Tron

Note: see the language section for various approaches on writing Tron policies.

Allow TRX transfers under 10,000,000 sun (10 TRX)

The amount field is denoted in sun, the lowest denomination of TRX.

{
  "policyName": "Allow TRX transfers under 10 TRX",
  "effect": "EFFECT_ALLOW",
  "condition": "tron.tx.contract[0].amount < 10000000"
}

Allow all TRX transfers (`TransferContract`)

{
  "policyName": "Allow all TRX transfers",
  "effect": "EFFECT_ALLOW",
  "condition": "tron.tx.contract[0].type == 'TransferContract'"
}

Allow USDT (TRC-20) transfers on Nile testnet

This policy allows transfer calls (selector a9059cbb) on the Nile testnet USDT contract. The contract address differs between Nile testnet and Tron mainnet — double check before reusing this on mainnet.

{
  "policyName": "Enable USDT TRC-20 transfers on Nile testnet",
  "effect": "EFFECT_ALLOW",
  "condition": "tron.tx.contract[0].contract_address == 'TG3XXyExBkPp9nzdajDZsozEu4BkaSJozs' && tron.tx.contract[0].data.startsWith('a9059cbb')"
}

tron.tx.contract[0].data has no 0x prefix (it is stripped for alignment with the examples above); the top-level tron.tx.data convenience field keeps the 0x prefix. See the language page for the full breakdown. The policy language has no substring slicing — use startsWith / endsWith / contains / matches instead, as in the examples on this page.

Restrict a TRC-20 transfer’s recipient using the ABI-encoded parameter

An ERC-20-style transfer(address,uint256) call encodes as: 4-byte selector + the to address left-padded to 32 bytes + the amount. Since the selector and the zero-padding before the address are both fixed, you can pin the recipient with a single startsWith check over selector + padding + address (no substring slicing needed). This lets you enforce an allowed recipient even though 0xkey does not decode ABI parameters for Tron.

{
  "policyName": "Allow USDT transfers only to a specific recipient",
  "effect": "EFFECT_ALLOW",
  "condition": "tron.tx.contract[0].contract_address == 'TG3XXyExBkPp9nzdajDZsozEu4BkaSJozs' && tron.tx.contract[0].data.startsWith('a9059cbb000000000000000000000000<RECIPIENT_ADDRESS_HEX_20_BYTES_NO_0x>')"
}

Restrict resource delegation to an allowlisted receiver (gasless sponsorship)

Use this on the sponsor wallet’s policy to ensure DelegateResourceContract calls can only grant resources to a specific end-user address and cannot exceed a balance cap. See Gasless Tron transactions for the full sponsorship flow.

{
  "policyName": "Allow delegating resources only to a specific receiver, capped balance",
  "effect": "EFFECT_ALLOW",
  "condition": "tron.tx.contract[0].type == 'DelegateResourceContract' && tron.tx.contract[0].receiver_address == '<RECEIVER_ADDRESS>' && tron.tx.contract[0].balance <= 5000000"
}

Pair with the previous example to prevent a sponsor wallet’s policy from allowing it to unstake TRX out from under active delegations.

{
  "policyName": "Deny unfreeze from the sponsor wallet",
  "effect": "EFFECT_DENY",
  "condition": "tron.tx.contract[0].type == 'UnfreezeBalanceV2Contract'"
}

Get started

Products

Crypto ecosystems

Developers

Allow TRX transfers under 10,000,000 sun (10 TRX)

Allow all TRX transfers (`TransferContract`)

Allow USDT (TRC-20) transfers on Nile testnet

Restrict a TRC-20 transfer’s recipient using the ABI-encoded parameter

Restrict resource delegation to an allowlisted receiver (gasless sponsorship)

​Allow TRX transfers under 10,000,000 sun (10 TRX)

​Allow all TRX transfers (TransferContract)

​Allow USDT (TRC-20) transfers on Nile testnet

​Restrict a TRC-20 transfer’s recipient using the ABI-encoded parameter

​Restrict resource delegation to an allowlisted receiver (gasless sponsorship)

​Deny unfreeze operations from the sponsor wallet

Allow TRX transfers under 10,000,000 sun (10 TRX)

Allow all TRX transfers (`TransferContract`)

Allow USDT (TRC-20) transfers on Nile testnet

Restrict a TRC-20 transfer’s recipient using the ABI-encoded parameter

Restrict resource delegation to an allowlisted receiver (gasless sponsorship)

Deny unfreeze operations from the sponsor wallet