Withdrawal Whitelist at the Crypto Exchange: How to Lock the Withdrawal Path Against Foreign Addresses

If someone has your password and your second factor, only one question still decides whether your balance leaves the exchange: is the attacker's destination address already in your account, or do they have to enter it first? This is exactly where the withdrawal whitelist comes in. It is a list of approved destination addresses, and while it is active, withdrawals go solely to addresses on that list. Everything else is refused, even with the correct password. September 2026 has made this question very practical. On September 7, Bloomberg reported the outflow of around $320 million from a Liquid Network wallet, in which, according to the operator, roughly 4,000 of 4,200 bitcoin were moved. TRM Labs puts the damage from the wave of attacks on Coldcard devices at $116 million. Neither case was an account takeover at an exchange, but both have the same effect on reader behaviour: many are shifting balances between exchanges and their own wallets these days, and every one of those movements runs through precisely the withdrawal path at issue here. Withdrawal whitelist: what the function blocks and what it leaves open Definition in one sentence: a withdrawal whitelist is an address book i...