Whitelist

Being whitelisted means a wallet address, or in some cases a verified identity, has been pre-approved to take part in a token or NFT launch before it opens to the public. The organizer builds this list ahead of time, then configures the sale's smart contract or minting platform to check every incoming transaction against it, rejecting anyone who is not on the list.

Projects run whitelists for practical reasons beyond hype. They limit how many wallets can buy in during the earliest, often cheapest, phase of a sale, which curbs bots and Sybil attacks where one person spins up dozens of wallets to grab an outsized share. During an Initial Coin Offering (ICO) or Pre-Sale, whitelisting can also serve a compliance function: applicants submit an email, wallet address, and sometimes full Know Your Customer (KYC) documentation, letting the issuer screen out participants from restricted jurisdictions before any funds move.

NFT projects use a lighter version of the same idea. Instead of identity checks, addresses earn a spot by being active in a Discord community, holding a partner collection, or winning a raffle. Modern contracts typically store the approved addresses as a Merkle tree rather than a full on-chain list, which keeps gas costs down while still letting the contract cheaply verify membership at mint time.

The main risk sits with the applicant, not the mechanism: scammers routinely run fake whitelist forms asking for seed phrases or upfront payments. A legitimate whitelist only ever needs a public wallet address, never private keys.