Withdrawal whitelists.
The fastest path from "I have a GPU or ASIC" to "shares are landing" on the testnet demo. Five steps.
01 What a whitelist does
A withdrawal whitelist is an operator control in the dashboard that restricts where settlements can be sent. With it switched on, the software will only release a payout to an address you have pre-approved — an arbitrary destination entered at the last moment is rejected.
The point is to limit the damage if your dashboard account is ever compromised. Without a whitelist, an attacker who reaches your account could redirect a settlement to an address of their choosing. With one, they would first have to add their address and then wait out a time-lock before it could be used — a window that gives you time to notice and react.
02 Enable the whitelist
Open Settings → Payouts in the dashboard and turn on Restrict settlements to approved addresses. From that point:
- Settlements can only target an address that is on your approved list.
- Any attempt to settle to an address that is not on the list is declined.
- Changes to the list itself are gated behind two-factor authentication, so enable 2FA first.
The whitelist is operator-configurable — you decide whether to use it, which addresses belong on it, and (within the bounds below) how the cool-down behaves. It is off by default so you can explore the demo freely; I would turn it on before treating any deployment as more than a sandbox.
03 Add and remove addresses
From the same Payouts panel:
- Add an address. Paste the destination address and an optional label, then confirm with a fresh 2FA code. The address is accepted but enters a pending state — it is not yet usable (see the next section).
- Remove an address. Removing an approved address also requires a 2FA code. Removal takes effect immediately: there is no waiting period to take a destination out of service, only to bring one in.
04 The cool-down window
A newly-added address is held in a time-locked cool-down before it becomes usable for settlements. During the cool-down the address shows as pending and cannot receive a payout. Once the window elapses it becomes active automatically.
This is the safeguard that makes the whitelist worth having: even if someone reaches your account, they cannot instantly point funds at a fresh address — the time-lock forces a delay, and you are notified that a new address was added so you can remove it before it ever activates. The cool-down duration is operator-configurable in the Payouts settings, so you can match it to how much standing notice you want.