As many other exchanges have set in place.

If an attacker is already in my account ready to try and withdraw stolen/hacked coins, he probably already has both my email credentials and 2fa key, so using these two methods as verification (edit: as verification to disable whitelisted addresses) only marginally improves security.

I get that you don’t want to give people too hard a time if they do need to send funds to a new address in a hurry, but the voluntary option to have a time delay of say 24h on the disabling of whitelist withdrawal should at least be available to those who opt for extra security in my opinion.

edit: By the way should this have been posted to r/BinanceExchange instead?


➔ Visit Binance now and start trading

3 Comments

  1. defmans7 on 2. September 2019 at 0:03

    Yes definitely. If you’ve gone to the effort of setting up that extra security, a time delay on that option makes 100% sense.

     


  2. SamZFury on 2. September 2019 at 0:03

    +1

     


  3. Tyanuh on 2. September 2019 at 0:03

    As an addition, I’ve checked at least bitfinex and kraken and both have this feature.