Step 10 of 14

Withdraw, export key, wallets, trading password, 2FA

10.1 Withdraw

A web withdrawal needs a Trading password (10.4) + a 2FA code (10.5). If either is missing, the page offers Set trading password / Turn on 2FA.

Wallet → Withdraw in the right column (or account menu → Withdraw):

1. Choose the Network (for an EVM wallet, switch between BSC / Base / ARC / RBH here) and the From wallet.
2. Asset: the native coin, or a token in the wallet ("… in this wallet").
3. Recipient address: pick a registered address, or tap Register address → enter the address → Register. A newly registered address can be used right away; on accounts under 24 hours old or flagged by our security checks it can be used 24 hours later (it shows "usable in …"). Only ordinary wallet addresses are supported, not contract addresses; make sure the address belongs to this network. If a new address starts and ends like one of your existing addresses but is a different one, the page warns you about address poisoning.
4. Amount: enter an amount, or pick 25% / 50% / Max. For the native coin, "Max" = balance minus the network fee; if the wallet still holds positions, a little is kept back to pay for selling them (SOL 0.003, BSC 0.0005 BNB).
5. Tap Confirm transfer and enter your Trading password and 2FA code (or Use a backup code).
6. "Submitted. The result shows up under recent withdrawals and in your notifications." Status: Processing / Sent / Failed / Confirming.

What the page says: Withdrawals need your trading password and a 2FA code. They are paused for 24 hours after a security change. A newly registered address can be used right away, unless the account is under 24 hours old or flagged by our security checks (then after 24 hours). Withdrawals cannot be reversed. Check the address and the network.

• Withdrawals have no platform fee; the on-chain network fee comes out of the balance.
• Solana: the remaining balance must be 0 or at least 0.00089 SOL.
• Withdrawing the native coin to your own registered address has no per-withdrawal or daily limit; token transfers and cross-chain transfers may be limited, and anything above a limit is rejected.

10.2 Export a private key

See 1.5. In addition:

• You enter your trading password and a 2FA code; the key hides itself after 30 seconds: "The key is hidden. Export again if you still need it."
• If exports across the whole platform are unusually frequent within an hour, exporting pauses for 1 hour ("Key export is paused (platform safety). Try again in an hour.").
• Every export is logged as a security event and you are notified.
• When the platform has this protection on, a wallet that just had its key exported is treated as an external address: for 30 minutes it cannot receive through the no-password paths such as bridging or rebate withdrawals (you see "…Try again in 30 minutes; your funds did not move.").

10.3 Several wallets: default wallet, removal

• Wallet cards are titled like "Solana wallet 1" or "EVM wallet 2". The one marked "Default" is the one this wallet type trades with; tap Set as default to switch ("Set as default. Trades of this wallet type now use it.").
• Each chain has a row on the card: balance, USD value, and Deposit / Withdraw / Bridge buttons.
• Remove: the wallet is removed from your account and its key can no longer be exported from here, so make sure you have exported the key first. A wallet cannot be removed when: it still holds funds (an EVM wallet is checked on Base and the other chains too), you have open live positions on its chains, or it is your current trading wallet (and you have another one of the same type).

10.4 Trading password

Account → Security → Trading password (or "Withdrawal security" on the Wallet page):

• You enter it to withdraw and to export a key; placing orders needs no trading password.
• Five wrong attempts in a row lock it for 30 minutes.

10.5 2FA code (two-step verification)

Account → Security → Two-step verification:

• Turn on: see 1.5. Once it is on, logging in with email and password or with Google also asks for the 6 digits from your authenticator. For email-only accounts, withdrawals and key exports are paused for 24 hours after turning it on.
• The 2FA code is only used to log in, withdraw and export a key; nothing else (including placing orders) asks for it.
• After 5 wrong codes in a row, wait 15 minutes before trying again.
• New backup codes: all old backup codes stop working; enter a code or a backup code once to confirm. The page shows "n backup codes left".
• Turn off: enter a code or a backup code once to confirm. Withdrawals and key exports are paused for 24 hours after you turn it off.

10.6 Lost your 2FA (when the page offers this)

Accounts that log in with email + password:

1. At the 2FA code step of logging in, tap "Lost your authenticator and backup codes?".
2. Enter the account email and login password → Send confirmation email (valid for 30 minutes) → open the link in the email to confirm.
3. After you confirm, two-step verification turns off only after 48 hours (7 days if the account's login password was reset by email in the last 7 days). During that time, signing in with a code once cancels the request automatically. Withdrawals are paused for 24 hours after it turns off.
4. Once it is off, you can turn it on again under Account → Security.

If you suspect someone else made the request (you get a "Two-step recovery requested" notification, and the top of the page shows "Someone asked to turn off your two-step verification. It takes effect at …."):

• Logged in: tap "Not me — cancel" on the banner.
• Cannot log in (for example you suspect your password was changed): after a wrong password on the login page, "Block a recovery request" appears. Enter the account email and the current 6-digit code from your authenticator (a backup code also works) → Submit. No password needed.

Accounts linked to Telegram recover in the Telegram bot. If the page shows "Self-service two-step recovery isn’t open yet", contact the official community.