Withdrawal Whitelist
A security feature restricting an account's withdrawals to a pre-approved list of addresses, blocking transfers to any address not already on that list.
A withdrawal whitelist is a security feature, commonly offered by exchanges and some custody solutions, that restricts an account's outgoing transfers to a specific, pre-approved list of destination addresses, automatically blocking any withdrawal attempt to an address not already on that list. Adding a new address to the whitelist typically requires a waiting period and additional verification, specifically to prevent an attacker who gains unauthorized account access from immediately adding their own address and draining funds.
The security benefit of a withdrawal whitelist is that even full account takeover — for example, through a compromised password or a SIM swap (see Kaavon's dedicated glossary entry) — doesn't by itself let an attacker redirect funds to an address they control, since the whitelist's mandatory delay gives the legitimate account owner a window to notice and respond to a suspicious new-address request before it becomes active. The tradeoff is reduced flexibility and speed for legitimate withdrawals to a new address the user genuinely wants to add.
Examples
- An attacker who gains unauthorized access to an exchange account protected by a withdrawal whitelist still can't redirect funds to their own address without first adding it and waiting out the mandatory delay.
- Users who frequently withdraw to new addresses may find a withdrawal whitelist's mandatory waiting period inconvenient, even though it's specifically designed to protect against account takeover.