Warning
This feature poses security risks. We recommend configuring a strict Transaction Authorization Policy (TAP) before enabling it. You can set policy rules to allow transfers to one-time addresses for only specific users or user groups, require approval for transfers above a certain threshold, and more. Learn more about the different rules that you can define using the TAP.
Overview
The One-Time Address feature allows you to transfer assets to non-whitelisted addresses in your Fireblocks Workspace.
This feature is disabled by default. The workspace Owner must enable this feature.
Creating an OTA transfer using the Console
- On the New Transfer window, select One-time address for the To field.
- Paste the address to which you want to transfer funds in the One-time address field.
- Complete the rest of your transfer details.
- Select Transfer.
Notes
- The External wallet field is optional. You can use it to associate a specific one-time address with a whitelisted external wallet in your workspace. If you choose to use this field, make sure your TAP has a rule that will match and allow the transaction (i.e., a rule for whitelisted addresses and not just the one-time address) before you submit it.
- You can avoid exchanging addresses via unsafe channels and sending test transfers by connecting directly with counterparties on the Fireblocks Network.
Creating an OTA transfer using the API
Call the Create a new transaction endpoint as follows:
- Enter the destination address in the oneTimeAddress sub-field under the destination field. You may optionally include a tag for blockchains that support it.
- The destination type should be either ONE_TIME_ADDRESS or EXTERNAL_WALLET. Selecting an external wallet allows you to associate the transaction with an existing external wallet for auditing purposes.
One-Time Address Reverse Lookup
In some transactions, the destination is set to a one-time address, while your Fireblocks workspace contains an identical whitelisted address. When this occurs the One-Time Address Reverse Lookup feature automatically tries to match that transaction with a rule in your workspace's TAP. These transactions will appear as whitelisted addresses in your Transaction History.
The Reverse Lookup feature is enabled by default for all workspaces created after March 4th, 2021. Older workspaces that have not requested this feature can do so by submitting a support ticket.