Disabling withdrawal whitelist should have a time delay option
As many other exchanges have set in place.
If an attacker is already in my account ready to try and withdraw stolen/hacked coins, he probably already has both my email credentials and 2fa key, so using these two methods as verification (edit: as verification to disable whitelisted addresses) only marginally improves security.
I get that you don’t want to give people too hard a time if they do need to send funds to a new address in a hurry, but the voluntary option to have a time delay of say 24h on the disabling of whitelist withdrawal should at least be available to those who opt for extra security in my opinion.
edit: By the way should this have been posted to r/BinanceExchange instead?
Yes definitely. If you’ve gone to the effort of setting up that extra security, a time delay on that option makes 100% sense.
+1
As an addition, I’ve checked at least bitfinex and kraken and both have this feature.