Polymarket introduces a withdrawal address whitelist feature; newly added addresses require email verification and a 48-hour waiting period.

November 10 — Polymarket VP of Engineering Josh Stevens announced that the platform has added a withdrawal address whitelist feature. Users can restrict withdrawals to approved addresses; adding a new address requires email verification and sets a 48-hour lock period. If it was not the user's own action, users can cancel the new addition request via the verification email.

Josh stated that the feature is designed to reduce the risk of funds loss after an account session is compromised or a user mistakenly signs a malicious transaction, preventing attackers from transferring funds or positions to unauthorized addresses. He recommends that users of the latest wallet version enable this feature; users can configure it via "Settings → Account."

In addition, the platform is developing Passkey support to further enhance account security. For users who have not yet used a deposit wallet, the team is developing a wallet migration tool; users who do not want to wait can also create a new account to use the feature immediately. The platform also plans to launch more built-in security protections that do not require users to manually enable them in the deposit wallet.