securing withdraw

Signed-off-by: Vladimir Vidinliev <v.vidinliev@gmail.com>