Polymarket has introduced a withdrawal address whitelist feature to enhance user fund security. Announced by Vice President of Engineering Josh Stevens, the new system allows users to lock withdrawal addresses on their deposit wallets. Adding any new address requires email verification and triggers a 48-hour time lock before activation. Users can cancel unauthorized actions via email, ensuring that compromised sessions or mistakenly signed malicious transactions cannot transfer funds to uncontrolled addresses. The feature is accessible under "Settings - Account," with Passkey support planned for upcoming release. Polymarket's team is also developing a migration tool for non-deposit wallets and preparing advanced built-in security protections that will activate without manual user intervention.