Polymarket launches withdrawal address whitelist feature, with a 48-hour lock period for newly added addresses.

Polymarket has rolled out a withdrawal address whitelist that restricts withdrawals and position transfers from deposit wallets to pre-authorized addresses only. New whitelist entries require email verification and a 48-hour lock period, during which users can cancel unauthorized requests via email. The feature, announced by engineering VP Josh Stevens, is aimed at limiting losses from compromised account sessions or malicious transaction signatures. It is now available to users on the latest deposit wallet version and can be enabled in account settings. Polymarket said Passkey support, wallet migration tools and additional built-in safeguards are planned next, making the whitelist a first step toward broader account security.