# Is WhiteBIT safe? Check before you connect

> WhiteBIT: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked 2026-10-25.

Canonical: https://tradingagentstack.com/check/whitebit/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. WhiteBIT

# Is WhiteBIT safe to connect?

Exchange · Multi-asset centralized exchange (spot, futures, margin). Checked 2026-10-25; every line links its source.

**Worst case:** WhiteBIT holds your coins, and a leaked key carrying the full Withdraw permission without an IP whitelist can empty the account; idle bot keys also stop working after 14 days.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Create bot keys without the Withdraw permission and add your server's IPs to the whitelist

2. Plan for the 14-day inactivity rule: a standby key that makes no requests is deactivated

3. EEA users: check whether your account is moving to WhiteBIT EU (whitebit.eu) and what that entity supports before relying on it

## What it can do with your money

| Who holds the keys | The exchange holds your funds Custodial exchange account; WhiteBIT says 96% of assets are in cold storage (site meta description). [source](https://whitebit.com/) |
| --- | --- |
| Can funds be sent out to any address? | Yes. Withdrawals available; API-issued keys are revoked if the account is blocked or frozen. [source](https://docs.whitebit.com/guides/app-builders-faq) |
| What a leaked API key can do | Withdrawal rights come only with the full 'Info + Trading + Deposit + Withdraw' set. Each key supports up to 50 whitelisted IPs and WhiteBIT says to always enable IP whitelisting for production keys. Keys unused for 14 consecutive days are deactivated automatically (an IP whitelist does not exempt them). Default permissions are not stated. [source](https://docs.whitebit.com/best-practices/security) |
| Monero and Zcash | **XMR**: XMR/USDT and XMR/USDC spot listed; deposit/withdrawal status not confirmed [source](https://coinranking.com/coin/3mVx2FX_iJFp5+monero-xmr/markets) **ZEC**: ZEC/USDT, ZEC/USDC and ZEC/BTC listed [source](https://coinranking.com/coin/aRGRWLf2RYNq4+zcash-zec/markets) **Regions**: Whether WhiteBIT EU (whitebit.eu) will offer XMR/ZEC was not confirmed [source](https://coinranking.com/coin/3mVx2FX_iJFp5+monero-xmr/markets) |

## Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

- Website: `whitebit.com`

- X: `@WhiteBit`

- App: `https://apps.apple.com/ua/app/whitebit/id1463405025`

Where we confirmed these
- https://whitebit.com/ (footer links x.com/WhiteBit and App Store id1463405025)

- https://www.coingecko.com/en/exchanges/whitebit (whitebit.com, twitter.com/WhiteBit)

- https://apps.apple.com/ua/app/whitebit/id1463405025 (seller UAB Clear White Technologies; privacy policy at whitebit.com)

- https://x.com/WhiteBit (verified, checked 2026-10-25)

## Deadlines

- **2027-07-10**: EU AMLR (Regulation (EU) 2024/1624, Art. 79(1)) applies: crypto-asset service providers may not keep accounts that allow anonymisation or obfuscation of transactions, including through anonymity-enhancing coins (e.g. XMR, ZEC). Relevant if you use this service through its EU-licensed entity (WB-Shield Innovations GmbH 'WhiteBIT EU', Austria; MiCA licence announced 2026-06-19 for whitebit.eu: https://www.theblock.co/post/405421/whitebit-eu-secures-mica-license-in-austria-expanding-regulated-crypto-services-across-europe). [source](https://didit.me/blog/privacy-coins-no-kyc-swaps-rules-2026/)

## Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

| Date | What happened | Amount | Outcome | Source |
| --- | --- | --- | --- | --- |
| 2026-01-23 | Russia declared WhiteBIT and parent W Group 'undesirable', banned it and barred Russian banks and payment providers from processing WhiteBIT transactions; continued use by Russian residents carries criminal penalties |  | Russian users cut off | [source](https://finance.yahoo.com/news/russia-bans-ukrainian-crypto-exchange-121046608.html) |

## Check a link

Got a link, @handle or repo that claims to be WhiteBIT? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for WhiteBIT

We email you if we add an incident, a freeze report, a known fake or a deadline for WhiteBIT. Free; unsubscribe anytime.

## More checks: Exchanges
[Binance](https://tradingagentstack.com/check/binance/)[Bybit](https://tradingagentstack.com/check/bybit/)[OKX](https://tradingagentstack.com/check/okx/)[Kraken](https://tradingagentstack.com/check/kraken/)[Coinbase Advanced](https://tradingagentstack.com/check/coinbase-advanced/)[Hyperliquid](https://tradingagentstack.com/check/hyperliquid/)[Bitget](https://tradingagentstack.com/check/bitget/)[Gemini](https://tradingagentstack.com/check/gemini/)[KuCoin](https://tradingagentstack.com/check/kucoin/)[MEXC](https://tradingagentstack.com/check/mexc/)[Gate](https://tradingagentstack.com/check/gate/)[HTX](https://tradingagentstack.com/check/htx/)[Crypto.com Exchange](https://tradingagentstack.com/check/crypto-com-exchange/)[BingX](https://tradingagentstack.com/check/bingx/)[Bitfinex](https://tradingagentstack.com/check/bitfinex/)[Bitvavo](https://tradingagentstack.com/check/bitvavo/)[Bitstamp](https://tradingagentstack.com/check/bitstamp/)[Pionex](https://tradingagentstack.com/check/pionex/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)