Watchlists

OpenXSwitch - Watchlists

Withdrawal Protection via Watchlist

OpenXSwitch keeps your withdrawals safe by using a Watchlist Policy. With blocklists and allowlists, you can control exactly which addresses are allowed or blocked from receiving funds. whether you're withdrawing from a Prime Wallet or a Sub-Wallet.

📘

Ensure Secure Withdrawals: Withdrawals are filtered through watchlist rules to enforce business policies, prevent unauthorized activity, and block high-risk destinations.

Watchlist Types

• Allowlist
  Only addresses explicitly approved in the allowlist can receive funds. All others are rejected by default. Best used for high-security operations.

• Blocklist
  All addresses are allowed except those explicitly denied. Use this to prevent interaction with known malicious or restricted destinations.

⚙️

Manage watchlists via the OpenXSwitch Console.

Watchlist Policy by Wallet Type

1. Prime Wallet

Withdrawals from prime wallet are subject to strict watchlist enforcement:

• Watchlist Mode: allowlist only
• Enforcement: Withdrawals are permitted only to addresses registered in the allowlist.
• Rejection Logic: Any attempt to send funds to an unlisted address is automatically denied.
• Ideal For: Secure, manual, or semi-automated treasury operations where fund destinations must be tightly controlled.

2. Sub-Wallets

Withdrawals from sub-wallets follow a controlled, API-based approach:

• Watchlist Mode: blocklist only
• API-Only Initiation: Sub-wallet withdrawals can only be initiated via the OpenXSwitch API, not from the dashboard.
• Business Logic Integration: This allows for custom logic, approvals, or automation to be implemented on the client side before triggering withdrawals.
• Security: Protected by API key scopes, rate limits, and watchlist validations.