Maybe do the final withdrawal to the user's public withdrawal address if one is set, otherwise to the address of the last successful withdrawal?