Overview
The policy rules required before placing a swap order depend on the swap type and the provider. The sections below show exactly what to configure for each case.
To add a rule, go to the relevant policy type, select Edit policy, then + Add rule. Set Action to Allow, then configure the scope and funds parameters. You can create multiple rules for the same use case with different fund thresholds — for example, one rule for orders below $10,000 and another requiring additional approval for orders above $10,000.
Same-chain and cross-chain swaps: DeFi (direct access providers)
Requires one rule in each of three policy types. Navigate to each policy type separately and select Edit policy > + Add rule:
- Rule A: Policies > Approve > Edit policy > + Add rule
- Rule B: Policies > Typed Message > Edit policy > + Add rule
- Rule C: Policies > Contract Call > Edit policy > + Add rule (This rule applies to Uniswap Classic only. UniswapX does not use a Contract Call transaction)
Rule A: Grant allowance (Approve)
Authorizes the smart contract to spend your source token. Required once per source token.
Scope
| Source | Vault account(s) approving the allowance |
| Destination | The Permit2 contract on all relevant blockchains, or All Swap destinations |
Funds
| Asset | The source token to approve |
Rule B: Authorize (Typed Message)
Signs the permit allowance for the swap.
Scope
| Source | Vault account(s) initiating swaps |
Funds
| Asset | The native asset of the blockchain (e.g., ETH for Ethereum, MATIC for Polygon) |
Note:
Typed Message rules require the native blockchain asset. You cannot select arbitrary tokens for this rule type.
Rule C: Execute (Contract Call)
Executes the token exchange on-chain.
Scope
| Source | Vault account(s) swapping from |
| Destination | The UniversalRouter contract on relevant blockchains, or All Swap destinations |
Funds
| Asset | The source token being swapped |
Note:
If you've used Uniswap in your Fireblocks workspace, you may already have policy rules with Uniswap addresses as whitelisted destinations. You may want to replace those rules using a predefined list of destinations.
All swaps: CeFi (account-based providers)
All CeFi swap types require an Order Policy rule. Go to Policies > Order Policy > Edit Policy > + Add rule.
Order Policy parameters
Scope
| Parameter | Description |
| Connected account | The provider account that executes the order. Select Any Connected account to apply the rule to all connected accounts, or select a specific provider account. |
| Source | Where funds originate. Options: Any, Connected account, Exchange, External, Fiat, Protected tag, Vault. |
| Destination | Where funds are delivered. Same options as Source. |
Funds
| Parameter | Description |
| Base asset | The asset you send; set minimum and maximum amounts per transaction. |
| Quote asset | The asset you receive; set minimum and maximum amounts. |
| Buy / Sell / Any | Whether the rule covers buying, selling, or both directions of the base asset. |
Same-chain and cross-chain swaps
Scope
| Connected account | Any, or a specific account |
| Source | Vault — select the vault account(s) you want to allow swaps from |
| Destination | Vault — select the vault account(s) or whitelisted address(es) you want to allow swaps to |
Funds
| Base asset | The asset you send (e.g., BTC, USDC) |
| Quote asset | The asset you receive (e.g., ETH, USDT) |
Off-chain swaps
Scope
| Connected account | Any, or a specific account |
| Source | Connected account — select any connected account, or a specific one |
| Destination | Connected account — select any connected account, or a specific one |
Funds
| Base asset | The asset you convert from (e.g., BTC, USDC) |
| Quote asset | The asset you convert to (e.g., ETH, USDT) |
Same-chain and cross-chain swaps: CeFi (account-based providers)
In addition to the Order Policy rule above, same-chain and cross-chain CeFi swaps also require a Transfer Policy rule. Go to Policies > Transfer Policy > Edit Policy > + Add rule.
Scope
| Source | Vault — select the vault account(s) you want to allow transfers from |
| Destination | Connected account — select the connected provider account |
Funds
| Asset | The asset you are swapping from |
Note:
Off-chain swaps do not require a Transfer Policy rule — funds are converted within your connected account and do not leave your vault.