With the Withdrawl-Whitelist set up, this essentially is a layer of protection so that your currency CAN ONLY be withdrew to the specified wallet that you set up. But I am trying to configure an API, and allowing Withdrawls. With the Withdrawls enabled, it will allow you to programatically withdraw any currency to an address you provide. My question is: If no address is specified, can one withdrawal currency into any address? Who and where are the addresses specified, i.e. If I only configure my Withdrawl Whitelist for ETH, BTC, LTC, but I am using an API and trading XMR, where is that going? What are my Risks?
Essentially if I use an API key, would the Withdrawl-Whitelist hedge my risk of compromise?