All programs
BankID NBU
BankID is the official state remote identification system operated by the National Bank of Ukraine. It enables the secure transfer of users’ personal data from their bank to service providers.
- Total reports
- 17
- In triage
- 10
- Researchers
- 6
Testing scope
We encourage testing all aspects of the BankID system, including the web portal and its APIs. All assets on the following domains are in scope: *.bankid.gov.ua.
Rewards
Rewards depend on vulnerability severity under CVSS 3.0 and the impact on the system’s business logic.
| Severity | CVSS 3.0 | Reward |
|---|---|---|
| Critical | 9.0–10.0 | $5,000 – $10,000 |
| High | 7.0–8.9 | $2,000 – $5,000 |
| Medium | 4.0–6.9 | $500 – $2,000 |
| Low | 0.1–3.9 | $50 – $500 |
Participation rules
Allowed
Test only the assets listed in the program scope.
Not allowed
Do not carry out DDoS attacks.
Researcher contributions6
Researchers who have submitted reports to this program.
| Rank# | Researcher | Reputation | Points | Reports |
|---|---|---|---|---|
| 1 |  prespectiva |
125 | 8 | 8 |
| 2 | morpheus |
45 | 3 | 2 |
| 3 | IgnaTT |
30 | 0 | 3 |
| 4 | Unknown_Soul |
15 | 0 | 1 |
| 5 | Sergey |
4 | 0 | 2 |
| 6 | DemonHunter |
0 | 0 | 1 |