Bittrex Settings - I am confused

[mattpatt007]

With the Withdrawl-Whitelist set up, this essentially is a layer of protection so that your currency CAN ONLY be withdrew to the specified wallet that you set up. But I am trying to configure an API, and allowing Withdrawls. With the Withdrawls enabled, it will allow you to programatically withdraw any currency to an address you provide. My question is: If no address is specified, can one withdrawal currency into any address? Who and where are the addresses specified, i.e. If I only configure my Withdrawl Whitelist for ETH, BTC, LTC, but I am using an API and trading XMR, where is that going? What are my Risks?
Essentially if I use an API key, would the Withdrawl-Whitelist hedge my risk of compromise?

[1714677765]

1714677765

[1714677765]

1714677765

[Serpens66]

as far as I know:
if for a specific currency is no address in whitelist, withdrawal to every address is possible. see below
if one or more are in list, only to these addresses is possible.

So yes, this adds extra security for API withdrawal.
There are only a few exchanges that have such an additional security feature. I already wrote to every major exchange to also add such a whitelist. Most of them plan to add this feature, but don't have an ETA on that...
Maybe you can also write to them so they see the demand for this is high.

[sgk]

Last time I checked: if you specify whitelist for ANY currency, you will only be able to withdraw that particular currency. If you want to withdraw some other currency, you need to put a whitelist address for that as well.

The idea being:
- Whitelist protects you from un-authorised withdrawals in case your account gets accessed by someone else.
- If you have BTC & LTC whitelist address but not for other currencies, you can only withdraw BTC and LTC.

This is to prevent anyone from bypassing the whitelist by trading your coins to other currency and withdrawing it.

I think that is how it worked when I checked.

[Serpens66]

yes, sgk is right, I just tested it.