Whitelisting addresses

You can only withdraw to addresses on your whitelist. This is the single most important security feature on the platform. Even if an attacker compromised your password and 2FA, they could not move funds to an arbitrary address — only to addresses you have already approved.

Adding an address

1. Open Wallets → Whitelist.
2. Click Add address.
3. Choose the asset and chain.
4. Enter the destination address and a memorable label.
5. Confirm with your 2FA code.

The 24-hour cooling period

A new whitelist entry is not active immediately. It enters a 24-hour cooling period during which it cannot receive withdrawals. After 24 hours have elapsed, the entry becomes active and you can withdraw to it normally.

Why? An attacker who somehow gained access to your account would still have to wait a full day before they could withdraw to a new address — giving you time to notice and cut access.

Removing an address

Whitelist entries can be removed at any time. Removed entries cannot be re-added — you would have to add a fresh entry which goes through its own 24-hour cooling period.

Memos / destination tags

Some assets (notably XRP, XLM, and exchange-deposit addresses for BNB) require a memo or destination tag to identify the recipient. The whitelist form has a memo field — fill it in if your destination requires one. Without the correct memo, funds may be lost.

Why we don't allow ad-hoc withdrawals

A platform that lets you withdraw to any address on a whim cannot defend against account-takeover attacks. The whitelist + cooling-period model follows the practice of major regulated custodians (Coinbase, BitGo, Copper) and is required by MiCA's safekeeping rules.