There is something I don't get in the original post. For outgoing transfers, we get an email verification with a link to click to confirm the transaction. Without this process, it's not possible. So how would it be possible without getting access to your own email.
Bittrex usually answer to support ticket in 24 hours average but tracking the IP is worthless because only an idiot village would use his original IP without masking it
You do? Mine does not function like this at Bittrex - it does for a few other exchanges but not for Bittrex.. I should probably cruise through my settings pages and see if I can enable that. If not it should really be mandatory on the site.. kind of like a 3FA if you will.
I've been pulling my longer term holdings off of all exchanges, I get realllyyy nervous when I see a balance in an exchange over a few thousand $$$.
Yes, it's how it works for me. For every transfer outside Bittrex I receive an email for verification purpose and I need to click the link inside to allow the transfer otherwise it is not possible. It is a setting set by default so you shall have it enabled as well.
Also, you can use the "IP address whitelisting" so you can only place orders or withdraw funds from the IP listed.
And the "Withdrawal address whitelisting" so you can only withdraw a specified crypto to the specified addresses you set
Edit: after checking quickly I have not found where it is possible to disable the email verification process. :/