Advanced Risk Control Configuration – HashKey Exchange

Customers can set up risk control rules based on their business needs. When an action triggers a risk control rule, Hashkey can push real-time reminders via email or in-app messages (for customized push notifications, such as Lark push, please contact your account manager for consultation). Some risk operations can also be directly set up for interception, where the system will automatically block the operation when triggered.

Security Settings -> Advanced Settings -> Advanced Risk Control Configuration

Click "Modify" to enter the configuration page.

The following risk control rules are currently supported:
1. Large Withdrawal
  - "Single Withdrawal Limit" and "24-Hour Total Withdrawal Limit" in USD equivalent value
  - If the withdrawal exceeds the limit, an email, in-site message, and Lark push notification will be sent (for customized solutions, please contact your account manager for details)
  - "Block Transaction" If enabled, withdrawals exceeding the limit will be blocked by the system; if disabled, only reminders will be sent.
2. Whitelisting Wallet Address
  - A notification will be sent once a wallet address is added to the whitelist.
3. 2FA Unbind and Rebind
  - Changes to two-factor authentication will notify the user.
4. Unusual Time Withdrawal
  - You need to first set regular operation hours (start time - end time), calculated on a 24-hour basis.
  - Withdrawals outside of the set time frame will trigger a reminder.
  - "Block Transaction" If enabled, withdrawals during irregular hours will be blocked by the system; if disabled, only reminders will be sent.
5. Account Anomaly Monitoring (Wallet Address Whitelist and Withdrawal, applicable only to Omnibus customers)
  - You can select the monitoring scope (Main Account - Custody Account, Collection Subaccount - Custody Account).
  - In general, the transfer of customer assets (cryptocurrency in and out) will not directly go through the Main Account - Custody Account and Collection Subaccount - Custody Account. Therefore, the occurrence of whitelist wallet address addition or withdrawal in these accounts may be considered as an institutional internal fund transfer scenario or an abnormal scenario.

Related articles