Wallet Blocklist

Overview

Blocklists can prevent known scam destinations, sanctioned addresses, malicious contracts, unsupported tokens, or disallowed applications from being used. They may come from internal investigations, compliance providers, threat intelligence, token issuers, or platform policy.

Lists can be incomplete, delayed, jurisdiction-specific, or wrong. Attackers create new addresses quickly, while an address can receive unwanted funds without controlling the sender. Similarity, transaction proximity, or a risk score does not by itself prove legal ownership or malicious intent.

Organizations should document list sources, scope, confidence, update timing, override authority, and response procedures. Exact matches and contextual risk indicators should be distinguished. Blocking needs clear user feedback and escalation for false positives. High-risk exceptions require independent review. The list should complement transaction analysis, allowlists, limits, and destination verification rather than serve as the only control.

Material risks for Wallet Blocklist include credential compromise, malicious destinations, unsupported assets, wrong-network transfers, stale balances, compromised software, provider outage, privacy leakage, and inaccessible recovery material. For Wallet Blocklist, controls should reflect value, automation, reversibility, and whether the organization or a third party controls signing.

Wallet Blocklist should be distinguished from the asset balance and from the application that displays it. For example, a customer-facing success message does not prove that the intended transaction executed on the correct network; operations should verify execution and reconcile the result before irreversible fulfillment.

Production ownership for Wallet Blocklist should identify the user or legal entity, supported assets and networks, address model, custody boundary, signing authority, recovery method, and systems permitted to request or observe transactions. For Wallet Blocklist, these fields determine who can act and which evidence is authoritative.