Omnibus Wallet

Overview

A provider can use one or several pooled addresses for deposits, withdrawals, settlement, or custody while assigning balances through an internal ledger. Address or memo attribution links external transactions to individual customers without giving each customer a separately controlled wallet.

The on-chain balance does not show every beneficiary or liability. Customers depend on correct attribution, ledger integrity, withdrawal policy, and provider solvency. Shared infrastructure also creates concentration risk and can complicate sanctions screening, privacy, and transaction investigation.

Operators should maintain complete subledgers, unique references, deposit attribution, approval controls, and frequent reconciliation between customer liabilities and controlled on-chain assets. Fee allocation, pending transactions, and uncredited deposits need explicit treatment. Legal terms should define ownership and asset use. Security architecture should limit how much pooled value one signing path can reach.

Omnibus Wallet should be distinguished from the asset balance and from the application that displays it. For example, a customer-facing success message does not prove that the intended transaction executed on the correct network; operations should verify execution and reconcile the result before irreversible fulfillment.

Records for Omnibus Wallet should preserve account and address identifiers, asset and network identity, policy version, requester, approvers, signed payload or transaction reference, fees, timestamps, status history, confirmations, exceptions, and final balance and accounting effects. For Omnibus Wallet, corrections must remain linked rather than overwrite the original event.

Material risks for Omnibus Wallet include credential compromise, malicious destinations, unsupported assets, wrong-network transfers, stale balances, compromised software, provider outage, privacy leakage, and inaccessible recovery material. For Omnibus Wallet, controls should reflect value, automation, reversibility, and whether the organization or a third party controls signing.