All code of BankX can be found at [https://github.com/BankXio.](https://github.com/BankXio) Documentation for the assets provided in the table can be found at [https://docs.bankx.io/docs/doc-Whitepaper/.](https://docs.bankx.io/docs/doc-Whitepaper/)   

Unless explicitly listed, only pages of the web/app assets in addition to the direct link are considered in-scope of the bug bounty program. Other subdomains are not considered as in-scope. However, for subdomain takeovers that lead to an impact on the in-scope asset, please refer to our page about [Reported Subdomain Takeovers.](https://immunefisupport.zendesk.com/hc/en-us/articles/14352199704593-Reported-Subdomain-Takeovers)

BankX Is A Dual-Token System Stablecoin: Stablecoin - BankX Silver Dollar (XSD). The BankX token – Utility token used as partial collateral to mint the stablecoin and stake in the Certificate of Deposit.

Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield

Permanent freezing of funds

Any exploit that results in loss of in either of the liquidity pools or the collateral pool.

Protocol insolvency

Any exploit that results in system or user loss of funds or unauthorized control of the system can be found.

The scope is focused solely on any exploit that results in loss in either of the liquidity pools or the collateral pool.  Contracts are on the BSC chain only.

Rewards are distributed according to the impact the vulnerability could otherwise cause based on the Impacts in Scope table further below. 
In cases of repeatable attacks for smart contract bugs, only the first attack will be counted, regardless of whether the smart contract is upgradable, pausable, or killable.

__Previous Audits__

BankX has provided these completed audit review reports for reference. Any unfixed vulnerability mentioned in these reports are not eligible for a reward.
- [https://docs.bankx.io/docs/doc-SmartContractAudit/ ](https://docs.bankx.io/docs/doc-SmartContractAudit/)

__Proof of Concept (PoC) Requirements__

A PoC is required for the following severity levels:
- Smart Contact, Critical Severity Level

All PoCs submitted must comply with the Immunefi-wide [PoC Guidelines and Rules.](https://immunefisupport.zendesk.com/hc/en-us/articles/9946217628561-Proof-of-Concept-PoC-Guidelines-and-Rules) Bug report submissions without a PoC when a PoC is required will not be provided with a reward.

__Reward Payment Terms__

Payouts are handled by the BankX team directly and are denominated in USD. However, payments are done in USDC.


BankX

Resources & Documentation