Withdrawal Protection via Watchlist

OpenXSwitch keeps your withdrawals safe by using a Watchlist Policy. With blocklists and allowlists, you can control exactly which addresses are allowed or blocked from receiving funds. whether you're withdrawing from a Prime Wallet or a Sub-Wallet.

📘
Ensure Secure Withdrawals: Withdrawals are filtered through watchlist rules to enforce business policies, prevent unauthorized activity, and block high-risk destinations.

Watchlist Types

Allowlist
Only addresses explicitly approved in the allowlist can receive funds. All others are rejected by default. Best used for high-security operations.
Blocklist
All addresses are allowed except those explicitly denied. Use this to prevent interaction with known malicious or restricted destinations.

⚙️
Manage watchlists via the OpenXSwitch Console.

Watchlist Policy by Wallet Type

1. Prime Wallet

Withdrawals from prime wallet are subject to strict watchlist enforcement:

Watchlist Mode: allowlist only
Enforcement: Withdrawals are permitted only to addresses registered in the allowlist.
Rejection Logic: Any attempt to send funds to an unlisted address is automatically denied.
Ideal For: Secure, manual, or semi-automated treasury operations where fund destinations must be tightly controlled.

2. Sub-Wallets

Withdrawals from sub-wallets follow a controlled, API-based approach:

Watchlist Mode: blocklist only
API-Only Initiation: Sub-wallet withdrawals can only be initiated via the OpenXSwitch API, not from the dashboard.
Business Logic Integration: This allows for custom logic, approvals, or automation to be implemented on the client side before triggering withdrawals.
Security: Protected by API key scopes, rate limits, and watchlist validations.