Treasury policies
Configure multi-signature approvals, spending limits, and risk controls to protect treasury operations.
Treasury policies protect your organization's digital assets by requiring approvals for sensitive operations and enforcing transaction limits. This topic describes the policy configurations required for secure treasury management.
What you need
- An understanding of /core-concepts/policies and how they work
- Users who have the appropriate /core-concepts/roles-and-permissions
- Wallets tagged for policy targeting, such as
treasuryorcold-storage
Components to configure
- Multi-signature approvals
- Require multiple approvers for high-value transactions. Configure approval quorums, such as 2-of-3 or 3-of-5, that trigger based on transaction amount thresholds.
- Spending limits
-
Control financial risk with transaction amount limits and velocity controls. Velocity controls limit the total value or number of transactions within a defined period.
- Single-transaction limits: Maximum amount per transaction
- Daily or hourly caps: Total value allowed within a time window
- Frequency limits: Maximum number of transactions allowed per period
- Recipient whitelisting
- Restrict outbound transfers to approved addresses. Transactions sent to non-whitelisted recipients can require approval or be blocked.
Policy evaluation
Policies evaluate each transaction through layered checks.
Example configurations
These examples illustrate how you can apply treasury policies to match your organization's risk posture.- Conservative treasury
- For organizations that prioritize maximum security.
Policy Configuration Action All transactions Always trigger 2-of-3 approval Large transactions over $100k Amount threshold 3-of-5 approval Daily cap of $500k Velocity limit Block - Balanced operations
- For organizations balancing security with operational efficiency.
Policy Configuration Action Transactions over $10k Amount threshold 1-of-2 approval Transactions over $100k Amount threshold 2-of-3 approval Non-whitelisted recipients Whitelist policy 2-of-3 approval Daily cap of $1M Velocity limit Block - Tiered by wallet type
- Apply different limits based on wallet tags.
Wallet tag Single limit Daily cap Approval hot-wallet$10,000 $100,000 1-of-2 warm-wallet$100,000 $1,000,000 2-of-3 treasury$500,000 $5,000,000 3-of-5 - Policies that protect administrative changes
- Protect the configuration that governs your security posture.
- Permission assignment protection: Require approval to grant permissions.
- Permission modification protection: Require approval to change roles.
- Policy modification protection: Require approval to update policies.