Skip to main content

Operator Controls

Operator Controls is the admin for your exchange. You use it to run the exchange day to day: users, KYC, deposits and withdrawals, markets, assets, fees, plugins, branding and operator roles. The Cloud Dashboard handles your account, billing, hosting and websites. Operator Controls handles what happens inside the exchange.

Opening Operator Controls​

Click the blue Operator Controls button on the Overview page, the My Exchange page or the Hosting header. It opens in a new tab at https://dash.hollaex.com/admin/<your exchange ID>/login.

The button is disabled when:

  • the exchange hasn't finished setup ("Available after exchange setup completes");
  • it's stopped ("Start the exchange to open its operator controls");
  • it's terminated;
  • a restart, start, stop, go-live or upgrade is in progress.

Operator Controls opens only for dashboard members of that exchange. If you aren't signed in to the dashboard, you're sent to the dashboard login first, then back to Operator Controls.

Signing in​

Operator Controls needs two sign-ins:

  1. Your dashboard login, which proves you're a member of the exchange.
  2. Your exchange operator account: the administrator account on your exchange website, with its own email, password and two-factor authentication. This is not your dashboard login. The sign-in screen says "Sign in to Operator Controls".

Depending on your exchange's settings, you may also be asked to complete a captcha, confirm the login by email, or enter a code from your authenticator app.

If your exchange locks idle sessions, Operator Controls asks for your six-digit account PIN after a period of inactivity, and you carry on where you left off. After too many wrong PIN attempts you're signed out on every device and must sign in again.

Each browser tab stays on one exchange. To work on a different exchange, open its Operator Controls from the dashboard in its own tab.

Allow dash.hollaex.com on your exchange (CORS and captcha)​

Operator Controls runs on dash.hollaex.com and calls your exchange's API from there. Two exchange settings can block it. Check both before you rely on Operator Controls.

Allowed Domains (CORS)​

In Operator Controls, go to Exchange → Configuration → Security → Allowed Domains. This list controls which other websites may call your exchange API from a browser (CORS). Your exchange's own domain is always allowed.

  • If the list is empty, any website can call the API, and Operator Controls works.
  • If the list has any entries, only those domains (plus your exchange domain) are allowed. Add dash.hollaex.com to the list, press Add, then Save. Otherwise Operator Controls opens, but its pages stay empty because the browser blocks the requests.

Enter it as a plain hostname, dash.hollaex.com, with no path. Subdomains aren't matched automatically, so each domain has to be listed exactly.

If you restrict Allowed Domains without dash.hollaex.com, you can no longer load Operator Controls to fix it. Contact support to have it added.

Cloudflare Turnstile (captcha)​

If your exchange uses Cloudflare Turnstile on login (Exchange → Configuration → Security → Cloudflare Turnstile), the Operator Controls sign-in shows the same captcha. Turnstile only works on hostnames listed in your widget's settings, so the captcha fails on dash.hollaex.com unless it's listed there too.

To fix it, open the Cloudflare dashboard, go to Turnstile, open the widget whose site key your exchange uses, and add dash.hollaex.com to its Hostnames. This setting lives in your Cloudflare account, not in HollaEx.

Finding your way around​

The sidebar is split into two workspaces, with a switcher at the top:

  • Operations ("Users, cases and day-to-day review"): work about a person. Review queues, support, users and their activity.
  • Exchange ("Configuration and venue-wide monitoring"): work about the exchange itself. Markets, liquidity, treasury, fees, plugins and settings.

Overview is the landing page after sign-in and is always listed.

To jump straight to any page or setting, use the search in the top bar (Ctrl+K). You can search for things like users, fees, markets or settings. Typing a number jumps to that user ID.

You only see the pages your operator role allows. If a page or a whole workspace is missing, ask an exchange admin to change your role under Access Control. Some entries, such as Support and Notifications, appear only when that feature is turned on for your exchange.

Operations workspace​

Review Queue​

Everything waiting on an operator, in one place:

  • Sign Up Approval: accounts blocked by the sign-up whitelist.
  • ID Verification: KYC documents submitted for review.
  • Bank Verification: bank accounts awaiting confirmation.
  • Withdrawals: unconfirmed withdrawals to settle.

Support​

The help desk, when ticketing is enabled: Tickets, Performance and Help desk setup for routing, shifts, escalation and ratings.

People​

Users and Companies. Search and filter users, or add one. Open a user to see their profile and manage them: verification, 2FA, freezing or flagging the account, trading fees, bank accounts and payment methods, balances, orders, trades, deposits, withdrawals, stakes, login history, referrals and metadata.

Activity​

Deposits, Withdrawals, Transactions, Trades and Orders across the whole exchange. Deposits and withdrawals can be searched by sender address. Open a transaction to see its details, including any Travel Rule information collected for it.

Security​

Sessions & Logins: active user sessions and the login log.

Exchange workspace​

Analytics​

Exchange-wide reports on trading volumes, fees and users, including trading fees by verification tier and side.

Markets​

  • Markets & Pairs: the public markets on your exchange, their pairs and orders.
  • P2P: peer-to-peer trading for merchants and users, with its settings.

Liquidity​

Overview, Pools, Routing, Activity and Network pools. Liquidity pools are how an exchange sources and routes liquidity for its markets, and they replace the per-pair OTC Desk and Convert screens.

Legacy​

OTC Desk and Convert (Quick Trade). These per-pair screens keep working while an exchange moves its deals onto liquidity pools.

Treasury​

  • Exchange Wallet: the financial summary, user wallet addresses, exchange balances and blacklisted addresses.
  • Assets: the coins on your exchange. Add new assets here.
  • Transfer: move funds between accounts.
  • Fiat Controls: payment accounts, on-ramp and off-ramp, and fiat fees.

Fees & Revenue​

  • Transaction Limits: deposit, withdrawal and trading limits per asset and tier.
  • Fee Markups: extra fees on deposits and withdrawals.
  • Earnings: fee settlement and what your exchange has earned.

Products​

Stakes for CeFi staking pools, users' stakes and staking analytics, and Duster for converting small leftover balances.

Plugins​

Your installed plugins. Install, update, configure and restart plugins here. Opened from the dashboard, it lists the plugins published on the dashboard under Available to install with an Install button, and shows Update to vX when a newer version of an installed plugin is published; neither needs a file download. Opened any other way, plugins are added from a JSON file downloaded on the dashboard's Plugins page. Plugin installs and updates need the Enterprise plan on a cloud exchange. KYC, AML screening, fiat on-ramps, SMS and custody (for example Guveno) are all plugins.

Configuration​

  • Onboarding: sign-up settings.
  • Email and Alerts, including routing operator alerts to Slack and Telegram.
  • Push notifications and, when enabled, Notifications for per-user inboxes and campaigns.
  • Security: geofencing and country blocking, Cloudflare Turnstile captcha, forced 2FA for withdrawals, automatic deposit and withdrawal processing, new-device login confirmation, Google sign-in (OAuth), Allowed Domains (CORS), admin API IP restrictions, IP whitelist, blocked sources and automatic blocking.
  • Features: turn exchange features on or off, such as Pro Trade, Quick Trade, Auto Trade, chain trading, staking, P2P, referrals, profit and loss, fiat controls and chat.
  • Localization and Apps.
  • Tiers: account tiers and the trading fees for each tier.
  • Announcements and Chat.

Branding​

Branding, Footer and Help Info.

Access Control​

Operator Roles, Role Management and System Permissions. Use these to invite operators and decide what each one can see and do.

System​

Admin Logs, Downloads (CSV exports) and Resources.

Dashboard roles vs operator roles​

These are separate:

  • Dashboard member roles (owner, admin, tech, billing, business) control what you can do in the HollaEx dashboard, and whether you can open Operator Controls at all.
  • Operator roles (under Access Control in Operator Controls) control which pages and actions you have inside the exchange admin.

Being a dashboard owner doesn't give you an exchange operator account. Your exchange operator account and its role are managed inside Operator Controls.

Troubleshooting Operator Controls​

  • "Exchange admin is not available for this exchange." You aren't an active member of this exchange in the dashboard, or the exchange isn't set up and running. Check the exchange's status on Hosting, or ask an owner or admin to invite you.
  • "Your access to this exchange could not be verified. Please try again." The dashboard couldn't complete the membership check. Reload the page after a moment. If it keeps happening, contact support.
  • "Exchange admin is not available on this address." Operator Controls only opens from dash.hollaex.com. Use the button in the dashboard rather than an old bookmark or another address.
  • Operator Controls loads but pages are empty or requests fail (the browser blocks them with a CORS error). Your exchange's Allowed Domains list is set but doesn't include dash.hollaex.com. Add it under Configuration → Security → Allowed Domains (see above). If you can't get in to change it, contact support.
  • Captcha fails or never loads at sign-in ("Please complete the captcha verification"). Your Cloudflare Turnstile widget doesn't list dash.hollaex.com as a hostname. Add it in the Cloudflare dashboard under Turnstile → your widget → Hostnames.
  • "Your login session expired. Please sign in again." Sign in again with your exchange operator account.
  • A page you need is missing from the sidebar. Your operator role doesn't include it. Ask an exchange admin to update your role under Access Control → Operator Roles.