and key controls. It is to segregate duties, retain the evidence, and define a stop condition before funds or permissions are committed.

Scenario 6: when authorization becomes decisive

Consider a reader whose main constraint is transaction approval policy. It is to use quorum, retain the evidence, and define a stop condition before funds or permissions are committed.

Sources and editorial method

• 2026 Institutional Investor Survey — Coinbase Institutional
• Annual Economic Report 2026 — Bank for International Settlements
• Safeguarding trust in money — Bank for International Settlements