diff --git a/tests/plugins/whitelist/Cargo.lock b/tests/plugins/whitelist/Cargo.lock
new file mode 100644
index 0000000..2e2d15b
--- /dev/null
+++ b/tests/plugins/whitelist/Cargo.lock
@@ -0,0 +1,137 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 3
+
+[[package]]
+name = "bech32"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf9ff0bbfd639f15c74af777d81383cf53efb7c93613f6cab67c6c11e05bbf8b"
+
+[[package]]
+name = "bitcoin"
+version = "0.28.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05bba324e6baf655b882df672453dbbc527bc938cadd27750ae510aaccc3a66a"
+dependencies = [
+ "bech32",
+ "bitcoin_hashes",
+ "secp256k1",
+]
+
+[[package]]
+name = "bitcoin_hashes"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "006cc91e1a1d99819bc5b8214be3555c1f0611b169f527a1fdc54ed1f2b745b0"
+
+[[package]]
+name = "cc"
+version = "1.0.73"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2fff2a6927b3bb87f9595d67196a70493f627687a71d87a0d692242c33f58c11"
+
+[[package]]
+name = "itoa"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112c678d4050afce233f4f2852bb2eb519230b3cf12f33585275537d7e41578d"
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.40"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd96a1e8ed2596c337f8eae5f24924ec83f5ad5ab21ea8e455d3566c69fbcaf7"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3bcdf212e9776fbcb2d23ab029360416bb1706b1aea2d1a5ba002727cbcab804"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "ryu"
+version = "1.0.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3f6f92acf49d1b98f7a81226834412ada05458b7364277387724a237f062695"
+
+[[package]]
+name = "secp256k1"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26947345339603ae8395f68e2f3d85a6b0a8ddfe6315818e80b8504415099db0"
+dependencies = [
+ "secp256k1-sys",
+]
+
+[[package]]
+name = "secp256k1-sys"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "152e20a0fd0519390fc43ab404663af8a0b794273d2a91d60ad4a39f13ffe110"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.138"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1578c6245786b9d168c5447eeacfb96856573ca56c9d68fdcf394be134882a47"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.138"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "023e9b1467aef8a10fb88f25611870ada9800ef7e22afce356bb0d2387b6f27c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.82"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "82c2c1fdcd807d1098552c5b9a36e425e42e9fbd7c6a37a8425f390f781f7fa7"
+dependencies = [
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "syn"
+version = "1.0.98"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c50aef8a904de4c23c788f104b7dddc7d6f79c647c7c8ce4cc8f73eb0ca773dd"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5bd2fe26506023ed7b5e1e315add59d6f584c621d037f9368fea9cfb988f368c"
+
+[[package]]
+name = "whitelist"
+version = "0.1.0"
+dependencies = [
+ "bitcoin",
+ "serde",
+ "serde_json",
+]
diff --git a/tests/plugins/whitelist/Cargo.toml b/tests/plugins/whitelist/Cargo.toml
new file mode 100644
index 0000000..478bbca
--- /dev/null
+++ b/tests/plugins/whitelist/Cargo.toml
@@ -0,0 +1,9 @@
+[package]
+name = "whitelist"
+version = "0.1.0"
+edition = "2021"
+
+[dependencies]
+bitcoin = "0.28.1"
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
diff --git a/tests/plugins/whitelist/src/main.rs b/tests/plugins/whitelist/src/main.rs
new file mode 100644
index 0000000..fc3922c
--- /dev/null
+++ b/tests/plugins/whitelist/src/main.rs
@@ -0,0 +1,72 @@
+use std::error::Error;
+use std::fs::File;
+use std::io::{self, BufRead, Write};
+use std::str::FromStr;
+
+use bitcoin::{consensus::encode, hashes::hex::FromHex, Address, Script, Transaction};
+use serde::{Deserialize, Deserializer};
+use serde_json::json;
+
+/// A plugin which returns any attempt with a spend transaction sending funds to unknown addresses
+fn main() -> Result<(), Box<dyn Error>> {
+    let mut buffer = String::new();
+    let stdin = io::stdin();
+    stdin.read_line(&mut buffer)?;
+    let req: Request = serde_json::from_str(&buffer)?;
+
+    let whitelist_file = File::open(req.config.whitelist_file_path)?;
+    let mut whitelist: Vec<Script> = Vec::new();
+    for line in io::BufReader::new(whitelist_file).lines() {
+        if let Ok(value) = line {
+            let address = Address::from_str(&value)?;
+            whitelist.push(address.payload.script_pubkey());
+        }
+    }
+
+    let mut vaults_to_revault: Vec<String> = Vec::new();
+    for attempt in req.block_info.new_attempts {
+        for output in attempt.candidate_tx.output {
+            if !whitelist.contains(&output.script_pubkey) {
+                vaults_to_revault.push(attempt.deposit_outpoint);
+                break;
+            }
+        }
+    }
+
+    let resp = json!({ "revault": vaults_to_revault });
+    let bytes = serde_json::to_vec(&resp)?;
+    io::stdout().write(&bytes)?;
+    Ok(())
+}
+
+#[derive(Deserialize)]
+struct Request {
+    block_info: BlockInfo,
+    config: Config,
+}
+
+#[derive(Deserialize)]
+struct Config {
+    whitelist_file_path: String,
+}
+
+#[derive(Deserialize)]
+struct BlockInfo {
+    new_attempts: Vec<Attempt>,
+}
+
+#[derive(Deserialize)]
+struct Attempt {
+    deposit_outpoint: String,
+    #[serde(deserialize_with = "deserialize_tx")]
+    candidate_tx: Transaction,
+}
+
+pub fn deserialize_tx<'de, D>(deserializer: D) -> Result<Transaction, D::Error>
+where
+    D: Deserializer<'de>,
+{
+    let hex = String::deserialize(deserializer)?;
+    let bytes = Vec::from_hex(&hex).map_err(serde::de::Error::custom)?;
+    encode::deserialize::<Transaction>(&bytes).map_err(serde::de::Error::custom)
+}
diff --git a/tests/requirements.txt b/tests/requirements.txt
index 7013952..ea6b8ed 100644
--- a/tests/requirements.txt
+++ b/tests/requirements.txt
@@ -6,6 +6,7 @@ bip32~=2.0
 pynacl==1.4
 noiseprotocol==0.3.1
 toml==0.10.2
+bitcoin==1.1.42
 
 # For the bitcoind proxy
 Flask==2.0.3
diff --git a/tests/test_framework/utils.py b/tests/test_framework/utils.py
index bb97512..72e8c3b 100644
--- a/tests/test_framework/utils.py
+++ b/tests/test_framework/utils.py
@@ -140,6 +140,17 @@ def get_descriptors(stks_xpubs, cosigs_keys, mans_xpubs, mans_thresh, cpfp_xpubs
     )
 
 
+def compile_rust_binary(directory_path):
+    cargo_toml = os.path.join(directory_path, "Cargo.toml")
+    try:
+        subprocess.check_call(
+            ["cargo", "build", "--manifest-path", cargo_toml]
+        )
+    except subprocess.CalledProcessError as e:
+        logging.error(f"Error compiling {str(directory_path)}: {str(e)}")
+        raise e
+
+
 # FIXME: have a python-revault-tx lib to avoid this hack..
 def get_signed_txs(
     stks_xprivs,
@@ -166,14 +177,7 @@ def get_signed_txs(
             "txbuilder",
         )
     )
-    txbuilder_cargo_toml = os.path.join(txbuilder_dir, "Cargo.toml")
-    try:
-        subprocess.check_call(
-            ["cargo", "build", "--manifest-path", txbuilder_cargo_toml]
-        )
-    except subprocess.CalledProcessError as e:
-        logging.error(f"Error compiling txbuilder: {str(e)}")
-        raise e
+    compile_rust_binary(txbuilder_dir)
 
     txbuilder_bin = os.path.join(txbuilder_dir, "target", "debug", "txbuilder")
     cmd = [
diff --git a/tests/test_plugins.py b/tests/test_plugins.py
index 7109d76..e4e162a 100644
--- a/tests/test_plugins.py
+++ b/tests/test_plugins.py
@@ -4,7 +4,7 @@
 from base64 import b64encode
 
 from fixtures import *
-from test_framework.utils import COIN, DEPOSIT_ADDRESS, DERIV_INDEX, CSV
+from test_framework.utils import COIN, DEPOSIT_ADDRESS, DERIV_INDEX, CSV, compile_rust_binary
 
 
 def test_max_value_in_flight(miradord, bitcoind):
@@ -195,6 +195,111 @@ def test_revault_attempts_without_spend_tx(miradord, bitcoind, coordinator, nois
     miradord.wait_for_log(f"Forgetting about consumed vault at '{deposit_outpoint}'")
 
 
+def test_whitelist(miradord, bitcoind, coordinator, noise_keys):
+    """
+    Sanity check that we are only going to revault attempts that have no candidate
+    spend transaction.
+    """
+
+    whitelist_file_path = os.path.join(
+        os.path.dirname(__file__), "plugins", "whitelist.txt"
+    )
+    whitelist_file = open(whitelist_file_path, "w")
+    whitelist_file.close()
+
+    whitelist_directory = os.path.join(os.path.dirname(__file__), "plugins", "whitelist")
+    compile_rust_binary(whitelist_directory)
+
+    plugin_path = os.path.join(whitelist_directory, "target", "debug", "whitelist")
+    miradord.add_plugins(
+        [{"path": plugin_path, "config": {"whitelist_file_path": whitelist_file_path}}]
+    )
+
+    vaults_txs = []
+    vaults_outpoints = []
+    deposit_value = 4
+    for i in range(2):
+        deposit_txid, deposit_outpoint = bitcoind.create_utxo(
+            DEPOSIT_ADDRESS,
+            deposit_value,
+        )
+        bitcoind.generate_block(1, deposit_txid)
+        txs = miradord.watch_vault(
+            deposit_outpoint, deposit_value * COIN, DERIV_INDEX
+        )
+        vaults_outpoints.append(deposit_outpoint)
+        vaults_txs.append(txs)
+
+        # We share the spend txs to the coordinators
+    spend_tx = b64encode(bytes.fromhex(vaults_txs[0]["spend"]["tx"])).decode()
+    coordinator.set_spend_tx(
+        noise_keys["manager"].privkey, [vaults_outpoints[0]], spend_tx
+    )
+    spend_tx = b64encode(bytes.fromhex(vaults_txs[1]["spend"]["tx"])).decode()
+    coordinator.set_spend_tx(
+        noise_keys["manager"].privkey, [vaults_outpoints[1]], spend_tx
+    )
+
+    # Unvault the second vault
+    bitcoind.rpc.sendrawtransaction(vaults_txs[1]["unvault"]["tx"])
+    unvault_txid = bitcoind.rpc.decoderawtransaction(vaults_txs[1]["unvault"]["tx"])[
+        "txid"
+    ]
+    bitcoind.generate_block(1, unvault_txid)
+    miradord.wait_for_logs(
+        [
+            f"Got a confirmed Unvault UTXO for vault at '{vaults_outpoints[1]}'",
+            f"Broadcasted Cancel transaction '{vaults_txs[1]['cancel']['tx']['20']}'",
+        ]
+    )
+
+    # The Cancel transactions has been broadcast for vault #1 because the spend
+    # was sending funds to an address not present in the whitelist file.
+    cancel_txid = bitcoind.rpc.decoderawtransaction(
+        vaults_txs[1]["cancel"]["tx"]["20"]
+    )["txid"]
+    bitcoind.generate_block(1, wait_for_mempool=cancel_txid)
+    miradord.wait_for_log(
+        f"Cancel transaction was confirmed for vault at '{vaults_outpoints[1]}'"
+    )
+
+    # We append the address of the first spend tx to the whitelist
+    whitelist_file = open(whitelist_file_path, "w")
+    spend_tx = bitcoind.rpc.decoderawtransaction(vaults_txs[0]["spend"]["tx"])
+    for output in spend_tx["vout"]:
+        whitelist_file.write(output["scriptPubKey"]["address"])
+        whitelist_file.write("\n")
+    whitelist_file.close()
+
+    # Unvault the first vault
+    bitcoind.rpc.sendrawtransaction(vaults_txs[0]["unvault"]["tx"])
+    unvault_txid = bitcoind.rpc.decoderawtransaction(vaults_txs[0]["unvault"]["tx"])[
+        "txid"
+    ]
+    bitcoind.generate_block(1, unvault_txid)
+    miradord.wait_for_logs(
+        [
+            f"Got a confirmed Unvault UTXO for vault at '{vaults_outpoints[0]}'",
+            "Done processing block",
+        ]
+    )
+
+    # Now mine the spend tx for vault #0
+    bitcoind.generate_block(CSV)
+    bitcoind.rpc.sendrawtransaction(vaults_txs[0]["spend"]["tx"])
+    spend_txid = bitcoind.rpc.decoderawtransaction(vaults_txs[0]["spend"]["tx"])["txid"]
+    bitcoind.generate_block(1, wait_for_mempool=spend_txid)
+    miradord.wait_for_log(
+        f"Noticed .* that Spend transaction was confirmed for vault at '{vaults_outpoints[0]}'"
+    )
+    # Generate two days worth of blocks, the WT should forget about this vault
+    bitcoind.generate_block(288)
+    miradord.wait_for_log(f"Forgetting about consumed vault at '{deposit_outpoint}'")
+
+    # clean the whitelist file
+    os.remove(whitelist_file_path)
+
+
 def test_multiple_plugins(miradord, bitcoind):
     """Test we use the union of all plugins output to revault. That is, the stricter one
     will always rule."""