In Scope

Account management flaws which would put end-user funds at risk.

General software security vulnerabilities.

Stealing or loss of funds.

Out of Scope

Vulnerabilities that have already been exploited

Theoretical security issues with no realistic exploit scenario(s) or attack surfaces, or issues that would require complex end user interactions to be exploited

Issues determined to be of informational/low/medium severity