The biggest stablecoin issuer has been promising a full audit of its investments since at least 2017 but has yet to deliver.