System Introduction
I. System Overview
When using the "Deposit Cryptocurrency" or "Withdraw Cryptocurrency" functions, any wallet addresses you use must complete the authentication and whitelisting process.
The operation flow of the wallet address authentication system may vary depending on the platform and wallet type. The following provides a graphic walkthrough of the wallet address authentication process using the HashKey Exchange platform as an example:
Preparations
Confirm that your personal wallet supports message signing. HashKey Exchange does not, in principle, restrict wallet types; common software wallets such as MetaMask, Electrum, MyEtherWallet and hardware wallets such as Ledger Nano S and Trezor are all supported.
Procedure
- Trigger Address Authentication: When depositing, if your deposit source address is a personal wallet address and that address has not been certified by HashKey PRO, your virtual assets will automatically trigger address authentication after receiving a certain number of block confirmations.
- Select Authentication Method: For example, using a MetaMask wallet, on the Add Deposit Whitelist page select the MetaMask authentication method and click [Connect MetaMask].
- Connect Wallet: A wallet connection interface will appear. Confirm the wallet address that needs to be authenticated, click [Next], then click [Connect].
- Small-amount Payment Verification: On the "Customer Wallet Addresses" page click the "Add Authentication" button, accurately enter the wallet address to be authenticated and the corresponding currency information, carefully verify the details, and submit. Log in to your personal cryptocurrency wallet and transfer the specified verification amount to the system-generated verification address.
- Complete Authentication: After completing the small-amount payment verification, the address will be added to the deposit whitelist. Subsequent deposits can directly select that address without requiring reauthentication.
II. Operating Instructions
Permissions Preparation
Log in to the WBO backend system and confirm that you have been granted the operational permissions related to "Cryptocurrency", "Channel Custodial Accounts", and "Customer Wallet Addresses". If you do not have the necessary permissions, please contact an administrator to request them.
Prerequisite: Cryptocurrency Data Maintenance (Primary Step for All Operations)
Menu path: WBO - Service Parameter - Fund Parameters - Cryptocurrency
Before conducting cryptocurrency deposit/withdrawal and wallet address authentication operations, backend operators must first complete the maintenance of cryptocurrency-related data:
- Log in to the WBO backend system and navigate to Service Parameter - Fund Parameters - Cryptocurrency;
- Click "Add" or "Edit" and complete the basic information for the target cryptocurrency (such as currency code, name, authentication rules, etc.);
- After verifying that the information is correct, submit to take effect to ensure subsequent authentication and deposit/withdrawal operations can proceed normally.

Channel Custodial Account Import
Menu path: WBO - VA Clearing Management - Deposits & Withdrawals - Channel Custodial Accounts
- Go to VA Clearing Management - Deposits & Withdrawals - Channel Custodial Accounts;
- Click "Bulk creation" and upload the reviewed channel custodial account list (must conform to the system-specified format);
- After import is complete, verify the account information is correct and click "Confirm". These accounts will be used for automatic allocation prior to customer authentication.

Authentication Record Monitoring
Menu path: WBO - Virtual Asset Management - Deposits & Withdrawals - Customer Wallet Addresses
- Access the "Customer Wallet Addresses" backend management page to view all customer authentication application records;
- Support filtering by "Authentication Status", "Creation Time", "Customer ID", and other criteria. Click a single record to view details (including the allocated custodial account, payment information, verification results, etc.);
- For "Unauthenticated" records, assist customers in troubleshooting (for example, verify whether the transfer has been received or whether the addresses match).

Whitelisting and Subsequent Management
Menu path: WBO - VA Clearing Management - Deposits & Withdrawals - Client Wallet Address
- After a customer address successfully completes authentication, the system will automatically include the address in the whitelist; the backend can view the list of whitelisted addresses;
- Support status management for whitelisted addresses (such as deletion) to mitigate abnormal risks;
- Periodically export authentication and whitelist records to complete compliance filing and data archiving.

Notes
- The wallet address submitted for authentication must be owned by the customer. Do not submit another person's address for authentication, as this may affect the receipt of funds.
- Funds used for the small-amount payment verification are solely for ownership verification; no fees are charged, and there is no need to withdraw them separately after authentication.
- Keep records of operations and transfer receipts generated during the authentication process to facilitate subsequent troubleshooting.
- If system anomalies occur (for example, the page cannot be opened or submission fails), please refresh the page or switch browsers; if the problem persists, contact the technical support team.
- Strictly comply with cryptocurrency-related laws and platform rules. Fraudulent authentication will result in account restrictions and may lead to service termination in severe cases.
