use_case exchanges
Screen withdrawals before they leave
Run the same checks on withdrawals and deposits through the API. Flag lookalike addresses and fresh contracts before your hot wallet signs.
withdrawals · live
- 2 held
- 3 sent
- 1 queued
| time | user | asset | amount | to | verdict | status |
|---|---|---|---|---|---|---|
| 14:02:11 | u_48213 | USDC | 12,400 | 0x71c2…a9d0 | Safe | sent |
| 14:02:09 | u_10977 | ETH | 3.20 | 0x9f3a…c21e | Flagged | held |
| 14:01:58 | u_55102 | USDT | 880 | 0x2b8e…41f7 | Safe | sent |
| 14:01:40 | u_30418 | USDC | 45,000 | 0x71c2…a9d0 | Flagged | held |
| 14:01:22 | u_77290 | WBTC | 0.42 | 0xd04c…9e13 | Safe | sent |
| 14:01:05 | u_12854 | USDC | 2,150 | 0x5e6f…0b2c | Read | queued |
- 14:02:11 · u_48213Safe
12,400 USDC
to 0x71c2…a9d0 · sent
- 14:02:09 · u_10977Flagged
3.20 ETH
to 0x9f3a…c21e · held
- 14:01:58 · u_55102Safe
880 USDT
to 0x2b8e…41f7 · sent
- 14:01:40 · u_30418Flagged
45,000 USDC
to 0x71c2…a9d0 · held
- 14:01:22 · u_77290Safe
0.42 WBTC
to 0xd04c…9e13 · sent
- 14:01:05 · u_12854Read
2,150 USDC
to 0x5e6f…0b2c · queued

flag lookalike_address
Same first four, same last four
Address poisoning plants a lookalike in a user's history. Shortened, the two match. Presign compares every destination with the addresses the user really sent to.
- sent before
- 0x71c24e8b03fa9d1766c0b5e21f48a9d0
- this withdrawal
- 0x71c2f0a39b6e2c41d8e707ab3c95a9d0
webhook check.flagged
Flagged requests land in your risk queue
{
"event": "check.flagged",
"user": "u_30418",
"asset": "USDC",
"amount": "45000",
"to": "0x71c2…a9d0",
"flags": [
"lookalike_address",
"first_time_destination"
],
"action": "hold"
}- 01
Batch checks
Up to 100 requests per call, 200 a second.
- 02
Your rules on top
Limits per user, asset or destination.
- 03
Held, not lost
A held withdrawal waits for a person, with the reason attached.
- 200/s
- requests per paid key
- 99.98%
- uptime over 90 days
- 0.002
- USDC per check, before volume tiers
Read. Then sign.
Add Presign to your wallet and see every request in plain words before you confirm it.
