CoachA withdrawal allow-list restricts the destinations to which an account or key may send assets to a list fixed in advance, changed only through a separate, slower procedure, so that a stolen credential cannot move assets to the thief.
| attempt | accepted | reason |
|---|---|---|
| trade with the trading key | yes | ok |
| withdraw with the trading key | no | action outside the key’s scope |
| withdraw to an outside address | no | address not on the allow-list |
| withdraw to the custodian | yes | ok |
| forged signature | no | bad signature |
| replayed a minute later | no | stale request |