Is WhiteBIT safe to connect?

Exchange ยท Multi-asset centralized exchange (spot, futures, margin). Checked 2026-10-25; every line links its source.

Worst case: WhiteBIT holds your coins, and a leaked key carrying the full Withdraw permission without an IP whitelist can empty the account; idle bot keys also stop working after 14 days.

Already lost funds? What to do if a bot or wallet is drained.

Safe setup in 3 steps

  1. Create bot keys without the Withdraw permission and add your server's IPs to the whitelist
  2. Plan for the 14-day inactivity rule: a standby key that makes no requests is deactivated
  3. EEA users: check whether your account is moving to WhiteBIT EU (whitebit.eu) and what that entity supports before relying on it

What it can do with your money

Who holds the keysThe exchange holds your funds Custodial exchange account; WhiteBIT says 96% of assets are in cold storage (site meta description). source
Can funds be sent out to any address?Yes. Withdrawals available; API-issued keys are revoked if the account is blocked or frozen. source
What a leaked API key can doWithdrawal rights come only with the full 'Info + Trading + Deposit + Withdraw' set. Each key supports up to 50 whitelisted IPs and WhiteBIT says to always enable IP whitelisting for production keys. Keys unused for 14 consecutive days are deactivated automatically (an IP whitelist does not exempt them). Default permissions are not stated. source
Monero and ZcashXMR: XMR/USDT and XMR/USDC spot listed; deposit/withdrawal status not confirmed source
ZEC: ZEC/USDT, ZEC/USDC and ZEC/BTC listed source
Regions: Whether WhiteBIT EU (whitebit.eu) will offer XMR/ZEC was not confirmed source

Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

Where we confirmed these

Deadlines

Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

DateWhat happenedAmountOutcomeSource
2026-01-23Russia declared WhiteBIT and parent W Group 'undesirable', banned it and barred Russian banks and payment providers from processing WhiteBIT transactions; continued use by Russian residents carries criminal penaltiesRussian users cut offsource

Check a link

Got a link, @handle or repo that claims to be WhiteBIT? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to @TASCheckBot, or add it to your group so anyone can type /check. Alerts on new drains and fakes: @tradingAgentStk.

Get an alert for WhiteBIT

We email you if we add an incident, a freeze report, a known fake or a deadline for WhiteBIT. Free; unsubscribe anytime.

More checks: Exchanges

Something wrong or out of date? Send a correction with a link to the vendor's docs. Not financial advice. How we check.