I’m sure I’ve seen an audit before but because Coinbase is a public company all finances have to be released so you should be able to see it there too?
IIRC USDC is run by Circle, a separate legal entity. While CB and Circle might be controlled by the same people, they are not subject to the same legal disclosure requirements.