Fireblocks

Fireblocks is an institutional digital-asset platform that combines direct-custody vault accounts with organization-wide roles, approval policies and connections to exchanges, fiat providers and settlement counterparties. It is built for firms that need to move and use digital assets under shared controls, not for a single owner managing a recovery phrase.

One workspace for vaults, roles and account structure

A Fireblocks workspace has its own users, access roles and transaction policies. Vault accounts hold asset wallets and deposit addresses, while connected exchange and fiat accounts represent the firm's relationships with those providers. An organization can use one omnibus vault with internal client accounting, separate vaults for end clients, or both structures in the same workspace.

That account design is independent of whether a wallet is hot, warm or cold. It lets a firm organize custody balances and connected operating accounts around its own business, while the policies and roles determine who can view, prepare and approve activity.

MPC-CMP custody from API co-signing to QR approval

Fireblocks direct custody uses MPC-CMP key management rather than storing a complete private key on one signing device. In a hot setup, an API user or co-signer holds the third key share and can support automated approvals. Warm wallets put that share on an internet-connected mobile device, while cold wallets use an air-gapped mobile device and two-way QR scanning.

The distinction is an operating choice as much as a storage choice. API co-signing can suit automated activity, mobile confirmation adds a human approval step, and air-gapped QR approval creates greater separation from connected devices at the cost of a more involved transfer process. Key Link adds another option for firms that want Fireblocks wallet administration and policies while keeping key material in their own HSM-based infrastructure.

Policies for transfers and separate admin quorum

Transaction policies can define who may move funds, set per-transaction or time-period limits, and control authorization for transfers and smart-contract actions. The same controls can cover contract deployments, upgrades and calls, rather than applying only to an outgoing wallet payment.

An Admin Quorum protects a different decision: changes to users, whitelisted addresses and network connections require a chosen number of workspace administrators. That separates changes to the account's control perimeter from approval of ordinary day-to-day transfers.

Settlement and exchange balances without a common order book

Transfers can move among internal vaults, connected exchange or fiat accounts, and approved external addresses. The Fireblocks Network can authenticate connected counterparties and provide rotating addresses for supported assets, reducing the need to manually whitelist every address when both sides use the network; the organization's own policies still decide whether a transfer proceeds.

Connected exchange accounts use the institution's exchange API credentials, linking trading balances to custody wallets. Fireblocks does not turn those exchanges into one market or standardize their account rules, liquidity or products. Trading access, fiat movement and counterparty terms remain with the separately connected provider.